u2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7a:6c:3d:88:e7:2c:86:d6:14:8a:35:a6 was issued on by GlobalSign nv-sa.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:6c:3d:88:e7:2c:86:d6:14:8a:35:a6
Serial Number (int): 37888025776492964783910958502
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 57:e7:1a:c5:aa:c4:65:7c:eb:68:b5:59:8d:26:80:2a:74:c5:61:dd
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 0c:58:3b:64:ab:9f:1b:c4:c8:41:a3:cb:21:94:d0:3d:e3:15:99:f0
Fingerprint (sha256): 08:81:51:fb:e3:67:c5:86:06:1f:d4:64:20:6c:f7:be:36:47:21:b4:65:a4:72:07:49:dc:a1:13:49:9a:f6:f4

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate u2.shared.global.fastly.net

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u2.shared.global.fastly.net
*.alizila.com
*.art19.com
*.basicattentiontoken.org
*.boardroom.media
*.cdn.appcues.com
*.dev.s8.network
*.elifesciences.org
*.fileleftheros.gr
*.golfbreaks.com
*.greenentrepreneur.com
*.hoteltonight-test.com
*.hoteltonight.com
*.hudl.com
*.id90travel.com
*.itsrosy.com
*.liberal.gr
*.livesense.co.jp
*.lumity.com
*.mabelandmoxie.com
*.mawdoo3.life
*.nirvc.com
*.pictures.itsrosy.com
*.pictures.mabelandmoxie.com
*.potatojar.com
*.potatojar.net
*.procorecon.com
*.procoretech-qa.com
*.prod.s8.network
*.production.cdn.art19.com
*.rollingstone.pmcqa.com
*.s3.brave.com
*.staging.art19.com
*.staging.cdn.art19.com
*.staging.twmlabs.com
*.stagingspaceship.com.au
*.stagingspaceshipinvest.com.au
*.sweetwater.com
*.the-cover-store.com
*.thechannel.store
*.twmlabs.com
*.usconcealedcarry.com
*.voyager.s8.network
*.withings.com
*.yarntest.com
*.yarntest.net
2022cm8.com
api.packet.net
app.betterimpactcdn.com
artist-tst.api.fly.cdn.hbo.com
artist.api.fly.cdn.hbo.com
artist.staging.hurley.fly.cdn.hbo.com
az93.alizila.com
basicattentiontoken.org
boardroom.media
c.crm-kozuchi.com
cdn-f.adsmoloco.com
cdn.karvmeals.com
cdn2.funnelenvy.com
cdn3.funnelenvy.com
cdn5.wwe.com
devspaceshipinvest.com.au
discourse.bitgem3d.com
dvwa.techiegroup.com
elifesciences.org
fileleftheros.gr
fly.cdn.hbo.com
fstlive.kaltura.com
greenentrepreneur.com
hoteltonight-test.com
hoteltonight.com
id90travel.com
klive.kaltura.com
liberal.gr
lumity.com
lvimg.jp.stg.lvs.space
mbtmedia.com
nirvc.com
play.wstreams.com
procoretech-qa.com
stagingspaceship.com.au
stagingspaceshipinvest.com.au
static.getwritable.com
t.retargeter.com
thechannel.store
tickets.nflonlocation.com
totalwine.com
usconcealedcarry.com
virginamerica.com
vod1.kaltura.com
www.SiliconeDynamics.net
www.aft.org
www.basicattentiontoken.org
www.macrotrends.net
www.predictem.com
www.secretlove79.com
www.thebigprint.co.uk
www.thesmbguide.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for u2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Rf+lq6YfAvYxjIs1rX
H/TRJf8/vChHiEH0BZ/LwEHPPkJ5WuRdM5I7YYJrhpnuLD8C4qscUOUACEH+k1j6
tWmN67fxbJ0bs1ZLkP3uMJLbe1Fjw0cil/l1RqHvt8j4gcf84Z3pMOgO5QtAeqnA
6rTgtsVoy7wlOBHGbWrGAkDw116D/EL1K4D80MbIs9sQHbG+mMYy24ypkzvljuzx
mpFzrGAUXac7qFmqQLEvaN7UUz866jP9moj3FBogUImFU8gLJ2ALvVWPW25S/9IG
jlhcr/zg36Tffmfc9itgVNhSKQPw43Rol1swjZQnk4FVNpvG8t802vIvWrJH6aaQ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37888025776492964783910958502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 08:34:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 20:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'u2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25715322093201556743925983685501859602381528532849680189164513774400263906747568970831551681516034056199543696525607676504474686200343774416606247870177534872845891154904562714180493728021166884427780886061158867940709635266324608007407040260600476241849106466327083676680682043656334825810218866365005503616251557632683584120078339391306029661864352584598231209375301245987036228322319213220574756998136923145888161863218809535017875741204878465025632132318033140124166926360349311174135171518338727597096602670130832430653675655802367494118633270214541060246655037470762849972428852345542422906349240363910498259129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alizila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s8.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fileleftheros.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfbreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.id90travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liberal.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesense.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mawdoo3.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potatojar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potatojar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procorecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procoretech-qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.s8.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollingstone.pmcqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagingspaceship.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagingspaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-cover-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thechannel.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyager.s8.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarntest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarntest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022cm8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.packet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.betterimpactcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist-tst.api.fly.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.api.fly.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.staging.hurley.fly.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az93.alizila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.crm-kozuchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-f.adsmoloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.karvmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn5.wwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devspaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discourse.bitgem3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvwa.techiegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileleftheros.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fly.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstlive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id90travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberal.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvimg.jp.stg.lvs.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.wstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procoretech-qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingspaceship.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingspaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.getwritable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retargeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechannel.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nflonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod1.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.SiliconeDynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrotrends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.predictem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretlove79.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesmbguide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57e71ac5aac4657ceb68b5598d26802a74c561dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001649d1365ce000004030047304502202ef1e421c7f80ff7ece561818368f453ec0dc07f87a8194df3b69e138e5e7e5e022100b0376e52d9b667390993c0e2f2694e6468c265d005d7bb10a698a0918a8cb1780076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001649d1364a60000040300473045022100c022c382ab56613123e68400bf63373b88517fd52bb301a054f178a7a58cfe1e022036ecbaccfdc7d01fb65ecf2c05e6fc51c14f34ae7b185c3c0f76a879408968bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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