l2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 71:b0:68:e0:46:d4:55:b4:af:9a:9e:6b was issued on by GlobalSign nv-sa.

With 130 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:b0:68:e0:46:d4:55:b4:af:9a:9e:6b
Serial Number (int): 35185072317352856966936567403
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ef:1a:0f:78:c3:1a:c5:31:57:e8:93:78:31:b9:5b:fd:29:ac:e9:e1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e0:a1:ec:ed:92:9d:31:77:ba:69:18:b7:76:0f:5a:54:f2:18:eb:e6
Fingerprint (sha256): 06:8c:a8:b4:64:18:b8:77:41:df:9d:ea:78:15:38:00:5d:1d:a9:95:ae:39:8d:20:26:d9:5c:f6:ea:c1:44:01

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate l2.shared.global.fastly.net

130

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l2.shared.global.fastly.net
*.ad-magazin.de
*.aerotelegraph.com
*.comicbook.com
*.condenast-manufaktur.de
*.condenast.de
*.disquscdn.com
*.dpl.unicornmedia.com
*.fs.kodakmoments.com
*.fs.wetravel.com
*.fs.yourconfigurator.com
*.ghsupplychain.net
*.ghsupplychain.org
*.glamour.de
*.gq-magazin.de
*.harveynichols.com
*.hndev.xyz
*.hng.io
*.inquisitr.com
*.kindstorystaging.com
*.lifedaily.com
*.llvm.org
*.lrm.fr
*.mancrates.com
*.media.brightcove.com
*.menoftheyear.de
*.mmlafleur.com
*.modeanalytics.com
*.modesandbox.com
*.omniexternal.net
*.payasugym.com
*.penningtonandbailes.com
*.pon.bike
*.popculture.com
*.radio.com
*.rezetstore.dk
*.simplero.com
*.simplerousercontent.net
*.solsticesunglasses.com
*.sportmaster.dk
*.sportmasteronline.dk
*.srsly.ch
*.stnet.ch
*.success.disqus.com
*.surge.io
*.theonion.com
*.unicornmedia.com
*.upworthy.com
*.vogue.de.staging.cni.digital
*.wallapop.com
*.yoigo.com
ad-magazin.de
aerotelegraph.com
app.plattar.com
bbbcycling.com
cdn-us.air.tv
cdn-us.staging.air.tv
cdn.air.tv
cdn.cake.co
cdn.cakery.io
cdn.skinmotion.com
cdn.staging.air.tv
ci.secretcdn.net
condenast-manufaktur.de
condenast.de
dev.fl.bankaletihad.com
digitalexperience.swisscom.ch
disquscdn.com
draft.premierleague.com
etf.invesco.com
fs.wetravel.com
ghsupplychain.net
ghsupplychain.org
glamour.de
gq-magazin.de
harveynichols.com
idahobit.org.au
images2.productserve.com
infiniscope.org
inquisitr.com
kindstorystaging.com
llvm.org
lrm.fr
mancrates.com
media.brightcove.com
menoftheyear.de
minus18.org.au
mmlafleur.com
modeanalytics.com
modesandbox.com
omniexternal.net
penningtonandbailes.com
pon.bike
powersharesetf.com
presenter.automatic.com
radio.com
rezetstore.dk
s.oprm.co
simplero.com
simplerousercontent.net
solsticesunglasses.com
sportmaster.dk
sportmasteronline.dk
srsly.ch
staging.cakery.io
staging.comicrelief.com
staging.plattar.space
stnet.ch
surge.io
t.oprm.co
theonion.com
uat.fl.bankaletihad.com
unicornmedia.com
upworthy.com
vogue.de.staging.cni.digital
www.arbeitgeber.ch
www.basware.com
www.cake.co
www.comicrelief.com
www.encyclopedia.com
www.focus-bikes.com
www.idahobit.org.au
www.indexventures.com
www.kinderzirkus.ch
www.lifed.com
www.minus18.org.au
www.penningtonandbailes.com
www.powersharesetf.com
www.sameworks.com
yoigo.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for l2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c39r5BHZ3AT+38+PHN4
wTRLuFmv6FZCIGS5kXojTAqHybWXot/DGKa6vDN2mJfMEYnjS/+Zr0S9XgBtY/Uh
SXHkmGDCytg1bBbCCV5yMVd16QnFt+LPkawd23fEE/l1iAC7+CQ9SC18IxN5QQaP
NpRIVvSIoH+hRpzikQLtpAObSz/gTcDyR//uOHbhcJ2GN6BxSA/DtfG0297+hT2L
dZAA+qFS7VrribUVBqW+Gg5ATNWMt+/V1dN0tw7SVjTF08B/c3vFLDWVQh78Wwwg
353+/zhfzzDlxX8dsVJk1TijPp5phKCHH06pFCQVJsZJdKYGx7MDvlxm2BEffpAP
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35185072317352856966936567403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 22:19:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 00:13:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'l2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27495290105939893985752914132414097334657475718135911258804332110260726320621773645443546708332699705924525854694116322724577215249864038621314546551728691691743788180265134219373222160500224504784058626192124990010236599833606403996798224587415019557528204969458499290487626750934091324428603358870367995650218111708275379349331077584521436227065668945942062277943689981117790887035000692281884333680275360325546034553643066495050515158772859159700003570431485002157035256587836014633589767624185268472073167484829306413327760579459277389990053101282810165382093923850375360731034504274943488077204141916251336216539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerotelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comicbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condenast-manufaktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condenast.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disquscdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dpl.unicornmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.kodakmoments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.wetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.yourconfigurator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghsupplychain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghsupplychain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harveynichols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hndev.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hng.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inquisitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindstorystaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llvm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mancrates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menoftheyear.