b3.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 61:00:05:dc:d6:4c:37:18:65:5b:09:42 was issued on by GlobalSign nv-sa.

With 126 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:00:05:dc:d6:4c:37:18:65:5b:09:42
Serial Number (int): 30020073638228360030896982338
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3a:6d:da:57:ab:af:f5:1c:27:69:f6:31:cb:3f:14:3f:ea:23:5f:10
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 3f:8a:e6:1c:3d:c4:2e:54:e6:c6:49:14:8d:3c:22:8e:f6:82:a6:bf
Fingerprint (sha256): 1a:c2:4a:dc:21:2f:24:d9:20:de:05:9f:b7:aa:88:52:61:fb:54:56:9b:5a:e9:62:ce:c7:15:51:8f:3f:f1:a4

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate b3.shared.global.fastly.net

126

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b3.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b3.shared.global.fastly.net
*.admissions.yale.edu
*.api.app-staging.c-rayon.com
*.api.app.c-rayon.com
*.api.plan3.se
*.automate.dev.gospotcheck.io
*.automate.stg.gospotcheck.io
*.bravesoftware.com
*.chdrstatic.com
*.clothingshoponline.com
*.dekbed-discounter.nl
*.dev-selz.com
*.dev.cbsinteractive.com
*.drybarcomedy.com
*.eileenfisher.com
*.essence.com
*.factinate.com
*.gologon.de
*.gospotcheck.com
*.gospotcheck.io
*.hurryhome.io
*.implantdirect.com
*.jobtalk-dev.jp
*.jobtalk.jp
*.johnnywas.com
*.kavo.com
*.ku556.net
*.ku771.net
*.kucdn.net
*.kulist.net
*.lancaster.com
*.master.tagvenue.uk
*.medal.tv
*.mitienda-abi.cl
*.myvegas.com
*.news.yale.edu
*.nobelbiocare.com
*.nok.se
*.p5cdn.com
*.performance.tv.fit
*.preprod.lancaster.com
*.preprod.tv.fit
*.prod.platform.dental
*.productfy.io
*.ratemyprofessors.com
*.redislabs.com
*.rewards.brave.software
*.sbx.bestegg.com
*.skynewsarabia.com
*.skynewsarabiatv.com
*.soundstripe.com
*.sta.platform.dental
*.stg.bestegg.com
*.techops.ph
*.tv.fit
*.uat.bestegg.com
*.woonq.nl
*.yale.edu
*.your.yale.edu
archive.petersen.org
armurerie-auxerre.com
batcommunity.org
blog.batcommunity.org
c.lvimg.jp
canhls.cbs.com
cda.content.aws.porsche-preview.cloud
cdn-mr.contentful.com
cdn.bmw-connected.com
cdn.faire.com
cdn.mini-connected.com
cdn.shpp.ext.zooplus.io
click.em.kickstarter.com
clothingshoponline.com
content.api.plan3.se
content.cpcworldwide.com
cookiesync.mparticle.com
coyote.com
cycleboxer.com
drybarcomedy.com
essence.com
events.redislabs.com
factinate.com
graphql.flinkly.com
hotel-api.bushikaku.net
jobtalk-dev.jp
jobtalk.jp
johnnywas.com
jssdkcdn.mparticle.com
jssdkcdns.mparticle.com
jssdks-edge.mparticle.com
jssdks.mparticle.com
kickstarter.com
ku556.net
learning.oreilly.review
lup.events
lupstaging.events
media2.barfoot.co.nz
mitienda-abi.cl
mp.quibi.com
mybestegg.com
play.seenthis.co
pro.upnetic.com
production.lancaster.com
redislabs.com
referrals.bravesoftware.com
refinery29.com
rlp.cincmedia.com
semadams2.petersen.org
sendgrid.churchmetrics.com
sgws-support.stg.gospotcheck.io
soundstripe.com
static.goodiebox.nl
support.stg.gospotcheck.io
test2.patra.store
tv.fit
www.armurerie-auxerre.com
www.batcommunity.org
www.cpcworldwide.com
www.flavorwest.com
www.lifespanfitness.com
www.staging.basicattentiontoken.org
www.zebrablinds.ca
www.zebrablinds.com
yale.edu
zebrablinds.ca
zebrablinds.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for b3.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoshObn5AM8fNY2UUejvA
fO5NaTqB1TaYndgo7yQHCJfpZPN+I/f1u/TCNU8zqWs9Sb5SJ2k/4gqqiUy3qpSh
tmzr2MTAPNOIePgP4e6iFaruuC2l6LeXnhrVMQfE3WxlE56cQS/twtd348EoYwEY
jN0AkVrMYHcxuALW/NfHhA/WyH5ibQhTtBcTVRkRTHVDjyx+lRLki6R5vE0bIaAe
6kXpjsHxsl4sCX2fSo/bbExZJWy3hVSsOx78D8S5VCTkgJ7WaB5kUX98F0vNJeXF
1BgHs5y3kUOIIaOBrQYmgTjrI0Oyhz9KESiQRUcE3mG84oqAMOGNfkfqiiFGFGIe
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30020073638228360030896982338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:08:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-18 17:56:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b3.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20549380158655870038147392879314040463252820625107586167270741166199715090748590772732028069057670798761244990171756586204931976136687330017666994107815784307534429654000454831170849934746776432576439824135458744507564773132171612237286798176966227541538565291566056955620796241448952354159191323455148596047653405245410214347745872617176764136411552203229337766438589972825558704242533598743070288167065722791201277626085661679609408716322582103623588386895490181625892130917890392339548107683815103096458449968634850801472578626687870267142024288820236494303097416900496142614810320087219109228832916131951824477951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2495 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admissions.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.app-staging.c-rayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.app.c-rayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.plan3.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automate.dev.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automate.stg.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chdrstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothingshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekbed-discounter.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-selz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drybarcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eileenfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gologon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gospotcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurryhome.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.implantdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobtalk-dev.