m2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 61:21:80:6b:e0:c5:a0:13:9f:7b:e1:c4 was issued on by GlobalSign nv-sa.

With 107 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:21:80:6b:e0:c5:a0:13:9f:7b:e1:c4
Serial Number (int): 30060546957625705271626817988
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: cc:0f:e2:29:89:e7:ff:87:0e:e5:2c:72:34:7a:ba:14:10:a1:9e:b1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 8c:51:e5:50:e0:c5:cb:f5:12:f4:39:e2:7d:44:5f:50:03:d6:e1:8a
Fingerprint (sha256): 12:e0:a6:dc:57:f2:8b:74:96:0b:45:81:83:f4:96:67:b0:b8:e9:26:b6:01:cd:2f:32:77:7e:3a:b3:55:fe:b3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate m2.shared.global.fastly.net

107

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m2.shared.global.fastly.net
*.24syv.dk
*.acurisriskintelligence.com
*.amitree-staging.com
*.api-dev.highstreetapp.com
*.api.highstreetapp.com
*.asia.nikkei.com
*.beatport.com
*.capitalprofile.com
*.commentsold.com
*.dealreporter.com
*.dev.rosettastone.co.kr
*.dev.rosettastone.com
*.dr-ubie.com
*.edl.io
*.fabguys.com
*.fabswingers.com
*.inframationgroup.com
*.pelawreport.com
*.privatefundreport.com
*.radio24syv.dk
*.rhimg.com
*.savingcontent.com
*.scientificamerican.com
*.spareroom.co.uk
*.spareroom.com
*.st-rentalia.com
*.stock.stage.adobe.com
*.teamviewer.com
*.ubie.app
24syv.dk
about.gitlab.com
about.philo.com
about.staging.gitlab.com
activistmonitor.com
acurisriskintelligence.com
app.maker.co
app.rayvn.global
appmedia.jp
asia.nikkei.com
assets.gitlab-static.net
beatport.com
capitalprofile.com
cdn.mailout.co.nz
cdn.thinglink.me
cheapflights.co.uk
content-us-east-2-fastly-b.www.philo.com
content-us-east-2-kenny-fastly.www.philo.com
content-us-east-2-staging-fastly.www.philo.com
dealreporter.com
develop.app.rayvn.global
f.nowjoin.me
f.pinid.com
fabguys.com
fabswingers.com
inframationgroup.com
nailnation.davidnail.com
photoshoto.com
privatefundreport.com
pro.monin.com
radio24syv.dk
rhimg.com
robotic-cook.secretcdn.net
rosettastone.co.kr
sandbox-widgets.thinglink.com
savingcontent.com
scientificamerican.com
slides-plugins.adobestock.com
spareroom.co.uk
st-rentalia.com
staging.app.rayvn.global
staging.asia.dev.nikkei.com
static-us-east-2-fastly-a.www.philo.com
static-us-east-2-kenny-fastly.www.philo.com
static-us-east-2-staging-fastly.www.philo.com
stock.adobe.com
sun-gazing.com
teamviewer.com
ubie.life
widgets.thinglink.com
www.amitree-staging.com
www.amitree.com
www.brandonflowersmusic.com
www.carrieunderwood.fm
www.cheapflights.ca
www.cheapflights.co.id
www.cheapflights.co.nz
www.cheapflights.co.uk
www.cheapflights.co.za
www.cheapflights.com.au
www.cheapflights.com.hk
www.cheapflights.com.my
www.cheapflights.com.ng
www.cheapflights.com.ph
www.cheapflights.com.sg
www.cheapflights.qa
www.janetjackson.com
www.jasonaldean.com
www.mathcounts.org
www.rascalflatts.com
www.rosettastone.co.kr
www.speqs.com
www.sun-gazing.com
www.thecatsfoundation.com
www.thelumineersfanclub.com
www.ufcfightclub.com
www.wahealthcarecompare.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for m2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSKC0VRZrVT6OR73SHw
+N5h0J/XYgOUI2LKyhLcgxgqfSsHtWEaHNdQbAeswi3VIpUirShRwEVo58U70fu6
SWyfA0H+DyWM68bq9fhexPiRQ+uhDdQeF1hFwr0si25khp+0JYUf9+M48VETDryP
VrTi1YvsoFTtMs3Ltl0J439ILxA0NQsFlrdBZenkmjQdQKYfi4WYIsDMF8DxJwQA
VXJsAXzmvn8mGLMyCfnmpxYKE7sbCcxxtVuj6EArB4K5JSA3jeL7BcDpUqSQ7ak+
dcIaOexkiDPxMe4AZTPq9d4PA66qaakBSc/lg69r7N39aC9cDwS+1tAgteNKiOSo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30060546957625705271626817988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 18:43:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 15:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22425317299543001678303712998314428527306981953911962443213375453875837247940638443539959742332931661131082278103288098394264435556158262139629888255872572664797502028483556013910385008163654781501303726883941244068554224064491626893282043605221455064237025013157973991315719115059928131552310847865470289510499429541005491879074027343481808098873059049180368600082201916308424681958199637838467514700062415944836685532312340163709737604879695321241314923846098402808287733502519495937969565652811594978263172424516062216469976810656104815815879721897152547761621911804582479023361029840392244408732695646336962570269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commentsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rosettastone.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr-ubie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelawreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatefundreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stock.stage.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.staging.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activistmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.maker.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmedia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.gitlab-static.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mailout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thinglink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-fastly-b.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nowjoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.pinid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailnation.davidnail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatefundreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.monin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotic-cook.secretcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosettastone.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides-plugins.adobestock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.asia.dev.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-fastly-a.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubie.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonflowersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieunderwood.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janetjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonaldean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathcounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rascalflatts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosettastone.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelumineersfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufcfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahealthcarecompare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0fe22989e7ff870ee52c72347aba1410a19eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169bb507d3f000004030047304502204b2d7b8ce818d0f13440f54ed54336a06a5fbdece8b1202f1571e4e908000017022100a8d44e831995f5bd909a7a9a604eac9bd0e7c07ef315a5196cca6dffc92241aa0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169bb507d7b0000040300473045022057c0b54c9ea089f941402b1173423c15aa315491752eb494d2e783e6b930cd9b022100c8aaf510fe317e78a5009a9051bbe09f1b9f3d3d5c0d82f751facecc80e95948
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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