t2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 6e:16:86:d2:a1:a9:e3:4f:1a:d7:57:f7 was issued on by GlobalSign nv-sa.

With 117 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:16:86:d2:a1:a9:e3:4f:1a:d7:57:f7
Serial Number (int): 34070584130953531253096667127
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8e:54:a3:6f:ca:fb:bf:40:37:1f:ea:14:20:54:71:4f:69:e8:c3:78
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a5:c5:7f:3b:2d:e6:b1:fd:06:c3:90:53:d3:7b:47:38:e5:d2:55:28
Fingerprint (sha256): 0a:fe:cb:c6:76:97:21:27:2e:9d:6b:9a:38:c3:56:40:62:fa:5f:09:3f:16:fb:1c:75:58:ed:fc:67:4a:1d:7e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate t2.shared.global.fastly.net

117

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t2.shared.global.fastly.net
*.aclu.org
*.api.ethos.io
*.aqualibi.be
*.basemaps.cartocdn.com
*.bff.fm
*.cartocdn.com
*.cdn.sewest.net
*.clubhouse.io
*.clubhousehq.com
*.ddev1.worldnow.com
*.dsr.dk
*.dsys1.franklyinc.com
*.dsys1.worldnow.com
*.dua1.worldnow.com
*.filesusr.com
*.franklychat.com
*.goabstract.com
*.gopropellergo.com
*.gudrunsjoden.com
*.imagesddev1.worldnow.com
*.imagesdsys1.worldnow.com
*.imagesdua1.worldnow.com
*.kaligo.com
*.kc-usercontent.com
*.manageddev1.worldnow.com
*.managedsys1.worldnow.com
*.managedua1.worldnow.com
*.membercenter.worldnow.com
*.outbrainimg.com
*.playbattlegrounds.com
*.rebtel.com
*.rednoseday.org
*.riachuelo.com.br
*.shopflamingo.com
*.stg.flamingo.harrys.systems
*.video.franklyinc.com
*.walibi.be
*.walibi.fr
*.watermarkcommunities.com
*.web.franklyinc.com
*.weplaydots.com
*.wixmp.com
accept-39q8ferajdz.espera-supplements.nl
aclu.org
analytics.getshogun.com
anki.com
api.ethos.io
app.lndr-asia.com
aqualibi.be
assets.demo.leandergames.com
assets.lndr-asia.com
belkperf.com
bff.fm
cdn.altran.jauntxr.com
cdn.axon.jauntxr.com
cdn.harrys.com
cdn.kumuapi.com
cdn.sewest.net
cdn.spinview.jauntxr.com
cdn.vtime.jauntxr.com
cf.machi-ya.jp
clubhouse.io
clubhousehq.com
dev.to
display.apester.com
dl.flathub.org
dsr.dk
esquire.jp
fastly.cdn.snapcraft.io
fastly.cdn.staging.snapcraft.io
figandbloom.com.au
getshogun.com
goabstract.com
kaligo.com
outbrainimg.com
peteshomemade.com
rebtel.com
rednoseday.org
riachuelo.com.br
shopflamingo.com
simaro.co
staging.getshogun.com
stockservice-dev.vimeows.com
teknikmagasinet.fi
teknikmagasinet.no
teknikmagasinet.se
test.kagg.jp
thoughtbot.co.uk
track.optimizely.com
tw.opera-net.jp
walibi.be
walibi.fr
watermarkcommunities.com
www.abworldtrade.com
www.belkperf.com
www.bevello.com
www.bobvila.com
www.cargurus.es
www.cargurus.it
www.cityhealthdashboard.com
www.clarksys.com
www.espera-supplements.com
www.espera-supplements.nl
www.figandbloom.com.au
www.h4vuser.net
www.hepcat.se
www.kagg.jp
www.oldies.com
www.opera-net.jp
www.schaer.com
www.tatari.tv
www.teknikmagasinet.fi
www.teknikmagasinet.no
www.teknikmagasinet.se
www.tivix.com
www.wissen.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for t2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOnjCCDYagAwIBAgIMbhaG0qGp408a11f3MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgxMDMwMTI0
ODMwWhcNMTkwMjIyMTMyMTAyWjB3MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5
