i2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 56:85:f0:fb:55:4d:54:6b:67:92:f2:0d was issued on by GlobalSign nv-sa.

With 107 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 56:85:f0:fb:55:4d:54:6b:67:92:f2:0d
Serial Number (int): 26777635982879734693222347277
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bb:73:3a:08:92:be:a5:77:e6:d5:4a:04:c9:22:b7:6d:f4:58:39:82
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): bb:7d:31:8e:7a:83:5b:bf:19:ae:40:a4:fc:a8:8e:c2:8f:7d:7f:4d
Fingerprint (sha256): 11:a9:b9:5b:7d:16:c7:7f:d0:f7:bb:5a:f2:01:b2:1f:0f:75:b0:cf:a2:2d:4f:6f:4a:55:b6:2e:12:d8:73:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate i2.shared.global.fastly.net

107

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for i2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i2.shared.global.fastly.net
*.amphitheatrecogeco.com
*.answersingenesis.com.au
*.arcteryx.com
*.asiaboxoffice.com
*.asroma.com
*.axs.com
*.creditrubric.com
*.deliveroo.net
*.dev.spaceship.com.au
*.eat24hour.com
*.eventshopper.com
*.forhers.com
*.forhims.com
*.front.toprural.com
*.fs.filepickerapp.com
*.fst.lmno.care
*.groupninemedia.com
*.hims.io
*.hitched.co.uk
*.infura.io
*.ixinspire.co
*.jsdelivr.net
*.lediamant.ca
*.lneats.com
*.manchestermonarchs.com
*.nouvelobs.com
*.nowthisnews.com
*.nowthisoriginals.com
*.skim.gs
*.spaceship.com.au
*.spaceshipinvest.com.au
*.tnm.qc.ca
*.toprural.cat
*.toprural.co.uk
*.toprural.com
*.toprural.de
*.toprural.fr
*.toprural.it
*.toprural.nl
*.toprural.pt
*.triptease.com
*.veilance.com
*.viceland.com
acorns.com
admin.applicaster.com
amphitheatrecogeco.com
api.redditisfun.com
app.qa.usertesting.com
appboy.com
axs.com
cdn-a.william-reed.com
cdn-b.william-reed.com
cdn.commentsold.com
cloudsavvyit.com
creditrubric.com
eat24hour.com
eventshopper.com
fastly.syfy.com
fastly.usanetwork.com
grafana.hwk-cloud.de
groupninemedia.com
grow.acorns.com
hitched.co.uk
hunter-staging-uat.usemarkup.com
infura.io
internationalgames.nflonlocation.com
internationalonlocation.com
jsdelivr.net
lneats.com
m.lieferando.de
maps.geops.io
mobile-licenseserver.carto.com
mytuner-radio.com
nouvelobs.com
nowthisoriginals.com
rocketleague.com
skim.gs
spaceship.com.au
spaceshipinvest.com.au
sports.bonotel.com
ssl.screenrush.io
stage.lieferando.de
thrillist.com
tickets.cirquedusoleil.com
tnm.qc.ca
triptease.com
viceland.com
www.acorns.com
www.aws-dev.moo.com
www.championshockeyleague.com
www.howtogeek.com
www.howtogeekpro.com
www.internationalonlocation.com
www.lieferando.de
www.lifesavvy.com
www.lifesavvymedia.com
www.omnigon.com
www.reviewgeek.com
www.rocketleague.com
www.top10vpn.com
www.triptease.com
www.victoria.ac.nz
www.zesty.io
xrpcharts.ripple.com
zaptank.cf
zesty.io

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for i2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5uRnt1lIZ9uMa41kxmk
ruYOsMKsUltmqPteBZiEBHWeTG8CjKVT3HiZAab0I9fW6RaZPtsWqFxTsKFhbv3Z
OIpcxiRw8rqxv22UPMNx9F+fnUX1ns9WF/HHZeJQA0aOpNxEEd9v0NK/3rbc4Ysy
OOQverdCb0aQZdcRs8YfF3sv1jD8hRU++IZIOWL/wP9muLcD9zH89Yrrez2yfvGI
45saIs+/ZqULceKh8FVpD5WCMZvxlb348lLGQmqNpXmkSQTrZcCFF8y0SDd48KmN
Y5tb0aR03w6AxUQ19qKOAim9D3J78Z4lz88tEEcKfiCBkUESXXwvwxVI+qcVH8eR
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26777635982879734693222347277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 15:18:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 16:04:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'i2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25198136537648100109737522841799020038380980519843122824251675537722831323473117928278254531260207665169901551241876930885944708905706421964634066154598544586411038051073060838661680415914313955625260434330252629132825923803732799293380462924750787741312674225656783270310414011139132118686509600214251100431893400448613410086662073160138188502847124209899844283399735754866980375697436498589511616015898899265586555487027909199861020222622269415801056345864360232027686946015788749202004021622179244535790615930449814117852150694283581621663926064348326285812811348045672753943085116162780266273566041333725707866551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2019 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amphitheatrecogeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answersingenesis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcteryx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asiaboxoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditrubric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deliveroo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.spaceship.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eat24hour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.front.toprural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.filepickerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fst.lmno.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupninemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hims.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infura.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ixinspire.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsdelivr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lediamant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lneats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manchestermonarchs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowthisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowthisoriginals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skim.gs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaceship.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnm.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toprural.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triptease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veilance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.applicaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amphitheatrecogeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.redditisfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.qa.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-a.william-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-b.william-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.commentsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsavvyit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditrubric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eat24hour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.syfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.usanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.hwk-cloud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupninemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grow.acorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunter-staging-uat.usemarkup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infura.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalgames.nflonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsdelivr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lneats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.lieferando.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.geops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-licenseserver.carto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytuner-radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowthisoriginals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skim.gs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceship.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports.bonotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.screenrush.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lieferando.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrillist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cirquedusoleil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnm.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triptease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aws-dev.moo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshockeyleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtogeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtogeekpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lieferando.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifesavvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifesavvymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnigon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reviewgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.top10vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triptease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoria.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zesty.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrpcharts.ripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaptank.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zesty.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb733a0892bea577e6d54a04c922b76df4583982
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000017034d454d50000040300473045022100c3f19d63ef3596aee869994fb2b81c97056111b32989e2db6792bd5c6e5660dc0220626cc078c9c8ee45e40b6a2e99589b5fe790c1f0f174c28baf0ac0e330d2784d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017034d455180000040300473045022009484b3fa4f713fbb6bf34e2a99353a44fd5735942d238a28820b2dbf209c923022100b35c6a96fc2ae14dae5feec75ec407ae66337c61507cf527568381705afddf7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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