v2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 37:3a:ee:5a:92:7b:67:7f:5f:a9:f5:67 was issued on by GlobalSign nv-sa.

With 111 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 37:3a:ee:5a:92:7b:67:7f:5f:a9:f5:67
Serial Number (int): 17092918831696660829852792167
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1f:45:fb:9c:04:7d:d1:ec:c1:57:a2:ab:f2:48:17:01:5a:4d:5d:37
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 7a:26:ba:61:d2:a1:4a:c0:93:20:13:c8:6e:35:dd:ca:e6:79:70:47
Fingerprint (sha256): 06:34:0f:f4:df:e8:f7:cf:d2:ab:f7:fe:94:06:79:02:69:11:9f:af:f1:6a:c2:d2:64:37:00:46:8e:f7:2d:7e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate v2.shared.global.fastly.net

111

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for v2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

v2.shared.global.fastly.net
*.99productrules.com
*.beyondthenest.com
*.buzzfeednews.com
*.cw-aviation.com
*.demo.connatix.com
*.ebby.com
*.experience-adobe.com
*.helix-demo.xyz
*.hypno.cam
*.hypno.com
*.ikyu.com
*.insider-inc.com
*.insider.com
*.integration.connatix.com
*.kahoot-experimental.it
*.kahoot-stage.it
*.murtr.businessinsider.com
*.murtr.thisisinsider.com
*.phillyvoice.com
*.primordialsoup.life
*.project-helix.info
*.project-helix.io
*.sentry-cdn.com
*.sherpadm.com
*.sherpadmdevs.com
*.sherpadmstage.com
*.staging.infura.org
*.telenor.se
*.thehill.com
*.vodafoneresolutions.live
amzwssl8-clicktale.pw
basco.ezup.eu
beta-m0.stg-g3fastly-1.gazellestaging.com
beta-m0.stg-g3fastly-3.gazellestaging.com
beta-m0.tst-g3fastly-1.cns.gazelle.com
beta-m0.tst-g3fastly-2.cns.gazelle.com
beta.csave.net
beyondthenest.com
booking.jetsmart.com
buzzfeednews.com
cache-fastly.nixos.org
cache.nixos.org
cdn.flyweel.co
cdn.static.coinchat.im
cdn.tmsplay.com
cdn2.static.coinchat.im
couponsstation.com
descuentos.abc.es
descuentos.lavanguardia.com
edge.papi.qa.brightcove.com
ezup.com
ezup.de
ezup.eu
ezup.fr
ezup.nl
forbescouncils.com
helix.adobe.io
helix.adobelaunch.com
hypno.cam
hypno.com
idolvote-test.abc.go.com
image.nengun.com
insider-inc.com
insider.com
link-experimental.getkahoot.com
link-stage.getkahoot.com
liveuseast.squoia.com
media.naavi.com
media.photolemur.com
media.tbistatic.com
profiles.bizjournals.com
rdrs.ad-score.com
sa.senetic.com
stage.csave.net
telenor.se
thehill.com
thisisinsider.com
trust.bizjournals.com
weber.ezup.eu
www.belk.com
www.best-price-ski-rental.com
www.cartridgesave.co.uk
www.edsurge.com
www.ezup.fr
www.gamerworldnews.com
www.gfs.ca
www.gfs.com
www.gift-land.com
www.grail.bz
www.gunbuyer.com
www.kitachiba-water.or.jp
www.kyureki.com
www.location-ski-moins-cher.com
www.nengun.com
www.run4it.com
www.senetic.ae
www.senetic.ca
www.senetic.com
www.senetic.com.au
www.skidiscount.co.uk
www.skidiscount.fr
www.stadtwerke-sommerkino.de
www.stg-g3fastly-1.gazellestaging.com
www.stg-g3fastly-2.gazellestaging.com
www.thebasewarehouse.com.au
www.traveler-store.com
www.workyard.com
wwwsit.gfs.ca
wwwsit.gfs.com
yec.co

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for v2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gUwziHTXtysTdEUgBhO
aX9vAqDdtJjJGYtlQTWtry+3aI3fvX6mUblLE1NQ/hoDYQuxZRDKIbLfdqA1V8Vx
kjpInoRPyFArY8nfYLJgopeiprtEu/inmS/Ja2P1dkw25KA1XxHcJPM919aVpOGA
CqBb9UV5GYeHu3OMrDdODDopumPRi8GyWynwymp4/SpyZ3PCZDYW1c+Ivxm8dSFk
ruV3odjIK9mE4q1kzrjwK+VtGPE/ppsI+bie6yYokZO4U5rfXa1WyfYXIBf0WdYK
xjfTc1cl0MmsfQDDCTzNxw8thPFaNCh9TTl1altAKAxViPPf9T/Dqk11wWxDK9yM
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17092918831696660829852792167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 01:22:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 20:22:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'v2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26512603645480608842029288617836350583060703229581310103927746576613142882396818699537390017220448809779152648445687460633835872244485563385945339129382338557903112589403285475319598540235159025753238171344994301690494445882725097695215775444990554015325610344250708687621797310949229018656003103516709072180614476587703410338585305510641894121826529231634535653839747109955981919472576105741883421097313319595532789661721363971267834720682719527510795995505022995612585961910022056692738693498915120409634477482398694727051450606772996678014117515292814410111169552843049002994134072667949970374209157769831644957777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99productrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beyondthenest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cw-aviation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.connatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experience-adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helix-demo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.connatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-experimental.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-stage.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.businessinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phillyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primordialsoup.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentry-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmdevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.infura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telenor.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodafoneresolutions.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzwssl8-clicktale.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basco.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-3.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-1.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-2.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondthenest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.jetsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache-fastly.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.flyweel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tmsplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couponsstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.abc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.lavanguardia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.papi.qa.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbescouncils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobelaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolvote-test.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-experimental.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-stage.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveuseast.squoia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.naavi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.photolemur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tbistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profiles.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdrs.ad-score.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.senetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telenor.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weber.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.best-price-ski-rental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartridgesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerworldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gift-land.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grail.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunbuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitachiba-water.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyureki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.location-ski-moins-cher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skidiscount.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skidiscount.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadtwerke-sommerkino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-2.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasewarehouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveler-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f45fb9c047dd1ecc157a2abf24817015a4d5d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001683a80cb77000004030046304402200f6a0e6c1f05e07e8c6678eb5cad1a701215f096429d96f303075b3c2ea742aa02207bc20d5f1d563ed4dbcd7fd9d90bcd85f1d956f9ed2baed412b47c44afdfc247007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001683a80c85c0000040300483046022100c72592aad5ca9c85ca4ec66621292ec0d50a73846f9d91fdfcf0997201aa8380022100c54563e0eccfce6e5819b8a24628fe42ab0af0fff4d14406a2286336b24305ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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