t2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 14:95:46:7e:8e:01:62:4c:ae:91:e7:b7 was issued on by GlobalSign nv-sa.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:95:46:7e:8e:01:62:4c:ae:91:e7:b7
Serial Number (int): 6370163043725603193943615415
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 8e:54:a3:6f:ca:fb:bf:40:37:1f:ea:14:20:54:71:4f:69:e8:c3:78
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c6:32:ad:a7:da:30:1f:2f:2c:e6:57:b7:5a:29:7a:47:78:d6:3f:8e
Fingerprint (sha256): 0f:21:d0:ba:d8:78:57:ce:a9:16:24:ee:2f:93:ed:f4:94:1f:75:5c:a8:3b:bc:09:f7:65:6c:99:99:68:f3:63

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate t2.shared.global.fastly.net

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t2.shared.global.fastly.net
*.abstract.com
*.aclu.org
*.api.ethos.io
*.basemaps.cartocdn.com
*.bff.fm
*.cartocdn.com
*.cdn.sewest.net
*.cdn.usconcealedcarry.com
*.clubhouse.io
*.ddev1.worldnow.com
*.dsr.dk
*.dsys1.franklyinc.com
*.dsys1.worldnow.com
*.dua1.worldnow.com
*.filesusr.com
*.franklychat.com
*.goabstract.com
*.gopropellergo.com
*.gudrunsjoden.com
*.harrys.com
*.imagesddev1.worldnow.com
*.imagesdsys1.worldnow.com
*.imagesdua1.worldnow.com
*.kaligo.com
*.kc-usercontent.com
*.manageddev1.worldnow.com
*.managedsys1.worldnow.com
*.managedua1.worldnow.com
*.marketing-development.clubhouse.io
*.membercenter.worldnow.com
*.nw-sandbox.n3twork.com
*.outbrainimg.com
*.rebtel.com
*.rednoseday.org
*.riachuelo.com.br
*.shopflamingo.com
*.staging.uscca.services
*.startkraftonline.se
*.static.pub.wix-code.com
*.stg.flamingo.harrys.systems
*.trr.se
*.uscca.services
*.video.franklyinc.com
*.watermarkcommunities.com
*.web.franklyinc.com
*.weplaydots.com
*.wixmp.com
aclu.org
anki.com
api.cityhealthdashboard.com
api.ethos.io
app.lndr-asia.com
assets.demo.leandergames.com
assets.lndr-asia.com
belkperf.com
bff.fm
cdn.sewest.net
cf.machi-ya.jp
clubhouse.io
dev.to
display.apester.com
dl.flathub.org
dsr.dk
esquire.jp
fastly.cdn.snapcraft.io
fastly.cdn.staging.snapcraft.io
figandbloom.com.au
goabstract.com
harrys.com
img.25ans.jp
img.ellegirl.jp
kaligo.com
outbrainimg.com
peteshomemade.com
rebtel.com
rednoseday.org
riachuelo.com.br
shopflamingo.com
simaro.co
sp.womenshealth-jp.com
startkraftonline.se
stockservice-dev.vimeows.com
teknikmagasinet.fi
teknikmagasinet.no
teknikmagasinet.se
test.kagg.jp
thoughtbot.co.uk
track.optimizely.com
trr.se
uscca.services
watermarkcommunities.com
www.abworldtrade.com
www.bevello.com
www.bobvila.com
www.cargurus.es
www.cargurus.it
www.cityhealthdashboard.com
www.clarksys.com
www.fidocure.com
www.figandbloom.com.au
www.h4vuser.net
www.hepcat.se
www.kagg.jp
www.oldies.com
www.saltliferxglasses.com
www.schaer.com
www.tatari.tv
www.teknikmagasinet.fi
www.teknikmagasinet.no
www.teknikmagasinet.se
www.tivix.com
www.wissen.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for t2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCHi9mL88H7QCYNPByvr
vqacUIOT4cj65O72Gm4b4cK+xXvbAIMjCta4DW0YnxDL0DRt8ckINcuqu6JjHP5b
zxeJERlr0vypU9/EpRRHOTa3P8wfupbHwcnZg1CUTHV+kpnJtCvr+eJ6srU/8IfG
BfEvZE/XHulMJLwWsN5FQ8fkceq5Xbc1gnC6cxiRlLVaz5W2RYlXoZTaUX8NzeGH
egDNt4d7JIic+lwWRcWDO0S5fKcjmFYSJ3BWp9YH3oVGlNAEovetu3NEpu59OTU4
1QEnCxLmp1tp3sSMP09pcChIFLJ5TvWl579mULG1gbhGop5JOYH6aBnuecyT9FOY
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6370163043725603193943615415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 00:31:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 16:37:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25769324304553495944867992577083194451807358649028931453533811235711297632117358535519495108856552039928267877578240574888068469289904184699666461785922541158289312118970819390259568269738813604544715165908896239709613305387308218727887510263753764948377649442590013065371999832206462023562801613064693018610583891381765883100866879976855745902220566587096970251918740722245037971061246510430250034864409666207926444269304652097519763955406736358481234191071564200629778232406433634374312444113098729945773565743001100537283862562418166257816976063109908600196699423498419884852055857212412025677335005274447780485267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basemaps.cartocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsys1.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filesusr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franklychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopropellergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gudrunsjoden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kc-usercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manageddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managedsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managedua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketing-development.clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nw-sandbox.n3twork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.uscca.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startkraftonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static.pub.wix-code.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.flamingo.harrys.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trr.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uscca.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weplaydots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wixmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cityhealthdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.demo.leandergames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.machi-ya.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display.apester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.flathub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.staging.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.25ans.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ellegirl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peteshomemade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simaro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.womenshealth-jp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startkraftonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockservice-dev.vimeows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtbot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.optimizely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trr.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscca.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abworldtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobvila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityhealthdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarksys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fidocure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h4vuser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepcat.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltliferxglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatari.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tivix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wissen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e54a36fcafbbf40371fea142054714f69e8c378
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b1fe60295000004030047304502206222ad7cbb50d8826f0b6da8f5bacb18a068ce6ab52a11da6918026372c35913022100c8ed926fbbc65b2c4dd1f78af3f3682e64c694ee46ab78ce87f3dbe82500109c007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b1fe5ff700000040300483046022100a707700cee9ef3b7114f8780332b75ec44cd76883b1f50a16b9f24755055b58b022100b8f30f08a02e0dde4ae47e4d9ff8e9e2a075010e357fb97559d2bbd195fa8fbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ad3bd8b5c75b78245f703b2d41fd1f753e2e16b0ceae5e0ab92ac6841d369a91ed1eed99a28255ddc6f562928af9977fd91162acf979ecce621be490eb883964b455e2960842609f084a95b978a3b0e244668e53c0a593585206b31252576c40d27df19cd0aef45290fa251634aefa0632a64e9605fb5a0759943334aca517db18581ace221622e2e7df71c9d09a78b8c6372fa7c290db8caa8320a70fb27637d4e2772aa8af5f85c21a4050b5b19f13f6f9029943b70b1a71416e62a7b839e65aa2ad928c1ba147fc6408b00ab253897a4ca76e4c49668d69e30fca5c553f01b3cf21384766c1c04edf53aa7afe6dda877bba80ed1aa7ecfb577f23b7a545e