k.ssl.fastly.net

- Fastly, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:fa:29:86:0c:c7:8a:b2:7f:87:47:7c:d2:57:99:83:82 was issued on by GlobalSign nv-sa.

With 150 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:fa:29:86:0c:c7:8a:b2:7f:87:47:7c:d2:57:99:83:82
Serial Number (int): 1492470701550287971214202656796599014491010
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: a7:a0:d2:6f:88:2a:d9:10:9c:c6:f9:22:44:19:52:ee:b5:ac:98:3b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 6c:ad:bf:a7:21:d6:10:ac:bb:ab:9e:05:b0:13:ef:81:7d:db:5a:65
Fingerprint (sha256): 13:47:05:fd:ff:f8:5f:bc:13:b7:74:f0:04:02:26:ae:fc:23:2f:eb:e3:5a:bc:1f:f5:ab:29:72:03:44:1e:b1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate k.ssl.fastly.net

150

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k.ssl.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k.ssl.fastly.net
*.acast.com
*.adele.com
*.asdagetliving.co.uk
*.bitconveyor.com
*.bookatiger.com
*.businessinsider.de
*.cache.pointinside.com
*.cargurus.com
*.cdn.getfeedback.com
*.cdn.schoology.com
*.content.pugpig-stage.com
*.dips.video
*.duchesne.us
*.entrepreneur.com
*.fastlyse.net
*.go-mpulse.net
*.hashicorp.com
*.lionribbon.com
*.mensjournal.com
*.mirumagency.com
*.plot.ly
*.popkey.co
*.resrc.it
*.rollingstone.com
*.sbnation.com
*.schoology.com
*.soasta.com
*.staging.schoology.com
*.timeanddate.com
*.tradecfdpro.com
*.traitify.com
*.upthere.com
*.usmagazine.com
*.vice.com
*.vox-cdn.com
*.wennermedia.com
*.winehq.org
*.woofound.me
*.youversionapi.com
*.zdigital.com.au
a.tgcdn.net
actionsprout.io
api.dubtrack.fm
api.raventech.cn
app.getambassador.com
archive.gazzang.com
archives.streamsets.com
arrow-dev.banksimple.com
arrow.simple.com
assets.fl.adicdn.com
assets.pipelinedeals.com
cargurus.co.uk
cdn.getambassador.com
cdn.hotdoc.com.au
cdn.kernel.org
code.dev-guardianapis.com
*.code.dev-guardianapis.com
consul.io
content.newsbound.com
corebine.com
device.oddworks.io
dips.video
distractify.com
docops-temp.ca.com
docs.vagrantup.com
edw.edmunds.com
endpoint.edmunds-media.com
entrepreneur.com
gifs.com
*.gifs.com
gifyoutube.com
*.gifyoutube.com
hashiconf.com
hashiconf.eu
hashicorp.com
hf-alpha.fatline.io
image-service.edmunds-media.com
images.fl.adicdn.com
img.triggermail.io
kinja.com
*.kinja.com
lagrangesystems.net
*.lagrangesystems.net
licdn.com
*.licdn.com
lionribbon.com
lt.thinkgeek.com
media.ed.edmunds-media.com
mensjournal.com
mirumagency.com
mopidy.com
*.mopidy.com
mumble.info
*.mumble.info
nomadproject.io
openmrs.org
*.openmrs.org
ottoproject.io
packer.io
popkey.co
qa.dev-guardianapis.com
*.qa.dev-guardianapis.com
readthedocs.org
*.readthedocs.org
report-ads-to.pnsandbox.com
report-ads-to.pubnation.com
rollingstone.com
sbnation.com
script.i-parcel.com
serfdom.io
services.edmunds-media.com
stacker.cc
*.stacker.cc
staging.actionsprout.io
staging.schoology.com
static.ed.edmunds-media.com
terraform.io
theoutbound.com
tradecfdpro.com
u.jimdo.com
upthere.com
usmagazine.com
vagrantup.com
vaultproject.io
vox-cdn.com
wennermedia.com
www.consul.io
www.distractify.com
www.edmunds.com
www.egg-japan.com
www.estudiabetes.org
www.hashiconf.com
www.hashiconf.eu
www.itsmgb2uat-fastly.ito.unisys.com
www.monkeytest1.co.uk
www.nomadproject.io
www.ottoproject.io
www.packer.io
www.passivetotal.org
www.serfdom.io
www.sitespeed.io
www.spokeo.com
www.supportadultliteracy.org
www.terraform.io
www.timeout.jp
www.tudiabetes.org
www.vagrantup.com
www.vaultproject.io
www.wistia.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for k.ssl.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ5RBSd0KDXlKIU7xeYo
uFl+dr4NhsjvqyA/ctQ4bxn7z/8SEE5nLtbj/6zae7o0dpYV9qKTDXpMPMgsB/Mf
7qHnybvhV+DbfoBY0RxLwdwqvOeoErL/bhcgDj+KSbppxjR1kG1qWP+sQEkx/Wr1
JNXAMiL7dNOooIosDNadxDCrBfm/DZrC24FZvY+fU5VTZafRkw8EfkXv3HF705G3
b3a+UprzL1lAsN5a/SCgRQEHwHk5+fi48Vg+0Ta7lmnnh78uYOgAl64+RES1FjNO
tmLVDm/KNDVVsL7e3Kz/ulYYIdOEjH09j58SbrmlxsVSx7ntLLUaj9xnJvWKpq83
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492470701550287971214202656796599014491010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-22 21:52:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 18:03:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k.ssl.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25885912239863459410280013081862380617113205819188183863904657786011620949269338192492869522271619252808680013860557311290373712195776234395594645077691993518395542849735843466980191928769178968043531369971241986473912996651090753511338851712691276402191259385757839637018445558695065426481979497625341373105031813904786165920043130696988136502566144863957301674698013057349724020490563445609550032322209946991921021071092989314486953588114802153782959410905316410611664736709826355416661990199775356762843701838204868229768635186237158720906398576072829794085051645238501060225788618402709042368922271846185370072981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2759 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.ssl.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagetliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitconveyor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookatiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessinsider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cache.pointinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cargurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.getfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.pugpig-stage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dips.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duchesne.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastlyse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-mpulse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hashicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionribbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mensjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirumagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plot.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popkey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resrc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollingstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soasta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeanddate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradecfdpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traitify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upthere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vox-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wennermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winehq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woofound.