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobtalk.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnnywas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ku556.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ku771.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kucdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kulist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.master.tagvenue.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitienda-abi.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nobelbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nok.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p5cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performance.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.lancaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productfy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratemyprofessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redislabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewards.brave.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbx.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabiatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sta.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techops.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woonq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.your.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.petersen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armurerie-auxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lvimg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canhls.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cda.content.aws.porsche-preview.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-mr.contentful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bmw-connected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.faire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mini-connected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shpp.ext.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.em.kickstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothingshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.api.plan3.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cpcworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookiesync.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coyote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycleboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drybarcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.redislabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.flinkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-api.bushikaku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobtalk-dev.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobtalk.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnywas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdkcdn.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdkcdns.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdks-edge.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jssdks.mparticle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ku556.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.oreilly.review'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lup.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupstaging.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.barfoot.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitienda-abi.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp.quibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybestegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.seenthis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.upnetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.lancaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redislabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referrals.bravesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinery29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlp.cincmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semadams2.petersen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendgrid.churchmetrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgws-support.stg.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundstripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.goodiebox.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stg.gospotcheck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.patra.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armurerie-auxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flavorwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifespanfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.basicattentiontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebrablinds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebrablinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zebrablinds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zebrablinds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6dda57abaff51c2769f631cb3f143fea235f10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fd24dc319000004030046304402201126107bdaf41bfed14f5eecbc63f485def052f77d8cd8aaa46083aa64fe0649022050553d18953fbd1a5af98d1c966d7b985acfd6094ea84cca11ecb8b4bfc40fbf007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd24dc35c000004030047304502205e431da563935e9e432e2ee6e4603e0ef7f0bc8806e8af460aea025affa6f3a0022100e44870540d9f4f3b3a05d75927a6d1449762fae159952f2fc3d11e1c05d34125
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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