platformsh4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 4c:1f:2a:c3:f9:6d:d5:d5:1c:a7:45:da was issued on by GlobalSign nv-sa.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:2a:c3:f9:6d:d5:d5:1c:a7:45:da
Serial Number (int): 23558539401310910425151784410
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d8:bb:14:71:6d:55:ad:aa:27:b1:c8:2c:67:e2:1d:1e:d2:60:34:aa
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 3b:18:be:6b:14:63:94:de:f5:fd:e7:d8:91:49:07:04:c8:5b:9a:9e
Fingerprint (sha256): 18:06:c0:60:83:8a:a9:a3:2a:ee:c4:cc:19:ed:e7:10:61:30:1f:3d:8e:28:cf:f3:49:dd:87:cc:45:63:bc:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate platformsh4.map.fastly.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformsh4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformsh4.map.fastly.net
*.academymusicgroup.com
*.at.platform-azure.spryker.toys
*.at.platform.spryker.toys
*.britishmuseum.org
*.commondreams.org
*.de.platform-azure.spryker.toys
*.de.platform.spryker.toys
*.ff-inc.com
*.firstfoundationinc.com
*.goteo.de
*.lrb.co.uk
*.mediateur-carac.fr
*.neilson.co.uk
*.nestle.psh.cloud
*.om.fr
*.om.net
*.rosnysousbois.fr
*.samuelhubbard.com
*.skimium.be
*.skimium.co.uk
*.skimium.com
*.skimium.de
*.skimium.es
*.skimium.it
*.skimium.nl
*.staging-5em2ouy-qicelq4x33qps.eu-2.platformsh.site
*.test.monin.tech
*.unionplus.org
*.ymcali.org
*.ymcawichita.org
academymusicgroup.com
at.platform-azure.spryker.toys
at.platform.spryker.toys
britishmuseum.org
commondreams.org
cpbf-abonnements.fr
de.platform-azure.spryker.toys
de.platform.spryker.toys
fastly-headers.devicezero.dev
ff-inc.com
firstfoundationinc.com
goteo.de
lrb.co.uk
mediateur-carac.fr
neilson.co.uk
nestle.psh.cloud
om.fr
om.net
rosnysousbois.fr
samuelhubbard.com
skimium.be
skimium.co.uk
skimium.com
skimium.de
skimium.es
skimium.it
skimium.nl
staging-5em2ouy-qicelq4x33qps.eu-2.platformsh.site
test.monin.tech
unionplus.org
ymcali.org
ymcawichita.org

Other certificates including the domain name platformsh4.map.fastly.net

(limited to 100 certificates)
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net
platformsh4.map.fastly.net

Certificate

The complete raw certificate details for platformsh4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPA7G6YVBO2rfWAqJAw
wq74Xbxp4z6+PDFnsf2P3i+LTIoHav2iwwRlIlS6xizYYQlGCggmDaCk3YfwGotB
Y9y2RWecaKj4LiV8NAeHan7nLfNi6GrDgfRZrOuG1NZYTQ+QZgGkdpeKRAe41LHH
mxTrd9QLk21ighUSzN+tKY+xQjyhuBlLfA+yI75GX6pRkxoVhGKMwh/nZ4lP0rpQ
axCRpisg+HRbpfCdvMHwDwadH8wZeApgrHV6K8sv2B7j0dMdZk+Mq854ilVD8erq
o/B9lh2/OBXF0fvsQwVBhODkibf27BU78sZwidTiZF4n91sLAaj1guQ4uv+3XvyC
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23558539401310910425151784410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 16:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 17:42:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platformsh4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21754288897390883524659288998179928081284109818257471128465175659963908461014148709383534242171248273286338855319860743144997908504530130139600824088532300828482648620460087752563652373907030362070286314844699615466592527587808923653678531357264576619680287163621646604439686478719577214895805127093654643817927564738375633694103636343097175080263044753088112835205225131467247604070901807095872361560698185240990592237029076064148474294780921837518600051284630873876685245007298370318695091633950731815987966009602120023794291705662843705154348584581235649586165230957831577480424385131324444878506523432798436229771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformsh4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academymusicgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.at.platform-azure.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.at.platform.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britishmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commondreams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.platform-azure.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.platform.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ff-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstfoundationinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goteo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediateur-carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neilson.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestle.psh.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.om.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.om.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosnysousbois.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuelhubbard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-5em2ouy-qicelq4x33qps.eu-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.monin.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unionplus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymcali.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymcawichita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academymusicgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.platform-azure.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.platform.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commondreams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpbf-abonnements.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.platform-azure.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.platform.spryker.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly-headers.devicezero.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstfoundationinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goteo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediateur-carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neilson.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle.psh.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosnysousbois.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelhubbard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-5em2ouy-qicelq4x33qps.eu-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.monin.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionplus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcali.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcawichita.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8bb14716d55adaa27b1c82c67e21d1ed26034aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e22aa40780000040300483046022100acba70d83d661873aaabd69990559a3e03623c5f79f6c85728e26fb22f4aa442022100dff002f4f543a2a78c3378f4b67277a77375d3e337691e167e1d9f594a655cc5007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016e22aa40790000040300473045022100d7524e44fde1dae2322ce8d0968ded0e6f1d3b99d96e734bfd870b8d363dd925022033933df8e2c361ca3f04a248102f95692ba234c1b9bc63e35ba077359f0c98ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00512c05ced73b8582231378b28c055d4847c5038f8a3481c98ed14e8475993bd31a0b2b36402d441f86b201324f37277d1d3cc7ab0635d9a8b2ba04a960fbd261780c3053002395ef2448840901f25335485c81fdc5007f848a3aaf597e2ae5aa30cd48bd92f30632765184d6aa28307e127f2e787572a520dcefa6290655b7940679dca8e0097253f1f8ebb74cb8caab83623cea4d331a27fbefae91bbe1dc0426a53787df28ad6a5152b48a77a6351c7fcd0b0622c4201f299fcacde031b8522d4d4dedbb0d21247ab8e75c76600f94aeec09341ed7579d389caa90e14ac8520cab2c6367b25e6a119fa1098d75c0218705a149a16d5c5e9633c3371f7c2bfe