u2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7b:8c:8a:5e:b7:df:d9:55:0c:36:74:87 was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:8c:8a:5e:b7:df:d9:55:0c:36:74:87
Serial Number (int): 38236559256589618065391907975
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 57:e7:1a:c5:aa:c4:65:7c:eb:68:b5:59:8d:26:80:2a:74:c5:61:dd
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 20:3e:a2:61:8e:a3:44:93:49:dc:63:e2:2d:72:5e:33:55:ee:38:20
Fingerprint (sha256): 0d:9c:f0:65:cb:5e:76:c9:15:1e:c2:81:09:6b:93:9c:e1:08:e3:6e:ad:07:dc:79:be:22:ed:28:7c:b9:68:70

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate u2.shared.global.fastly.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u2.shared.global.fastly.net
*.art19.com
*.basicattentiontoken.org
*.boardroom.media
*.brave.software
*.cdn.appcues.com
*.cdn.procore.com
*.develop.mbtmedia.com
*.elifesciences.org
*.footwearnews.com
*.greenentrepreneur.com
*.hollywoodlife.com
*.hoteltonight-test.com
*.hoteltonight.com
*.hudl.com
*.indiewire.com
*.itsrosy.com
*.livesense.co.jp
*.lumity.com
*.mabelandmoxie.com
*.mbtmedia.com
*.mercury.basicattentiontoken.org
*.nirvc.com
*.pictures.itsrosy.com
*.pictures.mabelandmoxie.com
*.pmc.li
*.pmcdev.io
*.pmcqa.com
*.procore.com
*.procorecon.com
*.procoretech-qa.com
*.production.cdn.art19.com
*.rollingstone.pmcqa.com
*.s3.brave.com
*.s3.bravesoftware.com
*.sheknows.com
*.spy.com
*.staging.art19.com
*.staging.cdn.art19.com
*.staging.twmlabs.com
*.stylecaster.com
*.sweetwater.com
*.thezoereport.com
*.twmlabs.com
*.usccadev.com
*.usconcealedcarry.com
*.withings.com
analytics.basicattentiontoken.org
api.weld.io
app.betterimpactcdn.com
assets.procore.com
basicattentiontoken.org
boardroom.media
book.anthonytravel.com
bravesoftware.com
c.crm-kozuchi.com
cdn-f.adsmoloco.com
cdn2.funnelenvy.com
cdn3.funnelenvy.com
cidentertainment.com
core.improove.se
css.appcues.com
dvwa.techiegroup.com
elifesciences.org
experiences.ufcvip.com
footwearnews.com
fstlive.kaltura.com
greenentrepreneur.com
hollywoodlife.com
hoteltonight-test.com
hoteltonight.com
indiewire.com
klive-stg.kaltura.com
klive.kaltura.com
lumity.com
lvimg.jp.stg.lvs.space
mbtmedia.com
nirvc.com
omgs.in
pmc.li
sdk.appcues.com
sheknows.com
shop.cidentertainment.com
spy.com
stylecaster.com
tickets.nflonlocation.com
totalwine.com
usccadev.com
usconcealedcarry.com
vod1.kaltura.com
www.cidentertainment.com
www.dev.evape.com
www.macrotrends.net
www.predictem.com
www.weld.io

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for u2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Rf+lq6YfAvYxjIs1rX
H/TRJf8/vChHiEH0BZ/LwEHPPkJ5WuRdM5I7YYJrhpnuLD8C4qscUOUACEH+k1j6
tWmN67fxbJ0bs1ZLkP3uMJLbe1Fjw0cil/l1RqHvt8j4gcf84Z3pMOgO5QtAeqnA
6rTgtsVoy7wlOBHGbWrGAkDw116D/EL1K4D80MbIs9sQHbG+mMYy24ypkzvljuzx
mpFzrGAUXac7qFmqQLEvaN7UUz866jP9moj3FBogUImFU8gLJ2ALvVWPW25S/9IG
jlhcr/zg36Tffmfc9itgVNhSKQPw43Rol1swjZQnk4FVNpvG8t802vIvWrJH6aaQ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38236559256589618065391907975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-01 11:14:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 18:32:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'u2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25715322093201556743925983685501859602381528532849680189164513774400263906747568970831551681516034056199543696525607676504474686200343774416606247870177534872845891154904562714180493728021166884427780886061158867940709635266324608007407040260600476241849106466327083676680682043656334825810218866365005503616251557632683584120078339391306029661864352584598231209375301245987036228322319213220574756998136923145888161863218809535017875741204878465025632132318033140124166926360349311174135171518338727597096602670130832430653675655802367494118633270214541060246655037470762849972428852345542422906349240363910498259129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brave.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.develop.mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footwearnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hollywoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesense.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercury.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmc.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmcdev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmcqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procorecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procoretech-qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollingstone.pmcqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheknows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stylecaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thezoereport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usccadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weld.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.betterimpactcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.anthonytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.crm-kozuchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-f.adsmoloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.improove.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvwa.techiegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.ufcvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footwearnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstlive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klive-stg.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvimg.jp.stg.lvs.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmc.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheknows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylecaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nflonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usccadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod1.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.evape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrotrends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.predictem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weld.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57e71ac5aac4657ceb68b5598d26802a74c561dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000176bda7cce600000403004830460221008dbeb61eab969519a6f2ec064b43b68ba1139d512f537b18d3fbbfb9da7245fe022100d2c91721d9098307f6667b3b05261df1467dc887fe56e42c73c5b21258334081007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176bda7cd7c0000040300483046022100d635adc141b5fa3aa0c1ab46cca346bd0e6de0237b4c5f33178fe6d5bf47edce022100d69d8d37c623f8764661a13f718944d90b07fafaf3ba9924c4e07512efe79916
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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