h2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 24:12:8a:fe:4d:25:96:d7:7c:1d:d2:fa was issued on by GlobalSign nv-sa.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:12:8a:fe:4d:25:96:d7:7c:1d:d2:fa
Serial Number (int): 11163877395928131699805639418
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 65:a0:0a:3d:c8:be:cd:1b:14:a3:1d:69:e2:57:41:09:cd:5a:a4:f9
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a6:50:a6:ad:2f:72:14:e9:e8:a7:d7:6e:29:ad:37:7c:dc:3d:82:a2
Fingerprint (sha256): 0b:4c:d3:d6:76:e0:17:b6:a3:a0:27:84:df:00:e5:f1:af:f8:d8:86:89:aa:26:45:16:79:74:bd:b0:30:7c:3b

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate h2.shared.global.fastly.net

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for h2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

h2.shared.global.fastly.net
*.caffeine.tv
*.casper-staging.com
*.casper.cool
*.cliniko.com
*.cliqueinc.com
*.connectechasia.com
*.dev.meetup.com
*.digitaltrends.com
*.diply.com
*.everesttech.net
*.fanexpohq.com
*.fiba.com
*.foe.co.uk
*.fs.grailed.com
*.hbbtv.staging.salto.fr
*.homewelldesigned.com
*.laredoute.fr
*.live.staging.6play.fr
*.lz-fs.learnzillion.com
*.mdsol.com
*.media.zestyio.com
*.memb.ft.com
*.middleware.staging.6play.fr
*.middleware.staging.salto.fr
*.mobile.cliniko.com
*.mobile.staging.cliniko.com
*.mobile.test.cliniko.com
*.musixmatch.com
*.omni.news
*.omni.se
*.partneringone.com
*.podcast-links.studionodes.net
*.podcast-links.ustudio.com
*.preview.zesty.io
*.realtyninja.com
*.sleepauthority.com
*.stageboden.co.uk
*.stageboden.eu
*.stageboden.fr
*.stagebodenclothing.com.au
*.stagebodendirect.at
*.stagebodendirect.de
*.stagebodenimages.com
*.stagebodenpreview.co.uk
*.stagebodenpreview.com
*.stagebodenpreview.de
*.stagebodenusa.com
*.staging.ca1.cliniko.com
*.staging.caffeine.tv
*.staging.cliniko.com
*.supercall.com
*.tablet.cliniko.com
*.tablet.staging.cliniko.com
*.tablet.test.cliniko.com
*.test.cliniko.com
*.themanual.com
*.tmogul.com
*.tubemogul.com
*.wovenlyrugs.com
advertising.adobe.com
c.cloudwp.io
caffeine.tv
casper-staging.com
casper.cool
cdn.capcom-unity.com
cdn.laredoute.com
cliniko.com
cliqueinc.com
connectechasia.com
content-us-east-2-b-fastly.tv.philo.com
content-us-east-2-staging-fastly.tv.philo.com
digitaltrends.com
diply.com
egs-cd-prod.vimondtv.com
fanexpohq.com
fastly-www.adorama.com
fiba.com
foe.co.uk
fs.grailed.com
img.elleshop.jp
khmervodhls.malimarcdn.net
live.alhadath.net
livefta.malimarcdn.net
livehd.malimarcdn.net
livesd.malimarcdn.net
mdsol.com
memb.ft.com
office-plugins.adobestock.com
omni.news
omni.se
partneringone.com
preprod-advertising.adobe.com
public-mediastore.laredoute.com
realtyninja.com
residenthome.com
sleepauthority.com
spoor-api.asia.nikkei.com
staging.tx24.it
static.capcom.com
stats.cloudwp.io
themanual.com
tubemogul.com
vodhls.malimarcdn.net
wovenlyrugs.com
www.adorama.com
www.adoramarentals.com
www.capcom-unity.com
www.leisurepro.com
www.rightwingwatch.org
www.sunnysports.com
xml.malimarcdn.net
zestyio.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for h2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorwjhjRvzw0irJZwCh7g
+qzpn99+OmK8UiXRYBoXqobi8Kkl2XhKWRm8dBkO95R8g8lw0raJnkDz4MmRr1AJ
QULT0HPzZMPPVSZUOXcvXBH+uksTYqbAp5JWGusM3c1YJBKikxrwR1sSWbiChHyu
CCrj08E12QXeXAeELlgs0PpBihUzR2xPUPoovcEwS0/lc697+cwRu/3nVcMuMbIS
uDXdojhK9dcfqzrPhPwOZRxhtu5v00E2+UNmawJwaP9jCX7pwf4fx+f55tnhPvOz
sOq+PFfve1HFxiJLpTsHT6H+YvD2cNWteDFhlf44PqIMCM4oe86MNEiaHiwhZveZ
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11163877395928131699805639418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-28 00:01:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 19:13:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'h2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20543380088048692252450538720739178611748270435474298597142880516763146302651411066691700927080549329806250820102973026028302208457716728434155090858249044366327968364487036304046529964785115607392185217266139312197194329751653802572096451613294319560093298765535882518926243453855650960002355018189344352524270521962778419360387825164891168649407226180567317576220271189819396886543072146911454535303518292218683547903895278183045536917113592345418228500448186553641132916124859914764756859714541660362388921900305522099755571001825795575034340344163533696152766057504409047057306042052255011982311508050388922636601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caffeine.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casper-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casper.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliqueinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectechasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.meetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitaltrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everesttech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanexpohq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.grailed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbbtv.staging.salto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homewelldesigned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laredoute.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.staging.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lz-fs.learnzillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.zestyio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memb.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middleware.staging.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middleware.staging.salto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.staging.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.test.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musixmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omni.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partneringone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podcast-links.studionodes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podcast-links.ustudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.zesty.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realtyninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageboden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageboden.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageboden.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodendirect.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodendirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenpreview.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenpreview.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagebodenusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ca1.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.caffeine.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tablet.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tablet.staging.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tablet.test.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themanual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wovenlyrugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.cloudwp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffeine.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casper-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casper.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.capcom-unity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.laredoute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliqueinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectechasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-b-fastly.tv.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-staging-fastly.tv.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egs-cd-prod.vimondtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanexpohq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly-www.adorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.grailed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.elleshop.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmervodhls.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.alhadath.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefta.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livehd.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesd.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memb.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-plugins.adobestock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partneringone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-advertising.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-mediastore.laredoute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtyninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residenthome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoor-api.asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tx24.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.capcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.cloudwp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themanual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodhls.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wovenlyrugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoramarentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capcom-unity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leisurepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightwingwatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xml.malimarcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zestyio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65a00a3dc8becd1b14a31d69e2574109cd5aa4f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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