b3.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 34:47:a1:8a:ed:7a:ef:3b:23:69:ab:6c was issued on by GlobalSign nv-sa.

With 112 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 34:47:a1:8a:ed:7a:ef:3b:23:69:ab:6c
Serial Number (int): 16179817107669259201314138988
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 3a:6d:da:57:ab:af:f5:1c:27:69:f6:31:cb:3f:14:3f:ea:23:5f:10
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 8e:e5:3f:b7:cb:78:b0:0e:ec:63:38:aa:f5:e6:d3:11:e3:03:e1:46
Fingerprint (sha256): 10:dc:07:11:f5:e3:b8:59:dc:b9:11:37:d7:0c:54:54:8e:71:77:87:da:f9:63:40:87:a9:3e:c4:c6:85:73:71

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate b3.shared.global.fastly.net

112

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b3.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b3.shared.global.fastly.net
*.api.app-staging.c-rayon.com
*.api.app.c-rayon.com
*.api.plan3.se
*.bravesoftware.com
*.chdrstatic.com
*.clothingshoponline.com
*.dekbed-discounter.nl
*.dev-selz.com
*.dev.cbsinteractive.com
*.dev.gospotcheck.io
*.drybarcomedy.com
*.eileenfisher.com
*.gologon.de
*.gospotcheck.com
*.gospotcheck.io
*.hurryhome.io
*.implantdirect.com
*.jobtalk-dev.jp
*.jobtalk.jp
*.johnnywas.com
*.kavo.com
*.ku556.net
*.ku771.net
*.kucdn.net
*.kulist.net
*.master.tagvenue.uk
*.medal.tv
*.mitienda-abi.cl
*.myvegas.com
*.nobelbiocare.com
*.nok.se
*.p5cdn.com
*.performance.tv.fit
*.prd.gospotcheck.io
*.preprod.tv.fit
*.prod.platform.dental
*.productfy.io
*.ratemyprofessors.com
*.rewards.brave.software
*.sbx.bestegg.com
*.skynewsarabia.com
*.skynewsarabiatv.com
*.soundstripe.com
*.sta.platform.dental
*.stg.bestegg.com
*.stg.gospotcheck.io
*.tv.fit
*.uat.bestegg.com
archive.petersen.org
armurerie-auxerre.com
batcommunity.org
blog.batcommunity.org
c.lvimg.jp
canhls.cbs.com
cdn-mr.contentful.com
cdn.bmw-connected.com
cdn.faire.com
cdn.mini-connected.com
cdn.shpp.ext.zooplus.io
click.em.kickstarter.com
clothingshoponline.com
config2-staging.mparticle.com
content.api.plan3.se
content.cpcworldwide.com
cycleboxer.com
drybarcomedy.com
events.redislabs.com
graphql.flinkly.com
hotel-api.bushikaku.net
identity-staging.mparticle.com
jobtalk-dev.jp
jobtalk.jp
johnnywas.com
jssdkcdn.mparticle.com
jssdkcdns.mparticle.com
jssdks-edge.mparticle.com
jssdks.mparticle.com
kickstarter.com
ku556.net
learning.oreilly.review
lup.events
lupstaging.events
media2.barfoot.co.nz
mitienda-abi.cl
play.seenthis.co
redislabs.com
referrals.bravesoftware.com
refinery29.com
rlp.cincmedia.com
secure.votesmart.org
semadams2.petersen.org
sendgrid.churchmetrics.com
soundstripe.com
static.goodiebox.nl
static.votesmart.org
test2.patra.store
tv.fit
votesmart.org
www.armurerie-auxerre.com
www.batcommunity.org
www.cpcworldwide.com
www.flavorwest.com
www.jobstock.jp
www.lifespanfitness.com
www.mw-hi.de
www.staging.basicattentiontoken.org
www.votesmart.org
www.zebrablinds.ca
www.zebrablinds.com
zebrablinds.ca
zebrablinds.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for b3.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoshObn5AM8fNY2UUejvA
fO5NaTqB1TaYndgo7yQHCJfpZPN+I/f1u/TCNU8zqWs9Sb5SJ2k/4gqqiUy3qpSh
tmzr2MTAPNOIePgP4e6iFaruuC2l6LeXnhrVMQfE3WxlE56cQS/twtd348EoYwEY
jN0AkVrMYHcxuALW/NfHhA/WyH5ibQhTtBcTVRkRTHVDjyx+lRLki6R5vE0bIaAe
6kXpjsHxsl4sCX2fSo/bbExZJWy3hVSsOx78D8S5VCTkgJ7WaB5kUX98F0vNJeXF
1BgHs5y3kUOIIaOBrQYmgTjrI0Oyhz9KESiQRUcE3mG84oqAMOGNfkfqiiFGFGIe
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16179817107669259201314138988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 14:19:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-18 17:56:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b3.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20549380158655870038147392879314040463252820625107586167270741166199715090748590772732028069057670798761244990171756586204931976136687330017666994107815784307534429654000454831170849934746776432576439824135458744507564773132171612237286798176966227541538565291566056955620796241448952354159191323455148596047653405245410214347745872617176764136411552203229337766438589972825558704242533598743070288167065722791201277626085661679609408716322582103623588386895490181625892130917890392339548107683815103096458449968634850801472578626687870267142024288820236494303097416900496142614810320087219109228832916131951824477951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.app-staging.c-rayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.app.c-rayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.plan3.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chdrstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothingshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekbed-discounter.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-selz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drybarcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eileenfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gologon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gospotcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurryhome.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.implantdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobtalk-dev.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobtalk.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnnywas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ku556.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ku771.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kucdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kulist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.master.tagvenue.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitienda-abi.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nobelbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nok.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p5cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performance.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productfy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratemyprofessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewards.brave.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbx.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabiatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sta.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.petersen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armurerie-auxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lvimg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canhls.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-mr.contentful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bmw-connected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.faire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mini-connected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shpp.ext.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.em.kickstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothingshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config2-staging.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.api.plan3.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cpcworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycleboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drybarcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.redislabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.flinkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-api.bushikaku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-staging.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobtalk-dev.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobtalk.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnywas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdkcdn.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdkcdns.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdks-edge.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdks.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ku556.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.oreilly.review'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lup.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupstaging.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.barfoot.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitienda-abi.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.seenthis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redislabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referrals.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinery29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlp.cincmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.votesmart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semadams2.petersen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendgrid.churchmetrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.goodiebox.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.votesmart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.patra.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votesmart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armurerie-auxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flavorwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobstock.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifespanfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mw-hi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.votesmart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebrablinds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebrablinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zebrablinds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zebrablinds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6dda57abaff51c2769f631cb3f143fea235f10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016e086fafe80000040300473045022015aa5b724425c72189650a21de65e17ba21e326e8a4993b130c807667d912aad022100bdaf360d2b0c931992d866f60bae5e7e0871d735667f1de2a94eb62b0fec8b34007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e086fb23b000004030047304502205422841201875cb4fe635d7dba17c1a83f63d4358d1a393ce2d58da1f6a7ca30022100fd680ce314e1f9f80292752515e5e1cdb7a1867128334ef77ee980fbbbc027e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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