m2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 0f:03:33:71:17:ed:39:d9:2d:2b:89:39 was issued on by GlobalSign nv-sa.

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:03:33:71:17:ed:39:d9:2d:2b:89:39
Serial Number (int): 4646144851675824436762347833
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: cc:0f:e2:29:89:e7:ff:87:0e:e5:2c:72:34:7a:ba:14:10:a1:9e:b1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 3b:18:36:c5:3e:8c:22:ea:f4:f8:a1:8b:fc:b4:e8:fb:7a:6a:15:c6
Fingerprint (sha256): 11:fa:c7:7f:41:69:8d:b0:28:f3:c9:75:68:a0:a0:f2:2b:b3:0a:03:c7:4b:dd:cf:31:bd:74:06:42:7f:95:88

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate m2.shared.global.fastly.net

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m2.shared.global.fastly.net
*.acurisriskintelligence.com
*.amitree-staging.com
*.api-dev.highstreetapp.com
*.api.highstreetapp.com
*.asia.nikkei.com
*.beatport.com
*.capitalprofile.com
*.commentsold.com
*.dealreporter.com
*.dev.rosettastone.com
*.dr-ubie.com
*.edl.io
*.fabguys.com
*.fabswingers.com
*.inframationgroup.com
*.radio24syv.dk
*.rhimg.com
*.savingcontent.com
*.scientificamerican.com
*.spareroom.co.uk
*.st-rentalia.com
*.teamviewer.com
*.thehashtag.news
*.ubie.app
24syv.dk
about.gitlab.com
about.philo.com
activistmonitor.com
acurisriskintelligence.com
app.maker.co
app.rayvn.global
appmedia.jp
asia.nikkei.com
assets.gitlab-static.net
beatport.com
blog.spareroom.co.uk
blog.spareroom.com
capitalprofile.com
cdn.mailout.co.nz
cdn.thinglink.me
cheapflights.co.uk
content-us-east-2-fastly-b.www.philo.com
content-us-east-2-kenny-fastly.www.philo.com
content-us-east-2-staging-fastly.www.philo.com
dealreporter.com
develop.app.rayvn.global
elegia.fr
f.nowjoin.me
f.pinid.com
fabguys.com
fabswingers.com
foodhandlersolutions.com
inframationgroup.com
nailnation.davidnail.com
photoshoto.com
pro.monin.com
radio24syv.dk
rhimg.com
robotic-cook.secretcdn.net
sandbox-widgets.thinglink.com
savingcontent.com
scientificamerican.com
slides-plugins.adobestock.com
spareroom.co.uk
st-rentalia.com
staging.app.rayvn.global
staging.asia.dev.nikkei.com
static-us-east-2-fastly-a.www.philo.com
static-us-east-2-kenny-fastly.www.philo.com
static-us-east-2-staging-fastly.www.philo.com
sun-gazing.com
teamviewer.com
thehashtag.news
widgets.thinglink.com
www.amitree-staging.com
www.amitree.com
www.artcurial.com
www.brandonflowersmusic.com
www.carrieunderwood.fm
www.centrale-canine.fr
www.cheapflights.ca
www.cheapflights.co.id
www.cheapflights.co.nz
www.cheapflights.co.uk
www.cheapflights.co.za
www.cheapflights.com.au
www.cheapflights.com.hk
www.cheapflights.com.my
www.cheapflights.com.ng
www.cheapflights.com.ph
www.cheapflights.com.sg
www.cheapflights.qa
www.elegia.fr
www.janetjackson.com
www.jasonaldean.com
www.johnsonfitness.com
www.mathcounts.org
www.rascalflatts.com
www.rootedbeauty.com
www.speqs.com
www.sun-gazing.com
www.thecatsfoundation.com
www.thelumineersfanclub.com
www.ufcfightclub.com
www.wahealthcarecompare.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for m2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSKC0VRZrVT6OR73SHw
+N5h0J/XYgOUI2LKyhLcgxgqfSsHtWEaHNdQbAeswi3VIpUirShRwEVo58U70fu6
SWyfA0H+DyWM68bq9fhexPiRQ+uhDdQeF1hFwr0si25khp+0JYUf9+M48VETDryP
VrTi1YvsoFTtMs3Ltl0J439ILxA0NQsFlrdBZenkmjQdQKYfi4WYIsDMF8DxJwQA
VXJsAXzmvn8mGLMyCfnmpxYKE7sbCcxxtVuj6EArB4K5JSA3jeL7BcDpUqSQ7ak+
dcIaOexkiDPxMe4AZTPq9d4PA66qaakBSc/lg69r7N39aC9cDwS+1tAgteNKiOSo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4646144851675824436762347833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 13:28:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 15:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22425317299543001678303712998314428527306981953911962443213375453875837247940638443539959742332931661131082278103288098394264435556158262139629888255872572664797502028483556013910385008163654781501303726883941244068554224064491626893282043605221455064237025013157973991315719115059928131552310847865470289510499429541005491879074027343481808098873059049180368600082201916308424681958199637838467514700062415944836685532312340163709737604879695321241314923846098402808287733502519495937969565652811594978263172424516062216469976810656104815815879721897152547761621911804582479023361029840392244408732695646336962570269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commentsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr-ubie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activistmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.maker.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmedia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.gitlab-static.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mailout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thinglink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-fastly-b.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nowjoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.pinid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodhandlersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailnation.davidnail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.monin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotic-cook.secretcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides-plugins.adobestock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.asia.dev.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-fastly-a.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artcurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonflowersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieunderwood.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrale-canine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janetjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonaldean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsonfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathcounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rascalflatts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rootedbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelumineersfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufcfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahealthcarecompare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0fe22989e7ff870ee52c72347aba1410a19eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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