u2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 61:dd:f2:77:ac:6d:46:1f:dd:b8:d6:66 was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:dd:f2:77:ac:6d:46:1f:dd:b8:d6:66
Serial Number (int): 30288363579081367989155059302
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 57:e7:1a:c5:aa:c4:65:7c:eb:68:b5:59:8d:26:80:2a:74:c5:61:dd
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e2:f5:49:9d:00:f0:54:63:2e:ff:a1:9e:53:66:ae:b4:c4:de:41:e2
Fingerprint (sha256): 16:66:6e:0f:de:c2:10:87:5d:0f:11:84:a6:43:bf:72:9c:4d:e2:8f:8f:c3:e8:d5:fd:3f:3b:12:7a:59:28:32

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate u2.shared.global.fastly.net

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u2.shared.global.fastly.net
*.alizila.com
*.art19.com
*.basicattentiontoken.org
*.boardroom.media
*.brave.software
*.cdn.appcues.com
*.cdn.procore.com
*.develop.mbtmedia.com
*.elifesciences.org
*.footwearnews.com
*.greenentrepreneur.com
*.hollywoodlife.com
*.hoteltonight-test.com
*.hoteltonight.com
*.hudl.com
*.indiewire.com
*.itsrosy.com
*.letour.fr
*.livesense.co.jp
*.lumity.com
*.mabelandmoxie.com
*.mbtmedia.com
*.mercury.basicattentiontoken.org
*.nirvc.com
*.pictures.itsrosy.com
*.pictures.mabelandmoxie.com
*.pmc.li
*.pmcdev.io
*.pmcqa.com
*.procore.com
*.procorecon.com
*.procoretech-qa.com
*.production.cdn.art19.com
*.rollingstone.pmcqa.com
*.s3.brave.com
*.s3.bravesoftware.com
*.sheknows.com
*.spy.com
*.staging.art19.com
*.staging.brave.io
*.staging.cdn.art19.com
*.staging.twmlabs.com
*.stylecaster.com
*.sweetwater.com
*.thezoereport.com
*.twmlabs.com
*.usccadev.com
*.usconcealedcarry.com
*.withings.com
adblock-data.brave.com
americanoutlawstravel.com
analytics.basicattentiontoken.org
api.weld.io
app.betterimpactcdn.com
assets.procore.com
basicattentiontoken.org
boardroom.media
book.anthonytravel.com
bravesoftware.com
c.crm-kozuchi.com
cdn-f.adsmoloco.com
cdn2.funnelenvy.com
cdn3.funnelenvy.com
cidentertainment.com
core.improove.se
css.appcues.com
dvwa.techiegroup.com
elifesciences.org
experiences.ufcvip.com
footwearnews.com
fstlive.kaltura.com
greenentrepreneur.com
hollywoodlife.com
hoteltonight-test.com
hoteltonight.com
indiewire.com
klive-stg.kaltura.com
klive.kaltura.com
lumity.com
lvimg.jp.stg.lvs.space
mbtmedia.com
nirvc.com
omgs.in
pmc.li
sdk.appcues.com
sheknows.com
shop.cidentertainment.com
spy.com
staging.basicattentiontoken.org
stylecaster.com
tickets.nflonlocation.com
totalwine.com
usccadev.com
usconcealedcarry.com
virginamerica.com
vod1.kaltura.com
www.basicattentiontoken.org
www.cidentertainment.com
www.dev.evape.com
www.macrotrends.net
www.niceultimed.com
www.predictem.com
www.thesmbguide.com
www.weld.io

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for u2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Rf+lq6YfAvYxjIs1rX
H/TRJf8/vChHiEH0BZ/LwEHPPkJ5WuRdM5I7YYJrhpnuLD8C4qscUOUACEH+k1j6
tWmN67fxbJ0bs1ZLkP3uMJLbe1Fjw0cil/l1RqHvt8j4gcf84Z3pMOgO5QtAeqnA
6rTgtsVoy7wlOBHGbWrGAkDw116D/EL1K4D80MbIs9sQHbG+mMYy24ypkzvljuzx
mpFzrGAUXac7qFmqQLEvaN7UUz866jP9moj3FBogUImFU8gLJ2ALvVWPW25S/9IG
jlhcr/zg36Tffmfc9itgVNhSKQPw43Rol1swjZQnk4FVNpvG8t802vIvWrJH6aaQ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30288363579081367989155059302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 15:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 18:32:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'u2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25715322093201556743925983685501859602381528532849680189164513774400263906747568970831551681516034056199543696525607676504474686200343774416606247870177534872845891154904562714180493728021166884427780886061158867940709635266324608007407040260600476241849106466327083676680682043656334825810218866365005503616251557632683584120078339391306029661864352584598231209375301245987036228322319213220574756998136923145888161863218809535017875741204878465025632132318033140124166926360349311174135171518338727597096602670130832430653675655802367494118633270214541060246655037470762849972428852345542422906349240363910498259129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2068 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alizila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brave.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.develop.mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footwearnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hollywoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesense.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercury.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.itsrosy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictures.mabelandmoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmc.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmcdev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmcqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procorecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procoretech-qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollingstone.pmcqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheknows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.brave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cdn.art19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stylecaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thezoereport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twmlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usccadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adblock-data.brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanoutlawstravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weld.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.betterimpactcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.procore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.anthonytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.crm-kozuchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-f.adsmoloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.funnelenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.improove.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvwa.techiegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elifesciences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.ufcvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footwearnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstlive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klive-stg.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klive.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvimg.jp.stg.lvs.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmc.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.appcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheknows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylecaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nflonlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usccadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod1.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.evape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrotrends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niceultimed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.predictem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesmbguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weld.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57e71ac5aac4657ceb68b5598d26802a74c561dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017435c9ae580000040300473045022100beafe256013cd674f274212c3a3acf84d75b2c1afe4dabbb663909b9da84e90902202c1223426e8d446d23657a5a3cadeddcad58d657a1941f9166f7b14835c43523007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017435c9b1260000040300483046022100c4a618ccc654616fbfbceddc66306777e3e427f9b3d4a7de4fca9d65ae1a677d022100be694836180e2c1bbc44f522ca05a595709b21c1b8df39f7d161f8e8649c9001
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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