twentythree4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 63:68:29:3b:54:57:c3:69:4b:2f:95:79 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 63:68:29:3b:54:57:c3:69:4b:2f:95:79
Serial Number (int): 30764938969014322321400239481
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3d:1e:39:d2:51:4c:07:5f:7f:4e:47:a5:d8:9d:8f:60:46:90:bf:4b
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 5f:fc:19:88:28:4c:33:c1:91:ed:47:84:55:bc:e5:45:aa:0c:70:58
Fingerprint (sha256): 12:4e:32:f0:80:e0:0c:4f:2e:0a:b5:7e:55:06:7d:f3:8f:d6:aa:97:35:b5:7a:3b:bf:23:3a:bf:48:f7:76:5a

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate twentythree4.map.fastly.net

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twentythree4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twentythree4.map.fastly.net
*.23demo.com
*.23video.com
*.personalvideo.co
*.videomarketingplatform.co
23.seeknspeak.dk
aivi.webtvksoft.tv
film.bjorkneshoyskole.no
intern.video.koege.dk
internal-video.rockwoolgroup.com
play.estatenyheter.no
ski-tv.no
test.video.merkantilplay.dk
tv-intranett.roede.com
tv.issworld.com
tv.kilroy.be
tv.kilroy.dk
tv.kilroy.fi
tv.kilroy.is
tv.kilroy.net
tv.kilroy.no
tv.kilroy.se
tv.kilroyworld.nl
tv.tec.dk
uk.video.adama.com
video-eudvoksen.gyldendal.dk
video.allenmatkins.com
video.assaabloyopeningsolutions.no
video.assetadvisor.dk
video.barely.live
video.bornibyen.dk
video.chapmanbright.com
video.confindustria.vicenza.it
video.cphlive.dk
video.danskerhverv.dk
video.digital22.com
video.digitalpi.com
video.dis-play.dk
video.ecolane.com
video.em.dk
video.excellenceinstallation.com
video.flsmidth.com
video.fukk.dk
video.georgjensen.com
video.globeshare.mds.net
video.goecker.dk
video.gorizen.com
video.inboundnorway.com
video.iteo.no
video.koege.dk
video.ku.dk
video.labovick.com
video.madfeed.co
video.markedspartner.no
video.mediajunction.com
video.merkantilplay.dk
video.mo.agency
video.nextconf.eu
video.ngn.no
video.nortekgroup.com
video.novonordisk.es
video.pokalturnering.dk
video.qiagen.com
video.ramboll.com
video.revenueriver.co
video.rockwoolgroup.com
video.rodekors.dk
video.salesvalue.net
video.sana-commerce.com
video.santaritaranchaustin.com
video.seeknspeak.dk
video.sikkertrafik.dk
video.skousen.dk
video.skousen.no
video.stjernholmco.dk
video.successflow.co.uk
video.sunviewsoftware.com
video.survata.com
video.techfestival.co
video.teliacompany.com
video.teliacompany.net
video.thatagency.com
video.tretti.se
video.trioving.no
video.vestas.com
video.vibbio.com
video.vikingfootwear.com
video.webcruiter.com
video.whiteaway.com
video.whiteaway.no
video.whiteaway.se
video.whitehat-seo.co.uk
video.wuerth.no
video.ysi.com
videos.agencenile.com
videos.cliptoo.nl
videos.firstcut.io
videos.impulsecreative.com
videos.inbound.film
videos.inc-asean.com
videos.onestreamsoftware.com
videos.spotify.net
videos.storyblock.media
videostream.kpmg.de
webinar.aspia.se
webinar.intranote.dk
webinar.jyskebank.dk
webinar.nordicsemi.com
webinars.nordicsemi.com
webinars.sitecore.com
www.atletiktv.dk
www.seges.tv
www.ski-tv.no
www.video.teledynemarine.com

Other certificates including the domain name twentythree4.map.fastly.net

(limited to 100 certificates)
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net

Certificate

The complete raw certificate details for twentythree4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRcIF0mRw9hxJwCsquFm
YKwRcLfxKVbPCZ44Jzd7fHA5LvsWBjlHozscu8fcZP0uZvOcN5k4zQ31GVEVZ1kh
EwcKJVhbAe4uz2h95K1W/dfYZFJwv1pUKXCbquMxeWtnlz0OFzh9P6qh5PQxpvn5
2THuojqWEZgrZ+wnwr8yg8KEDEKh5VHQSaolWh/i2FwUdD1c21vTYXLtCgybJ/K+
zc8SuADIL13r9Jx/Hwpng8xBVnPjPiy2iGo7A0HKx/ez4YIWoDgKY+/ZKH3B6evK
NL16XJvxLhyha/4zLYEjpgX29Imvz4TogHMFmvp3VxZNZB8qVQHtYoP831YujsMs
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30764938969014322321400239481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 11:49:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 17:55:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'twentythree4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23365443726605292963579099255091134887109926026101280205053570494811264993697770511729988946133386064981659710041659402950596924482542325761625314193862104495769439708481931346446428476486598260195339930057161577689215157524409987431091378505338651363558702120119382852981836028576426367165044588896897100108021221545523080952558868562832057457195887470146272934457373729652181336344561781744261134828116763565611788010273132074581787658481612305312058833934678877294352199883252809250913894323680200039589925983082327290754328962274506215409335571928447479098612416176481406141489020703934300931489170354613589847243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentythree4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23video.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalvideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videomarketingplatform.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '23.seeknspeak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aivi.webtvksoft.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.bjorkneshoyskole.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.video.koege.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-video.rockwoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.estatenyheter.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ski-tv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.video.merkantilplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-intranett.roede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.issworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroyworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.tec.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.video.adama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-eudvoksen.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.allenmatkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.assaabloyopeningsolutions.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.assetadvisor.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.barely.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.bornibyen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.chapmanbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.confindustria.vicenza.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.cphlive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.danskerhverv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.digital22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.digitalpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.dis-play.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ecolane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.em.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.excellenceinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.flsmidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.fukk.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.georgjensen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.globeshare.mds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.goecker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.gorizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.inboundnorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.iteo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.koege.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ku.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.labovick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.madfeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.markedspartner.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.mediajunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.merkantilplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.mo.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.nextconf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ngn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.nortekgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.novonordisk.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.pokalturnering.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.qiagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ramboll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.revenueriver.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.rockwoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.rodekors.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.salesvalue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sana-commerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.santaritaranchaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.seeknspeak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sikkertrafik.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.skousen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.skousen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.stjernholmco.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.successflow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sunviewsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.survata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.techfestival.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.teliacompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.teliacompany.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.thatagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tretti.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.trioving.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vibbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vikingfootwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.webcruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whitehat-seo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.wuerth.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.agencenile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.cliptoo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.firstcut.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.impulsecreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.inbound.film'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.inc-asean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.onestreamsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.spotify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.storyblock.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostream.kpmg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.aspia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.intranote.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.nordicsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.nordicsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.sitecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atletiktv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seges.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ski-tv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video.teledynemarine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1e39d2514c075f7f4e47a5d89d8f604690bf4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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