g2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 79:ef:a1:e4:0e:3d:4d:78:52:46:f8:4c was issued on by GlobalSign nv-sa.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 79:ef:a1:e4:0e:3d:4d:78:52:46:f8:4c
Serial Number (int): 37737383967158101976392595532
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 49:a7:84:70:de:c1:83:2b:2c:81:b9:53:8a:71:86:57:6d:94:59:42
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 0e:e6:ec:fa:07:ff:b3:28:56:4f:6a:c1:23:af:9e:52:b3:1c:dd:e2
Fingerprint (sha256): 0a:25:a1:55:17:64:3e:d7:1c:dc:a2:e9:09:8c:40:64:44:06:35:f4:37:92:82:4f:6c:e5:64:38:65:0c:8e:20

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate g2.shared.global.fastly.net

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for g2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

g2.shared.global.fastly.net
*.abritel.fr
*.admailtiser.com
*.apartmenttherapy.com
*.apttherapy.net
*.b12sites.com
*.basebanner.com
*.bedandbreakfast.com
*.birchandfog.com
*.cbarsrv.com
*.compatiblepartners.com
*.coop.co.uk
*.dev.slate.com
*.donorschoose.net
*.donorschoose.org
*.escapia.com
*.everesttech.net
*.files.trnnd.io
*.forbes.com
*.fs.adoveo.com
*.fs.brandfolder.com
*.fs.greatwithtalent.net
*.fs.liondemand.com
*.fs.teamsynced.com
*.fusion.net
*.geniale.com
*.gensler.com
*.gocmsrv.com
*.graphcms.com
*.greenhouse.io
*.haringey.gov.uk
*.hmwy.io
*.medallia.com
*.modcloth.com
*.onionstudios.com
*.outlyer.com
*.percipio.com
*.saleae.com
*.slate.com
*.stage.slate.com
*.staging.saleae.com
*.staging.zeit.de
*.stayz.com.au
*.student.com
*.supportingcast.co
*.taboola.com
*.teracreative.com
*.thekitchn.com
*.tubemogul.com
*.vimeocdn.com
*.virginmediabusiness.co.uk
*.vrbo.com
*.vrbo.io
*.wfm.com
*.wonderbly.com
*.zeit.de
a.ripco.de
admailtiser.com
api.cardplusapp.com
api.twizoo.com
b12sites.com
bedandbreakfast.com
birchandfog.com
blogs.biomedcentral.com
cbarsrv.com
ccnwebcams.com
cdn.rangetouch.com
cdn.shr.one
charitywateruk.org
compatiblepartners.com
coop.co.uk
donorschoose.net
donorschoose.org
f.exp.gy
fs.adoveo.com
fusion.net
geniale.com
gocmsrv.com
googlecloud.mapsindoors.com
greenhouse.io
haringey.gov.uk
hashidays.com
hmwy.io
hosting.videomize.tv
howchoo.com
liondemand.com
media.paulsmith.com
media.selfturn.jp
modcloth.com
modcloth.net
onionstudios.com
peak.abeam.com
qas-peak.abeam.com
redux.stage.slate.com
resources.be.bookingdirect.com
s8t.teads.tv
saleae.com
services.premierenetworks.com
slate.com
staging.saleae.com
staging.zeit.de
stockservice.vimeo.com
student.com
teracreative.com
trip-tile.citymaps.io
tubemogul.com
tv.iheart.com
virginmediabusiness.co.uk
vrbo.io
wfm.com
wistia.st
wonderbly.com
www.avvoheadshots.com
www.avvoimages.com
www.cilecenter.org
www.hashidays.com
www.homesforharingey.org
www.musixmatch.com
www.mustang-jeans.com
www.planforbritain.gov.uk
www.researchandmarkets.com
www.swellbottle.com
www.timeoutisrael.ru
zeit.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for g2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUSBU5P5vPuoNrDtHyt
Tq652B9G2bCp1fI8sr/EUdhbQ38gZcKOzdsSn/TwLEESGhF/UZZgtwO764PG/x07
0J+lnZDxSXFQugl/BjlwQ/PBm0+fN1LkxxVrlzf6fN3k0kDHfo0fiRAr0c+fYjvE
+2pNYNZbbqOgaIa8MwLazO/4GKVdvVbbe66ODZTM9YsNe5Gyqi22saUDzBwZW0dg
n1Yxgmd9oi3EgvlhwOO67aGEnq1Cban9oqDGJdooIKQBNmOkEls8DXJ00OadrPHF
LfXyfL8Tw3S0sM/TOnrjW/g7PBEDYVoAv6kR9122BGgkVa5AORZp929+ajhqYlQU
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37737383967158101976392595532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 15:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 18:11:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'g2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20563564225550381765136978563481723765305251219363641530345875784643557654575701944554600239793651097404184279544473682879671411144741059427376520819771531431477747726987973767879243067569213857809340392090319945622550252854692909380274656160175149253404093354720118849994817301094790044443017153194748181212704929261230818102803356107754923805253452227962176116573290963066128129356562621200366035947723768934228829689625159825786531360621126062763278386029798796692435278361810349867040415481976025093270945340955546101759374690095307337703013360141803724844698616076262038535903325556332067434465002557536648565973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abritel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admailtiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartmenttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b12sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birchandfog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbarsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compatiblepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.slate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escapia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everesttech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.trnnd.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.adoveo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.brandfolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.greatwithtalent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.liondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.teamsynced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geniale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gocmsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haringey.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmwy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modcloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onionstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.percipio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.slate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.student.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportingcast.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taboola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teracreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekitchn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginmediabusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wonderbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.ripco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admailtiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cardplusapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.twizoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b12sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birchandfog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.biomedcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbarsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnwebcams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rangetouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shr.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitywateruk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compatiblepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.exp.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.adoveo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocmsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlecloud.mapsindoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haringey.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmwy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.videomize.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howchoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.paulsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.selfturn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onionstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peak.abeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas-peak.abeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redux.stage.slate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.be.bookingdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's8t.teads.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.premierenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockservice.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teracreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip-tile.citymaps.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.iheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginmediabusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrbo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wistia.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avvoheadshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avvoimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cilecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hashidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesforharingey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musixmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mustang-jeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planforbritain.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.researchandmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swellbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeoutisrael.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49a78470dec1832b2c81b9538a7186576d945942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016644e3eec30000040300463044021f150ed052f8ffd1e700314fbf03540993d76208b260d51b7daf531fd0108ba90221008b55c5054453fbabbf07336c03d7123bbc16c991969a37a99cbf8ee726f859f3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016644e3f214000004030047304502202b734c8b0a6bd8ef626d919a5b17f165fc8f14c9b513f2f90858bc3d49961776022100cfada84e046bd11d029417670e56a1fe9b16a90c37f71a8ebfccfac8c480b6da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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