LCBJbmMuMSQwIgYDVQQDDBt0Mi5zaGFyZWQuZ2xvYmFsLmZhc3RseS5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIeL2YvzwftAJg08HK+u+ppxQ
g5PhyPrk7vYabhvhwr7Fe9sAgyMK1rgNbRifEMvQNG3xyQg1y6q7omMc/lvPF4kR
GWvS/KlT38SlFEc5Nrc/zB+6lsfBydmDUJRMdX6Smcm0K+v54nqytT/wh8YF8S9k
T9ce6UwkvBaw3kVDx+Rx6rldtzWCcLpzGJGUtVrPlbZFiVehlNpRfw3N4Yd6AM23
h3skiJz6XBZFxYM7RLl8pyOYVhIncFan1gfehUaU0ASi9627c0Sm7n05NTjVAScL
EuanW2nexIw/T2lwKEgUsnlO9aXnv2ZQsbWBuEainkk5gfpoGe55zJP0U5iTAgMB
AAGjggtIMIILRDAOBgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggr
BgEFBQcwAoY2aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xv
dWRzc2xzaGEyZzMuY3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFs
c2lnbi5jb20vY2xvdWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwggjYBgNVHREEggjPMIIIy4IbdDIu
c2hhcmVkLmdsb2JhbC5mYXN0bHkubmV0ggoqLmFjbHUub3Jngg4qLmFwaS5ldGhv
cy5pb4INKi5hcXVhbGliaS5iZYIXKi5iYXNlbWFwcy5jYXJ0b2Nkbi5jb22CCCou
YmZmLmZtgg4qLmNhcnRvY2RuLmNvbYIQKi5jZG4uc2V3ZXN0Lm5ldIIOKi5jbHVi
aG91c2UuaW+CESouY2x1YmhvdXNlaHEuY29tghQqLmRkZXYxLndvcmxkbm93LmNv
bYIIKi5kc3IuZGuCFiouZHN5czEuZnJhbmtseWluYy5jb22CFCouZHN5czEud29y
bGRub3cuY29tghMqLmR1YTEud29ybGRub3cuY29tgg4qLmZpbGVzdXNyLmNvbYIR
Ki5mcmFua2x5Y2hhdC5jb22CECouZ29hYnN0cmFjdC5jb22CEyouZ29wcm9wZWxs
ZXJnby5jb22CEiouZ3VkcnVuc2pvZGVuLmNvbYIaKi5pbWFnZXNkZGV2MS53b3Js
ZG5vdy5jb22CGiouaW1hZ2VzZHN5czEud29ybGRub3cuY29tghkqLmltYWdlc2R1
YTEud29ybGRub3cuY29tggwqLmthbGlnby5jb22CFCoua2MtdXNlcmNvbnRlbnQu
Y29tghoqLm1hbmFnZWRkZXYxLndvcmxkbm93LmNvbYIaKi5tYW5hZ2Vkc3lzMS53
b3JsZG5vdy5jb22CGSoubWFuYWdlZHVhMS53b3JsZG5vdy5jb22CGyoubWVtYmVy
Y2VudGVyLndvcmxkbm93LmNvbYIRKi5vdXRicmFpbmltZy5jb22CFyoucGxheWJh
dHRsZWdyb3VuZHMuY29tggwqLnJlYnRlbC5jb22CECoucmVkbm9zZWRheS5vcmeC
EioucmlhY2h1ZWxvLmNvbS5icoISKi5zaG9wZmxhbWluZ28uY29tgh0qLnN0Zy5m
bGFtaW5nby5oYXJyeXMuc3lzdGVtc4IWKi52aWRlby5mcmFua2x5aW5jLmNvbYIL
Ki53YWxpYmkuYmWCCyoud2FsaWJpLmZyghoqLndhdGVybWFya2NvbW11bml0aWVz
LmNvbYIUKi53ZWIuZnJhbmtseWluYy5jb22CECoud2VwbGF5ZG90cy5jb22CCyou
d2l4bXAuY29tgihhY2NlcHQtMzlxOGZlcmFqZHouZXNwZXJhLXN1cHBsZW1lbnRz
Lm5sgghhY2x1Lm9yZ4IXYW5hbHl0aWNzLmdldHNob2d1bi5jb22CCGFua2kuY29t
ggxhcGkuZXRob3MuaW+CEWFwcC5sbmRyLWFzaWEuY29tggthcXVhbGliaS5iZYIc
YXNzZXRzLmRlbW8ubGVhbmRlcmdhbWVzLmNvbYIUYXNzZXRzLmxuZHItYXNpYS5j
b22CDGJlbGtwZXJmLmNvbYIGYmZmLmZtghZjZG4uYWx0cmFuLmphdW50eHIuY29t
ghRjZG4uYXhvbi5qYXVudHhyLmNvbYIOY2RuLmhhcnJ5cy5jb22CD2Nkbi5rdW11
YXBpLmNvbYIOY2RuLnNld2VzdC5uZXSCGGNkbi5zcGludmlldy5qYXVudHhyLmNv
bYIVY2RuLnZ0aW1lLmphdW50eHIuY29tgg5jZi5tYWNoaS15YS5qcIIMY2x1Ymhv
dXNlLmlvgg9jbHViaG91c2VocS5jb22CBmRldi50b4ITZGlzcGxheS5hcGVzdGVy
LmNvbYIOZGwuZmxhdGh1Yi5vcmeCBmRzci5ka4IKZXNxdWlyZS5qcIIXZmFzdGx5
LmNkbi5zbmFwY3JhZnQuaW+CH2Zhc3RseS5jZG4uc3RhZ2luZy5zbmFwY3JhZnQu
aW+CEmZpZ2FuZGJsb29tLmNvbS5hdYINZ2V0c2hvZ3VuLmNvbYIOZ29hYnN0cmFj
dC5jb22CCmthbGlnby5jb22CD291dGJyYWluaW1nLmNvbYIRcGV0ZXNob21lbWFk
ZS5jb22CCnJlYnRlbC5jb22CDnJlZG5vc2VkYXkub3JnghByaWFjaHVlbG8uY29t
LmJyghBzaG9wZmxhbWluZ28uY29tgglzaW1hcm8uY2+CFXN0YWdpbmcuZ2V0c2hv
Z3VuLmNvbYIcc3RvY2tzZXJ2aWNlLWRldi52aW1lb3dzLmNvbYISdGVrbmlrbWFn
YXNpbmV0LmZpghJ0ZWtuaWttYWdhc2luZXQubm+CEnRla25pa21hZ2FzaW5ldC5z
ZYIMdGVzdC5rYWdnLmpwghB0aG91Z2h0Ym90LmNvLnVrghR0cmFjay5vcHRpbWl6
ZWx5LmNvbYIPdHcub3BlcmEtbmV0Lmpwggl3YWxpYmkuYmWCCXdhbGliaS5mcoIY
d2F0ZXJtYXJrY29tbXVuaXRpZXMuY29tghR3d3cuYWJ3b3JsZHRyYWRlLmNvbYIQ
d3d3LmJlbGtwZXJmLmNvbYIPd3d3LmJldmVsbG8uY29tgg93d3cuYm9idmlsYS5j
