v2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7d:df:c2:51:83:a8:ee:02:e4:a7:3a:58 was issued on by GlobalSign nv-sa.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:df:c2:51:83:a8:ee:02:e4:a7:3a:58
Serial Number (int): 38956134328213236889451706968
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1f:45:fb:9c:04:7d:d1:ec:c1:57:a2:ab:f2:48:17:01:5a:4d:5d:37
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 29:c0:4b:dc:59:40:d1:2e:43:43:c1:33:a7:0e:37:b8:cf:37:a0:c8
Fingerprint (sha256): 07:af:b4:e3:5d:4a:b6:be:d1:a8:ef:e8:7d:c0:9f:e0:da:d8:c3:d1:bf:78:a7:15:83:08:59:4f:64:b8:3b:83

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate v2.shared.global.fastly.net

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for v2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

v2.shared.global.fastly.net
*.99productrules.com
*.api.jetsmart.com
*.demo.connatix.com
*.ebby.com
*.experience-adobe.com
*.helix-demo.xyz
*.hypno.cam
*.hypno.com
*.ikyu.co.jp
*.ikyu.com
*.insider-inc.com
*.insider.com
*.integration.connatix.com
*.kahoot-experimental.it
*.kahoot-stage.it
*.kiwamino.com
*.murtr.businessinsider.com
*.murtr.insider.com
*.murtr.thisisinsider.com
*.phillyvoice.com
*.primordialsoup.life
*.project-helix.dev
*.project-helix.info
*.project-helix.io
*.project-helix.page
*.sentry-cdn.com
*.sherpadm.com
*.sherpadmdevs.com
*.sherpadmstage.com
*.staging.infura.org
*.thehill.com
amzwssl8-clicktale.pw
basco.ezup.eu
beta-m0.stg-g3fastly-1.gazellestaging.com
beta-m0.stg-g3fastly-3.gazellestaging.com
beta-m0.tst-g3fastly-1.cns.gazelle.com
beta-m0.tst-g3fastly-2.cns.gazelle.com
beta.csave.net
booking.jetsmart.com
cache-fastly.nixos.org
cache.nixos.org
cdn.flyweel.co
cdn.static.coinchat.im
cdn.tmsplay.com
cdn2.static.coinchat.im
collective.adage.com
descuentos.abc.es
descuentos.lavanguardia.com
ezup.com
ezup.de
ezup.eu
ezup.fr
ezup.nl
forbescouncils.com
goodtaste.com
helix.adobe.io
helix.adobelaunch.com
hypno.cam
hypno.com
idolvote-test.abc.go.com
image.nengun.com
insider-inc.com
insider.com
insights.cgma.org
link-experimental.getkahoot.com
link-stage.getkahoot.com
liveuseast.squoia.com
media.photolemur.com
media.tbistatic.com
profiles.bizjournals.com
rdrs.ad-score.com
stadtwerke-sommerkino.de
stage.csave.net
thehill.com
thisisinsider.com
vouchers.pointvoucher.com
weber.ezup.eu
www.belk.com
www.best-price-ski-rental.com
www.cartridgesave.co.uk
www.edsurge.com
www.ezup.fr
www.ferrumjs.org
www.gamerworldnews.com
www.gfs.ca
www.gfs.com
www.gift-land.com
www.goodtaste.com
www.grail.bz
www.gunbuyer.com
www.kitachiba-water.or.jp
www.kyureki.com
www.location-ski-moins-cher.com
www.momdeals.com
www.nengun.com
www.oce.co.jp
www.pointvoucher.com
www.run4it.com
www.shortlist.com
www.skidiscount.co.uk
www.skidiscount.fr
www.stadtwerke-sommerkino.de
www.stg-g3fastly-1.gazellestaging.com
www.stg-g3fastly-2.gazellestaging.com
www.the-ambient.com
www.thebasewarehouse.com.au
www.traveler-store.com
www.wareable.com
www.workyard.com
wwwsit.gfs.ca
wwwsit.gfs.com
yec.co

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for v2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gUwziHTXtysTdEUgBhO
aX9vAqDdtJjJGYtlQTWtry+3aI3fvX6mUblLE1NQ/hoDYQuxZRDKIbLfdqA1V8Vx
kjpInoRPyFArY8nfYLJgopeiprtEu/inmS/Ja2P1dkw25KA1XxHcJPM919aVpOGA
CqBb9UV5GYeHu3OMrDdODDopumPRi8GyWynwymp4/SpyZ3PCZDYW1c+Ivxm8dSFk
ruV3odjIK9mE4q1kzrjwK+VtGPE/ppsI+bie6yYokZO4U5rfXa1WyfYXIBf0WdYK
xjfTc1cl0MmsfQDDCTzNxw8thPFaNCh9TTl1altAKAxViPPf9T/Dqk11wWxDK9yM
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38956134328213236889451706968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 09:55:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 21:35:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'v2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26512603645480608842029288617836350583060703229581310103927746576613142882396818699537390017220448809779152648445687460633835872244485563385945339129382338557903112589403285475319598540235159025753238171344994301690494445882725097695215775444990554015325610344250708687621797310949229018656003103516709072180614476587703410338585305510641894121826529231634535653839747109955981919472576105741883421097313319595532789661721363971267834720682719527510795995505022995612585961910022056692738693498915120409634477482398694727051450606772996678014117515292814410111169552843049002994134072667949970374209157769831644957777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99productrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.jetsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.connatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experience-adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helix-demo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.connatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-experimental.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-stage.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwamino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.businessinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phillyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primordialsoup.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentry-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmdevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.infura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzwssl8-clicktale.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basco.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-3.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-1.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-2.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.jetsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache-fastly.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.flyweel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tmsplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collective.adage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.abc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.lavanguardia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbescouncils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobelaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolvote-test.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.cgma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-experimental.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-stage.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveuseast.squoia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.photolemur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tbistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profiles.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdrs.ad-score.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-sommerkino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchers.pointvoucher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weber.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.best-price-ski-rental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartridgesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferrumjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerworldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gift-land.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grail.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunbuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitachiba-water.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyureki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.location-ski-moins-cher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oce.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointvoucher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shortlist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skidiscount.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skidiscount.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadtwerke-sommerkino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-2.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-ambient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasewarehouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveler-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wareable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f45fb9c047dd1ecc157a2abf24817015a4d5d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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