q2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2a:38:81:ed:9f:50:d7:57:8b:79:2b:17 was issued on by GlobalSign nv-sa.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:38:81:ed:9f:50:d7:57:8b:79:2b:17
Serial Number (int): 13066683827029459994790144791
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ec:df:12:1e:42:34:c8:ec:fe:4c:0d:51:2c:e2:b3:86:3d:d4:7a:91
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ea:ce:62:09:b3:01:1d:eb:68:d0:aa:a6:43:73:a3:91:a4:46:da:78
Fingerprint (sha256): 10:7f:3b:e0:65:b2:8f:48:f1:b6:07:9e:45:28:8e:e8:2a:82:fd:26:3b:86:e1:1a:f8:a6:fa:ad:94:6a:8d:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate q2.shared.global.fastly.net

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q2.shared.global.fastly.net
*.baileyhats.com
*.concacafchampionsleague.com
*.fbcd.co
*.fl.bankaletihad.com
*.govx.net
*.hats.com
*.hipmunk.com
*.kangolstore.com
*.legends.net
*.livebooks.com
*.myfreetaxes.com
*.newsdeutschland.com
*.newsr.in
*.newsserve.net
*.nordschleswiger.dk
*.onenewspage.co.uk
*.onenewspage.com
*.onenewspage.com.au
*.onenewspage.us
*.reson8.com
*.resonate.com
*.sneak.viceops.net
*.spacecrafted.com
*.youversion.com
api.resourcewatch.org
apidocs.joyent.com
baileyhats.com
cdn.nbcu.jauntvr.com
cdn.nbcu.jauntxr.com
cityswoon.com
cityswoon.com.au
concacafchampionsleague.com
containersummit.io
culturewhisper.com
docs.joyent.com
email.museumselection.co.uk
email.museumselection.de
email.museumselection.fr
email.piabijoux.fr
email.piajewellery.com
fastly-morris.inchoo4u.net
fbcd.co
govx.net
hats.com
help.usertesting.com
hipmunk.com
images.dev.yelpwifi.com
joyent.com
kangolstore.com
legends.net
livebooks.com
media1.tenor.co
media1.tenor.com
myfreetaxes.com
newsdeutschland.com
newsr.in
newsserve.net
nordschleswiger.dk
onenewspage.co.uk
onenewspage.com
onenewspage.com.au
onenewspage.us
registry.terraform.io
rvm.io
s.mmgo.io
sp-prd.theglobeandmail.ca
spacecrafted.com
tenor.co
testersupport.usertesting.com
wifi-assets.fl.yelpcdn.com
www.culturewhisper.com
www.philippsresume.com
www.technobezz.com
youversion.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for q2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYXaJs/NDyAWawcoL4Wg
C61QSpQ/zpGRMeYX2wF8UXgpmfZSdgx5VHd3xeiqoOIEzd9JzO5tpdxmb8pwrdJo
ICv48zVEtV4Wc0M7c0COEze7sdiFeG5dZjPJGq+Us/SsqbeKwHf+xZKJaCv59nst
lDpVDzuhol56mKuPqdbzIWavf/p9Mia3tKwK99T47s3XgWXJI+KvKpEJqJoXogq8
RVguVI/qCVpu8hC0wDTi+S53pmg6xbm5LqghdQY2UNSd/mNovYJxvOohOnBjZwP4
W3Z1+3dcbKlNMizZ5oVxPyQ+bZ/uWXpFmsfm3Hrv/BAzM4hrPsCnZIVDBY7l/C6z
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13066683827029459994790144791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 20:13:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 18:30:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'q2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20895325276930506744331118745702975795475654594915419404217582752643320814681690985008459549808110444421792555829375214170824663821434677136360153660932774637855897335134976513719198151418176496214181907962621722967499786568912048011056612516978445268655556814335899045620904117537114410212121478075976744089507492666565018317231972585076271480569439160568288829526948656113479320670702250005579221025020511039154275489076894089267102803989749339115556644394700840308908936500012679108539070262305131912121052116272028706710116146385356489486612240285205306315977579763149033328724036078809614601982375071769175176119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baileyhats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fbcd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fl.bankaletihad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangolstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsdeutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsr.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsserve.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reson8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resonate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sneak.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.resourcewatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileyhats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nbcu.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nbcu.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityswoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityswoon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containersummit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturewhisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piabijoux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piajewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly-morris.inchoo4u.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dev.yelpwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangolstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsdeutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsr.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsserve.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvm.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mmgo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp-prd.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testersupport.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi-assets.fl.yelpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturewhisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philippsresume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technobezz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youversion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecdf121e4234c8ecfe4c0d512ce2b3863dd47a91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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