b22CD3d3dy5jYXJndXJ1cy5lc4IPd3d3LmNhcmd1cnVzLml0ght3d3cuY2l0eWhl
YWx0aGRhc2hib2FyZC5jb22CEHd3dy5jbGFya3N5cy5jb22CGnd3dy5lc3BlcmEt
c3VwcGxlbWVudHMuY29tghl3d3cuZXNwZXJhLXN1cHBsZW1lbnRzLm5sghZ3d3cu
ZmlnYW5kYmxvb20uY29tLmF1gg93d3cuaDR2dXNlci5uZXSCDXd3dy5oZXBjYXQu
c2WCC3d3dy5rYWdnLmpwgg53d3cub2xkaWVzLmNvbYIQd3d3Lm9wZXJhLW5ldC5q
cIIOd3d3LnNjaGFlci5jb22CDXd3dy50YXRhcmkudHaCFnd3dy50ZWtuaWttYWdh
c2luZXQuZmmCFnd3dy50ZWtuaWttYWdhc2luZXQubm+CFnd3dy50ZWtuaWttYWdh
c2luZXQuc2WCDXd3dy50aXZpeC5jb22CDXd3dy53aXNzZW4uZGUwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBSOVKNvyvu/QDcf6hQgVHFP
aejDeDAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3AlWdDZRY5jCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMP
AAABZsUEtbAAAAQDAEgwRgIhAIcioHTw/0nWHpgn9czwcpMo21ch/0JU0KYeVVyM
TTTsAiEA4c4eXn9bSQyjLrP4tPcGnfMuMVuPn7sK3MfYPVgHRJwAdgCkuQmQtBhY
FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWbFBLb+AAAEAwBHMEUCIQCcOgsD
HsuIbY5gIpqEwCiv7tooS8QubkMGqPL+aXI2RQIgeJdRPbD5uT09rkTlko3F92Gi
hJY4Hn7PoNR1AsmC/gowDQYJKoZIhvcNAQELBQADggEBABWXW5LAm1LcRmH5Bhxu
Lvr+3NOJCrQ02//VfVhyvDkAkzpre5D8HZB3sugHfmDwJCwTpDT3vNQ3nf4/EedG
kWtxKV1r4dUHwk5fgh5GV8Kj1+v7byLzSEl6ic94XpUKpTDDdOd3Ad09ynJMdc+N
QUNZN/2WeL27PzSOYi4cVLvDtSvPJZmdvwawpPZJwpEp3rDDzijInCz6nsXBHDNd
S4Ircs8cjGzir17+lqgmo1ZctVuCeVTLIW7USqNZRbZ9x/NJsHOTgRepIgAWZdSh
Ho8eqWClGU8jXoE6IeO675dDjW2DrzMwUd4Ju/K9zFQD0eqTTDItQzxHSXugoQon
DxM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCHi9mL88H7QCYNPByvr
vqacUIOT4cj65O72Gm4b4cK+xXvbAIMjCta4DW0YnxDL0DRt8ckINcuqu6JjHP5b
zxeJERlr0vypU9/EpRRHOTa3P8wfupbHwcnZg1CUTHV+kpnJtCvr+eJ6srU/8IfG
BfEvZE/XHulMJLwWsN5FQ8fkceq5Xbc1gnC6cxiRlLVaz5W2RYlXoZTaUX8NzeGH
egDNt4d7JIic+lwWRcWDO0S5fKcjmFYSJ3BWp9YH3oVGlNAEovetu3NEpu59OTU4
1QEnCxLmp1tp3sSMP09pcChIFLJ5TvWl579mULG1gbhGop5JOYH6aBnuecyT9FOY
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34070584130953531253096667127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 12:48:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 13:21:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25769324304553495944867992577083194451807358649028931453533811235711297632117358535519495108856552039928267877578240574888068469289904184699666461785922541158289312118970819390259568269738813604544715165908896239709613305387308218727887510263753764948377649442590013065371999832206462023562801613064693018610583891381765883100866879976855745902220566587096970251918740722245037971061246510430250034864409666207926444269304652097519763955406736358481234191071564200629778232406433634374312444113098729945773565743001100537283862562418166257816976063109908600196699423498419884852055857212412025677335005274447780485267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basemaps.cartocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubhousehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsys1.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filesusr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franklychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopropellergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gudrunsjoden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kc-usercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manageddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managedsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managedua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playbattlegrounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.flamingo.harrys.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weplaydots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wixmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accept-39q8ferajdz.espera-supplements.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.getshogun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqualibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.demo.leandergames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.altran.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.axon.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.harrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kumuapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.spinview.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vtime.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.machi-ya.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubhousehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display.apester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.flathub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.staging.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getshogun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peteshomemade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simaro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.getshogun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockservice-dev.vimeows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtbot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.optimizely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.opera-net.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abworldtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belkperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobvila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityhealthdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarksys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espera-supplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espera-supplements.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h4vuser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepcat.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opera-net.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatari.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tivix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wissen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e54a36fcafbbf40371fea142054714f69e8c378
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166c504b5b000000403004830460221008722a074f0ff49d61e9827f5ccf0729328db5721ff4254d0a61e555c8c4d34ec022100e1ce1e5e7f5b490ca32eb3f8b4f7069df32e315b8f9fbb0adcc7d83d5807449c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166c504b6fe00000403004730450221009c3a0b031ecb886d8e60229a84c028afeeda284bc42e6e4306a8f2fe6972364502207897513db0f9b93d3dae44e5928dc5f761a28496381e7ecfa0d47502c982fe0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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