prospective.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7a:ed:fd:55:c2:bb:b1:8b:67:76:7d:d8 was issued on by GlobalSign nv-sa.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:ed:fd:55:c2:bb:b1:8b:67:76:7d:d8
Serial Number (int): 38044882958178182060676906456
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8d:3d:f8:f4:44:1c:27:2a:0a:7f:8f:1f:b5:dd:d1:49:1b:8f:c2:35
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a0:68:fd:1f:a1:de:5c:9e:5d:24:c6:69:7f:96:1b:82:d7:e5:86:4c
Fingerprint (sha256): 0c:55:6f:c0:78:76:c4:c3:c1:d0:8d:c7:ef:80:17:12:a7:fe:ba:0b:f7:f0:68:ef:6e:c2:4e:72:7e:b6:c6:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate prospective.shared.global.fastly.net

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prospective.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prospective.shared.global.fastly.net
*.adrise.tv
*.aerlingus.com
*.altcdn.perthnow.com.au
*.altcdn.thewest.com.au
*.apttherapy.net
*.cdn.viaplay.tv
*.demo.fastly-sandbox.ntworkers.com
*.eileenfisher.com
*.eurosport.com
*.eurosportshop.com
*.ffx.io
*.fivebelow.com
*.haaretz.co.il
*.hangers.com
*.hangersdirect.com
*.ispot.tv
*.majorleaguegaming.com
*.medal.tv
*.monday.com
*.mondaystaging.com
*.njoy.world
*.nme.com
*.nrl.digital
*.picsart.com
*.resumehelp.com
*.rtve.es
*.skynewsarabia.com
*.skynewsarabiatv.com
*.sndimg.com
*.staging.broadwaybeta.com
*.stobcm.com
*.usphonebook.com
*.woodhouseclothing.com
*.wtop.com
*.xalok.com
Uat.uk.virginmoneygiving.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
acc-learn-cdn.adobe.com
acc-learn-stage-cdn.adobe.com
advancedbackgroundchecks.com
booking.iberostar.com
cdn.constant.co
cdn2.yandy.com
cdn6.f-cdn.com
cdntest1.flightnetwork.com
edge.virtuance.com
fast.a.klaviyo.com
fast.brandfolder.io
fast.sirevant.com
fastly-i.cbc.ca
fastly.ifunny.co
fastly.jetshop.se
fs.splay.com
haaretz.co.il
hackday.access.worldpay.io
i.nordstromimage.com
images.outdoorsy.com
ispot.tv
m2-prelive.happysocks.com
m2-staging.happysocks.com
manhattanhomedesign.com
manhattanhomedesigns.com
mmm-fastly.stage.sumtotal.host
mobile29.gcontent.eu
njoy.world
omega.xalok.com
preprod.hangers.com
preprod.hangersdirect.com
samsung-video.sumtotallab.host
sapqas.canadianhotelsupply.com
stage.footballamerica.com
staging.bevello.com
static.klaviyo.com
supporttest.corra.com
team-h-aarpmedicareplans.uhc.com
test.niogbl.com
testgblsite.nio.com
tst.ewingirrigation.com
uat-m2.tiemart.com
uk.virginmoneygiving.com
usphonebook.com
video.live.playshow.io
wtop.com
www-staging.autogravity.com
www.advancedbackgroundchecks.com
www.allivet.com
www.breezerbikes.com
www.dicksmith.co.nz
www.dicksmith.com.au
www.downloadcloud.com
www.freelancer.de
www.kogan.com
www.outdoorsy.com
www.shop.eurosport.co.uk
www.shop.eurosport.de
www.shop.eurosport.fr
www.supermicro.com.tw
www.supermicro.nl
www.tandy.com.au
www.trustedreviews.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for prospective.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E/4ExN0IBAgneYB2MQ6
RZXtI7RH0m9OHXp3W9O4SchlPwCmvt2kKrSYpQl3XAkzYG80ieWWYoFraZJUq3Rx
qA69I5KvFfEXyD/DHOwvb6d5w8N1254qJTrTW6FUAdY1/hD+jBL7jTqAaoZiYQsy
pofKyDFYIMEM8hRJ6DQp43YhGg6+B3wRj6VNUFWQLDKhBt2Lcuwp8sVEBI+fZgqD
F+o+eS1ZRyFPwadPJhhLs/s33g7CPp0FN/fFjK/Y7gIUtUMCiCpT/Gd+sHUWJzJq
Pgq9gzphBXP7c1ZymT7slL1aQG+1vHoq4kz8sjjIh3o4t+GeyLE3m4FNCIol5RXk
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38044882958178182060676906456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 13:36:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 16:25:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'prospective.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29831674175877572130299242064086461729389329219668532618320813390893509462516460809862886844887022740630172855120673400620912440597893493399545862476344360131996267783095838462841472496925310776713508282788828875528459586684019836698439700758937410556372673300192914806783004860147708608987688637212408325943405410154351461990868934110402993007451590923025584690347965736151996988577505091456279443778248606154200342950322003523847629617559059849608117082321097956268695199232564693076140538472658672189633205540554392605729955746760126097549817882516983482753404996173418317269488749589944297600038500484751090377807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospective.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrise.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.perthnow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.thewest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.viaplay.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.fastly-sandbox.ntworkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eileenfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivebelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangersdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ispot.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majorleaguegaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mondaystaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njoy.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrl.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resumehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtve.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabiatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.broadwaybeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stobcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodhouseclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Uat.uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-stage-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.iberostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.constant.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.yandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn6.f-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.flightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.virtuance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.a.klaviyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.brandfolder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.sirevant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly-i.cbc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.ifunny.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.jetshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.splay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackday.access.worldpay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.nordstromimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.outdoorsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispot.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2-prelive.happysocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2-staging.happysocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanhomedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanhomedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm-fastly.stage.sumtotal.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile29.gcontent.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njoy.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omega.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.hangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.hangersdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung-video.sumtotallab.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapqas.canadianhotelsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.footballamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.klaviyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporttest.corra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-h-aarpmedicareplans.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.niogbl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testgblsite.nio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ewingirrigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-m2.tiemart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.live.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.autogravity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allivet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breezerbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicksmith.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicksmith.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloadcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outdoorsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supermicro.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supermicro.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustedreviews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d3df8f4441c272a0a7f8f1fb5ddd1491b8fc235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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