w2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3b:63:9e:43:5f:53:e4:bc:67:b7:23:1c was issued on by GlobalSign nv-sa.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:63:9e:43:5f:53:e4:bc:67:b7:23:1c
Serial Number (int): 18380046612306439040056894236
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5a:e5:33:c9:b0:e7:90:9a:73:66:fa:d4:26:81:29:df:44:fd:fa:e4
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 60:b7:79:3f:34:a1:0d:6d:15:ee:85:f6:a4:22:b7:8e:8d:ab:0f:2f
Fingerprint (sha256): 09:b9:eb:98:26:00:a7:43:f9:fc:a6:f5:72:5b:ba:6b:62:ce:9f:14:50:c8:83:57:46:49:8f:29:2c:d9:a5:8d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate w2.shared.global.fastly.net

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for w2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

w2.shared.global.fastly.net
*.abi-sandbox.net
*.awarasleep.com
*.betterware.com.mx
*.blurb.com
*.cdn.viaplay.tv
*.clicksend.com
*.colchonesnectar.com
*.complex.com
*.complexcon.com
*.complexnetworks.com
*.fastly.9c9media.com
*.firstwefeast.com
*.levelsleep.com
*.medicalnote.info
*.moovweb.com
*.nectarsleep.co.uk
*.ottobeanbag.com
*.pigeonsandplanes.com
*.ratedred.com
*.rexhomes.com
*.sabconnect.co.za
*.solecollector.com
*.sportrx.com
*.timeshigher.co.uk
*.timeshighereducation.com
*.uncn.jp
alpha.neurodiem.com
alpha.neurodiem.de
api.autoura.com
artifactbuff.com
awarasleep.com
benefits.baesystems.com
betterware.com.mx
blenderseyewearrx.com
cdn.rexchange.com
cdn.rexhomes.com
cdn.wevoteusa.org
cdn1.wine-searcher.net
clicksend.com
colchonesnectar.com
complex.com
complexcon.com
complexnetworks.com
ct.mail.discogs.com
dev-conv-micerveceria.abi-sandbox.net
dev-conv-sabconnect.abi-sandbox.net
deviceguides.vodafone.ie
devshop.hornblower.com
fastly.rexchange.com
fcdn.real-debrid.com
firstwefeast.com
fy.v.vrv.co
get.backtrace.io
greenz.jp
hijup.com
images.pilatesanytime.com
images.yogaanytime.com
levelsleep.com
manuales.vodafone.es
mobilesupport.telstra.com.au
moovweb.com
muckrack.us
nectarsleep.co.uk
ottobeanbag.com
pigeonsandplanes.com
pxl.ai
qa-conv-sabconnect.abi-sandbox.net
ratedred.com
safetyglassesusarx.com
scoutgaminggroup.com
shop.hornblower.com
solecollector.com
soporteequipos.movistar.com.ec
soporteequipos.movistar.cr
sportrx.com
staging.fanteam.com
staging.newrepublic.com
taiga.allure-ng.net
test-conv-sabconnect.abi-sandbox.net
test.krzemo.com
tsuyaplus.jp
uat-www.soccerbase.com
video-cdn.aya.quipper.net
video-cdn.studysapuri.jp
wevote.us
wholesale.accuquilt.com
www.KaenonRx.com
www.accuquilt.com
www.craiggroeschel.com
www.directexpose.com
www.finance101.com
www.heatwavevisualrx.com
www.hijup.com
www.history101.com
www.icepop.com
www.living101.com
www.neurodiem.com
www.neurodiem.fr
www.openyard.com
www.pepboys.com
www.pickswise.com
www.ride100percentrx.com
www.science101.com
www.scoutgaminggroup.com
www.soccerbase.com
www.spyhappyrx.com
www.tasaki.co.uk
www.tiebreaker.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for w2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05V1CMX3AGP0yJ4QTPHA
lbd/Pg8t8SMcDspaDz1UFvO2mdMo3u5rinpE0Qo1BINf6oVmW2/wradf3yfILGwl
XIxSrEOCTFEOXoYWH0KqhnrbBPpEpsSHwF9Olj3vVPxex953TgUvQfA1czrC1Jj7
H/EbWZmGVg2glY/hn3l5qptlsxQR3y9ExRTbugdePsvxdRzO2udPLwGTEPZBIkll
wSEkw2ODOh/klInP8JQsImkKJlqX4z/OgFkW3f+A9PJMpoVik77JqCa/EoQOI9xP
iJB0Kg3OJK2cEM2Gp60k/RxyHDPKACXtkKZ7vsXXTWlNGGzPwB9/ovrDWDwW1sXH
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18380046612306439040056894236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 13:43:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 19:33:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'w2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26709982422798420830482054660493270391162130383481417304914340009569930490566984877448412536787187984167574475034849054539790517896140383139910489724815460728746329955365936677266179887406388308052436964417456955804303406807764418631199596186279777475905372480330982028923555367293372777670748112174888305559517498957574914947236802128531414905592460924480372256032865034349341775764642968375969044298159942790118746877500452804070559325302973135898461701040233956695400275529895766594341202409136323977058028208123021760773157063114528939651314886803320033883185157048711704112210154841377543132266956232041548859247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abi-sandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awarasleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterware.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blurb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.viaplay.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clicksend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colchonesnectar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.complex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.complexcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.complexnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.9c9media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstwefeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.levelsleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicalnote.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moovweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nectarsleep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottobeanbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pigeonsandplanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratedred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rexhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabconnect.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solecollector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeshigher.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeshighereducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.neurodiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.neurodiem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.autoura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactbuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awarasleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.baesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterware.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenderseyewearrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rexhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wevoteusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.wine-searcher.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicksend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colchonesnectar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complexcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complexnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.mail.discogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-conv-micerveceria.abi-sandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-conv-sabconnect.abi-sandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviceguides.vodafone.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devshop.hornblower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.rexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcdn.real-debrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwefeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fy.v.vrv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.backtrace.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenz.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hijup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pilatesanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.yogaanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelsleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuales.vodafone.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilesupport.telstra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moovweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muckrack.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nectarsleep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottobeanbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pigeonsandplanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxl.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-conv-sabconnect.abi-sandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratedred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetyglassesusarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoutgaminggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hornblower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solecollector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporteequipos.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporteequipos.movistar.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.fanteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.newrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiga.allure-ng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-conv-sabconnect.abi-sandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.krzemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsuyaplus.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.soccerbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-cdn.aya.quipper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-cdn.studysapuri.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wevote.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.accuquilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.KaenonRx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accuquilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craiggroeschel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directexpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finance101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatwavevisualrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hijup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.history101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icepop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.living101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurodiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurodiem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickswise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ride100percentrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scoutgaminggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soccerbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spyhappyrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasaki.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiebreaker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ae533c9b0e7909a7366fad4268129df44fdfae4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168bde61813000004030047304502210080648e5f77fa4aefc6b23f80f9be16624044efaf3c4a67ac498273d3b4b45ae202204fc73cb75cfc480b47f96f72674801bb7e261240f8f9115ff18955ba9d869aca007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000168bde61878000004030047304502205f42382299347ff1e0f848a9a44363aae2b2a24447c9ea807e3517192b25b3e2022100fac6f7b58412b6897d638357e32d4b1a73f52fabc24e881902b779d61105e8b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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