v2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 12:aa:72:fa:86:51:6b:60:f5:ef:cf:fb was issued on by GlobalSign nv-sa.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:aa:72:fa:86:51:6b:60:f5:ef:cf:fb
Serial Number (int): 5776790537262398902071447547
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 1f:45:fb:9c:04:7d:d1:ec:c1:57:a2:ab:f2:48:17:01:5a:4d:5d:37
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 18:d5:d5:22:81:a1:24:61:ce:84:77:43:d2:9e:7d:5b:9d:91:81:7a
Fingerprint (sha256): 0d:2e:c7:92:98:67:d8:80:65:e0:8f:44:75:e8:ed:19:62:9e:3c:18:cd:41:1f:10:27:68:71:3e:c5:42:74:95

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate v2.shared.global.fastly.net

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for v2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

v2.shared.global.fastly.net
*.99productrules.com
*.adobelanding.com
*.api.jetsmart.com
*.aurugs.com
*.businessinsider.sg
*.demo.connatix.com
*.experience-adobe.com
*.fenrir.insider.engineering
*.helix-demo.xyz
*.hlx-1.page
*.hlx-2.page
*.hlx-3.page
*.hlx.page
*.ikyu.co.jp
*.ikyu.com
*.insider-inc.com
*.insider.com
*.insider.engineering
*.irugs.co.uk
*.kahoot-experimental.it
*.kahoot-stage.it
*.kiwamino.com
*.phillyvoice.com
*.primordialsoup.life
*.project-helix.dev
*.project-helix.info
*.project-helix.io
*.project-helix.page
*.rugimg.com
*.rugs.ca
*.sentry-cdn.com
*.sherpadm.com
*.sherpadmdevs.com
*.sherpadmstage.com
*.staging.infura.org
*.thehill.com
basco.ezup.eu
beta-m0.stg-g3fastly-1.gazellestaging.com
beta-m0.stg-g3fastly-3.gazellestaging.com
beta-m0.tst-g3fastly-1.cns.gazelle.com
beta-m0.tst-g3fastly-2.cns.gazelle.com
beta.csave.net
cache-fastly.nixos.org
cache.nixos.org
cdn.flyweel.co
cdn.tmsplay.com
cdn2.static.coinchat.im
collective.adage.com
descuentos.abc.es
dwtsvote-live-test.abc.com
dwtsvote-live.abc.com
dwtsvote-test.abc.com
dwtsvote.abc.com
edge-f.swagit.com
forbescouncils.com
goodtaste.com
helix.adobe.io
helix.adobelaunch.com
idolvote-test.abc.com
idolvote-test.abc.go.com
image.nengun.com
insider-inc.com
insider.com
insights.cgma.org
link-stage.getkahoot.com
liveuseast.squoia.com
media.tbistatic.com
profiles.bizjournals.com
sg-gamesfest2020-uktest.sgdigital.com
sg-gamesfest2020.sgdigital.com
sports.bularca.me
stadtwerke-sommerkino.de
stage.csave.net
thehill.com
thisisinsider.com
weber.ezup.eu
www.belk.com
www.cartridgesave.co.uk
www.edsurge.com
www.ezup.fr
www.ferrumjs.org
www.gamerworldnews.com
www.gfs.ca
www.gfs.com
www.gift-land.com
www.goodtaste.com
www.gunbuyer.com
www.kitachiba-water.or.jp
www.manzara.cz
www.manzara.ee
www.manzara.hr
www.manzara.hu
www.manzara.it
www.manzara.lt
www.manzara.pt
www.manzara.ro
www.manzara.se
www.manzara.si
www.manzara.sk
www.nengun.com
www.oce.co.jp
www.stg-g3fastly-1.gazellestaging.com
www.stg-g3fastly-2.gazellestaging.com
www.traveler-store.com
www.workyard.com
wwwsit.gfs.ca
wwwsit.gfs.com
yec.co
zoom-f.swagit.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for v2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gUwziHTXtysTdEUgBhO
aX9vAqDdtJjJGYtlQTWtry+3aI3fvX6mUblLE1NQ/hoDYQuxZRDKIbLfdqA1V8Vx
kjpInoRPyFArY8nfYLJgopeiprtEu/inmS/Ja2P1dkw25KA1XxHcJPM919aVpOGA
CqBb9UV5GYeHu3OMrDdODDopumPRi8GyWynwymp4/SpyZ3PCZDYW1c+Ivxm8dSFk
ruV3odjIK9mE4q1kzrjwK+VtGPE/ppsI+bie6yYokZO4U5rfXa1WyfYXIBf0WdYK
xjfTc1cl0MmsfQDDCTzNxw8thPFaNCh9TTl1altAKAxViPPf9T/Dqk11wWxDK9yM
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5776790537262398902071447547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 16:01:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 18:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'v2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26512603645480608842029288617836350583060703229581310103927746576613142882396818699537390017220448809779152648445687460633835872244485563385945339129382338557903112589403285475319598540235159025753238171344994301690494445882725097695215775444990554015325610344250708687621797310949229018656003103516709072180614476587703410338585305510641894121826529231634535653839747109955981919472576105741883421097313319595532789661721363971267834720682719527510795995505022995612585961910022056692738693498915120409634477482398694727051450606772996678014117515292814410111169552843049002994134072667949970374209157769831644957777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99productrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adobelanding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.jetsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessinsider.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.connatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experience-adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fenrir.insider.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helix-demo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlx-1.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlx-2.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlx-3.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlx.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irugs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-experimental.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-stage.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwamino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phillyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primordialsoup.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-helix.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentry-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmdevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.infura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basco.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-3.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-1.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-2.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache-fastly.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.nixos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.flyweel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tmsplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collective.adage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.abc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwtsvote-live-test.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwtsvote-live.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwtsvote-test.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwtsvote.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-f.swagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbescouncils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.adobelaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolvote-test.abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolvote-test.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.cgma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-stage.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveuseast.squoia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tbistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profiles.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg-gamesfest2020-uktest.sgdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg-gamesfest2020.sgdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports.bularca.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-sommerkino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weber.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartridgesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferrumjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerworldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gift-land.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunbuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitachiba-water.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manzara.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oce.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-2.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveler-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoom-f.swagit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f45fb9c047dd1ecc157a2abf24817015a4d5d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017435cd4271000004030046304402205156f048004ba6f196a3e28d89b5babfe4136273e8ab970dc8c7c1b958d4231b02202c41442468128726c11064c22ec18c1d475315d3143d92f45be6ca624a4f1d49007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017435cd4245000004030047304502200cfdf52cc12cc21ee18c0061c2892c36e9437872b8fc3aad05dbc3a7d9e123ea022100c4e541b93c31f8c51a681e84dcfffdb41281a12078861a7619092c8b3e002906
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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