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmlafleur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modeanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modesandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omniexternal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payasugym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penningtonandbailes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pon.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rezetstore.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplerousercontent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solsticesunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportmasteronline.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srsly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.success.disqus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theonion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unicornmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upworthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vogue.de.staging.cni.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallapop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerotelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.plattar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbbcycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-us.air.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-us.staging.air.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.air.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cake.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cakery.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.skinmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.staging.air.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.secretcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenast-manufaktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenast.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fl.bankaletihad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disquscdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draft.premierleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf.invesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.wetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsupplychain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsupplychain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveynichols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahobit.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images2.productserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infiniscope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquisitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindstorystaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llvm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancrates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menoftheyear.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minus18.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmlafleur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modeanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modesandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniexternal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penningtonandbailes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pon.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powersharesetf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presenter.automatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezetstore.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.oprm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplerousercontent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solsticesunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportmasteronline.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srsly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cakery.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.comicrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.plattar.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.oprm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theonion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fl.bankaletihad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicornmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upworthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.de.staging.cni.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbeitgeber.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cake.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comicrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encyclopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.focus-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahobit.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indexventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinderzirkus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minus18.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penningtonandbailes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powersharesetf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sameworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef1a0f78c31ac53157e8937831b95bfd29ace9e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005bcb693fbefaa6332559fedf24fef0765f071e41acdca7c25160629f50987a51f0cd713754dba4dc0b0633784d7a124880b9e75ae7a9d2e87f12c44ffa7110f4b6abe279c030c4a6306c07da468d36f74ab497e6381c43f41927ffa0d8da93dd288e52a05d33082704072132e990294ead7cd9b6e025676458943dacbab692b46de801394e223e59b0fb9a048cf2cad6f6ac342c8704ba7add4fe971617bf58844d6e46ffc30f0929d22826e9b13017a68982f2cfe7246c5a2261af9253b4185ae60f7d16d22167d8ada3dc0ae6ed627cb4cb1333532ffb91f39a0911ba5a69a3df02afc3879bbc13600f888fe2d4dbbe1fafe49d948675287fd9eaa90b74c20