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youversionapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.tgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionsprout.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dubtrack.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.raventech.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getambassador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.gazzang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.streamsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrow-dev.banksimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrow.simple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.fl.adicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.pipelinedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargurus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.getambassador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hotdoc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kernel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.dev-guardianapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.code.dev-guardianapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consul.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.newsbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corebine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device.oddworks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dips.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distractify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docops-temp.ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.vagrantup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edw.edmunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint.edmunds-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashiconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashiconf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hf-alpha.fatline.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-service.edmunds-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.fl.adicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.triggermail.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrangesystems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagrangesystems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionribbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.thinkgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ed.edmunds-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirumagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopidy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mopidy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumble.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mumble.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomadproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openmrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openmrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottoproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popkey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.dev-guardianapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.dev-guardianapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readthedocs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readthedocs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report-ads-to.pnsandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report-ads-to.pubnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollingstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.i-parcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serfdom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.edmunds-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacker.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stacker.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.actionsprout.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.ed.edmunds-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoutbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradecfdpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.jimdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upthere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagrantup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaultproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vox-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wennermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consul.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distractify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egg-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estudiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hashiconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hashiconf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsmgb2uat-fastly.ito.unisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monkeytest1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomadproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottoproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passivetotal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serfdom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitespeed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spokeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportadultliteracy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeout.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tudiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vagrantup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaultproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wistia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7a0d26f882ad9109cc6f922441952eeb5ac983b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00211ed7b2a485d383795281f216ba00ee086e9ca0b9bcd6b77e23e4042f2ce75126b3419bf8f5facf9eabada43993239c500bd2753787b485687e1854c7e625ab5aba2ce990dca87b661aba1b5347a8a5920c631800726957583d4620df4b1c8d170f185d267f12944032cd5b6c1f4176baaa9258bfeb9f34924e6c599dd52af95facd21d20d449bcd09a51ca4bb491ecb9569b157c0b5075ad64171c7895b83c23b4a3b350f43a417f2980468bd2d69d39b3dd93aa0f3a98b490568cb6c206f6c8da9213229966d3b62521e042a9ef9101aec986b7966f3448f82948a01222a8d358643f1735f1a191a54b0a35b165606ea8d39426d9be6aecb9a0b23e3f4461