customer-test.ssl.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7d:49:3d:bf:b3:c1:03:16:c2:48:3e:80 was issued on by GlobalSign nv-sa.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:49:3d:bf:b3:c1:03:16:c2:48:3e:80
Serial Number (int): 38774169413136212046811512448
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1f:40:b9:02:33:38:02:1c:5f:3d:75:28:6b:ef:b6:10:57:5d:c3:e7
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 99:30:53:97:6c:1f:49:ef:6a:c6:54:54:23:7d:1c:00:9b:63:30:90
Fingerprint (sha256): 17:4e:52:ac:93:30:9c:18:8e:d1:b2:63:77:aa:3e:f7:aa:b5:c2:21:d4:0d:3f:38:54:28:50:36:53:d3:a2:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate customer-test.ssl.fastly.net

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer-test.ssl.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer-test.ssl.fastly.net
*.anki.com
*.asana.plus
*.beautiesltd.com
*.beta.asana.plus
*.blovcdn.com
*.channel5.com
*.crm.ondemand.com
*.demosites.net
*.dome9.com
*.fiddle.fastlydemo.net
*.groove.help
*.gu-japan.com
*.hk01.com
*.interactnow.tv
*.intergi.com
*.lumity.com
*.marutainc.com
*.od-cdn.com
*.openreel.com
*.overstock.com
*.qnap.com
*.s1.b1-prv.qualtrics.com
*.scroll.com
*.sleepingduck.com
*.spot.im
*.sweetwater.com
*.tedcdn.com
*.therealreal.ninja
*.tmol.io
*.training.com.au
*.viceops.net
*.votenow.tv
*.whitefoxboutique.com
api-poc.test.commerce.nikecloud.com
artist.api.lv3.cdn.hbo.com
artist.staging.hurley.lv3.cdn.hbo.com
bustle.com
buzzfeed-res.cloudinary.com
cdn-poc.commerce.nikecloud.com
cdn.kumuapi.com
cdn.optimizely.com
cdn.wineaccess.com
cdn4.1800baskets.com
cdn4.1800flowers.com
cdn4.cheryls.com
cdn4.fanniemay.com
cdn4.fruitbouquets.com
cdn4.harryanddavid.com
cdn4.stockyards.com
cdn4.thepopcornfactory.com
cdn4.wolfermans.com
clients.agatwitch.com
crm.ondemand.com
dome9.com
fastly.3rdsenseclients.com
fastly.aiv-cdn.net
fastly.basebanner.com
fastly.cotopaxi.com
fastly.iodine.com
fastly.theweathernetwork.com
fastview.geoapi-airbusds.com
fcdn-tf.thuuz.com
happyoceanbreeze.com
img2.abcmouse.com
imgfly.jockeyimg.com
leverj-test.tokenry.io
liveplayhd.malimarserver.net
local-store-res.cloudinary.com
lptag-a.liveperson.net
m-fastly.goodrx.com
mcdn-cedexis.awesomenesstv.com
media.codeweavers.com
otfp.engelbert-strauss.com
p4b.cabinetoffice.gov.uk
performance-uat.groupon.com
qa.d8.pega.com
qa.pega.com
qa1.learn.cisco
qa1.standupdeskstore.com
quicken.com
quietriverflow.com
s1.b1-prv.qualtrics.com
sleepingduck.com
ssl-cdn2.thedailyedited.com
talkpointtest.qingcdn.com
testcdn.victoria.ac.nz
ui-qa.learn.cisco
whitefoxboutique.com
www-vpc.younow.com
www.aboutica.com
www.evbqaapi.com
www.fralphatest.com
www.heritageparts.com
www.ibuy123.com
www.novonoticias.com
www.quicken.com
www.zazzle.com.au
zazzle.com.au

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for customer-test.ssl.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwq0y6gkUWPqPHRmn10C
pzU68m84+4rsTSWY+tGFYIfR0lVzzJAzbx41qP/cmzPHLdQ5ILVIjbMZRCzh037C
e9sKVTGgw/BNf7aF4UDdTLcKl4jWwjR/NYtj7REIsTWTjoKPwmyndZ/ZcNr6rV50
IGzpdPMcUJPP6rTwDNlpjqCYP3cL4PVidfgDfCjbLywUToHqswhBK7oh2FAmn5Qu
QhmKKZZDUXtOVAsML0fQJb2BoNxy5GWKpHfqmdZKuQX32szesIRSeL86QkpBeFJh
cAoOHJZax6hdTTEW2SHJEbRF9M2LSx59cqzKGxemnLFfz70N4j4pLsaOg7Uf0sp7
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38774169413136212046811512448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 20:16:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 14:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'customer-test.ssl.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22096982809101153947030613949250330999030549091215330140447899179684566253995336843242858797206311322344079578202954982587822266360668215927230633513486133810723196906877231421479865662309084146106460069284172373458101064812302763541841581050134293379672612210950855462319627123305982075618583458920164953863308056539270057078256454565762721652463760475393506082343626663165158909917690994823356889447786533621641944218914951901950983655988687004833386789665148364459859489716003959348068009701355977658972419734380503148050098204812966602851090210730619443992149889918524799579019253461556635579482439071528808774419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2045 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-test.ssl.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asana.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautiesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.asana.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blovcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.ondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demosites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dome9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiddle.fastlydemo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groove.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gu-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interactnow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intergi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marutainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.od-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s1.b1-prv.qualtrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spot.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therealreal.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votenow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitefoxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-poc.test.commerce.nikecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.api.lv3.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.staging.hurley.lv3.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bustle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed-res.cloudinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-poc.commerce.nikecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kumuapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.optimizely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.1800baskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.1800flowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cheryls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.fanniemay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.fruitbouquets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.harryanddavid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.stockyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.thepopcornfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.wolfermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.agatwitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dome9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.3rdsenseclients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.aiv-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.basebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cotopaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.iodine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.theweathernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastview.geoapi-airbusds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcdn-tf.thuuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyoceanbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img2.abcmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgfly.jockeyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leverj-test.tokenry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveplayhd.malimarserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local-store-res.cloudinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lptag-a.liveperson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-fastly.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdn-cedexis.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.codeweavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otfp.engelbert-strauss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4b.cabinetoffice.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-uat.groupon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.d8.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.learn.cisco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.standupdeskstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quietriverflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.b1-prv.qualtrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-cdn2.thedailyedited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkpointtest.qingcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcdn.victoria.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-qa.learn.cisco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitefoxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-vpc.younow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evbqaapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fralphatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritageparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibuy123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novonoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zazzle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zazzle.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f40b9023338021c5f3d75286befb610575dc3e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000162e4b36214000004030047304502207fdc45d5a098228bc42317a8a468bc19031a21cab8d4f5332087969ed364a71a022100db17f8f279c734c10de56a0b3829a79f134de850d9784b2af42dcd05112e7899007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162e4b36355000004030046304402206f3384929e7deab7e927abb071e511309ecc10b8ff85dcf7e961e1ab73067acd022004a87e5f7e2e49fbe4e5805f47928f7014fb48f76449ed23f90287bfee73bdec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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