b2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1e:d6:73:c6:ba:f0:83:d2:17:80:01:95 was issued on by GlobalSign nv-sa.

With 118 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:d6:73:c6:ba:f0:83:d2:17:80:01:95
Serial Number (int): 9543807158109150732647137685
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a3:2b:8f:4f:a8:89:e1:59:9f:a7:fd:3f:c2:c2:f3:b4:f6:41:bb:ad
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 00:ff:f2:81:65:a7:03:47:09:6d:d3:c6:79:3c:a0:23:ff:75:c1:fb
Fingerprint (sha256): 1b:3b:4a:35:90:ff:50:63:7e:81:36:45:87:85:f9:49:03:d0:1e:0b:4d:78:ef:c0:11:17:29:93:10:4a:8f:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate b2.shared.global.fastly.net

118

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2.shared.global.fastly.net
*.barkcdn.net
*.brisbanetimes.com.au
*.chicagocitysports.com
*.chuchro.com
*.comtrade.com
*.couponroller.com
*.crew.co
*.diffen.com
*.eu.newrelic.com
*.eu01.nr-data.net
*.ffx.io
*.ffxblue.com.au
*.gadventures.com
*.getmyboat.ca
*.getmyboat.co.uk
*.getmyboat.co.za
*.getmyboat.com.au
*.getmyboat.ie
*.getmyboat.nz
*.kravet.com
*.luzernerzeitung.ch
*.menshealth.com
*.metacpan.org
*.moviefanatic.com
*.mux.com
*.nmgassets.com
*.nowth.is
*.nzz.ch
*.osce.org
*.perfectaudience.com
*.realcrowd.com
*.risd.edu
*.scalefastr.io
*.scroll.com
*.smh.com.au
*.startle.cloud
*.tagblatt.ch
*.theage.com.au
*.watoday.com.au
*.wine.com
*.womenshealthmag.com
*.zipcar.com
*.zipcar.io
apf.psa.org.au
api.exponea.com
app.tipotapp.com
cdn.besynchro.com
cdn.hyfnlocalcreative.com
cdn.pachamama.com
chicagocitysports.com
chuchro.com
codigodescuento.enfemenino.com
comtrade.com
couponroller.com
crew.co
diffen.com
eu.newrelic.com
eu01.nr-data.net
fastly.site
fastly.storytel.se
ffx.io
gadventures.co.uk
gadventures.com
gadventures.com.au
gadventures.de
getmyboat.ca
getmyboat.co.uk
getmyboat.co.za
getmyboat.com.au
getmyboat.ie
getmyboat.nz
images.6play.fr
kravet.com
marthalouisa.com
medicalnote.jp
menshealth.com
metacpan.org
moviefanatic.com
mux.com
nmgassets.com
nowth.is
online.mps-gba.de
osce.org
perfectaudience.com
preview.pointb.com
realcrowd.com
risd.edu
rlesports.gg
rocketleagueesports.com
scroll.com
sdk.a-mo.net
secure.paymo.life
startle.cloud
stg-secure.paymo.life
voxer.com
web.voxer.com
wildfang.mage.forixdemo.com
wine.com
womenshealthmag.com
www.australia.gov.au
www.barigallery.com
www.bitmart.com
www.cigarpage.com
www.fieldsupply.com
www.gadventures.co.uk
www.gadventures.com.au
www.kingdomran.jp
www.marthalouisa.com
www.pointb.com
www.rlesports.gg
www.rocketleagueesports.com
www.stagingworkyardwebsite.com
www.voxer.com
www.wildfang.com
www.wingsupply.com
zipcar.com
zipcar.io

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for b2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61mLUH6Cvk9YCAsxFeaP
3rAg4DVXqgINjA/7phgNzxbvMCE/eWZGIVgBBjS1qkn2IFGxMhHIjIoMojz8yzdw
31fCjIBltK09o4oT6bpIfirUhFTwaKj+VHFcG+e6cIRmGvHaGgqa7yvbGiCJmmMH
UCVJcruRxyZcsYB744ZjfKuv9zxtRrcI23TJ8rLsvTA83LMuZkteuv7cb/hbHSB9
WKJDDFSJl2VYD7G1anwpslIaDh/nB3zZ+ZaGHsLRhcjkGQxnjoISuCpa8/nqBsx5
BfKtHMQiSFmJ8H3uLZtWjueAncrTZf7k6/25FufCbbf06dO3Q79h2J++wVhMW8bw
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9543807158109150732647137685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 09:29:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 14:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29710157556273924700696657697942439713296429409817651130043939800900944351272991817464676184493083229247377546848261062562011108751505460379556071728844892055436861862621215348576957823896802270529463108063926066911145130763483241326823923544542790572446732151231130326917803946963916859590001156154023304441562204723184146788011336255583714217749025458794844217867726425604934255974722351660991325022845470084513361604184937967095691828678820134211869078819595517647610963109504031325735269548278851264114415890185066220732569390453326996186028452123200332696255093649330307868982074035875811841653426705882451210419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagocitysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuchro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.couponroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.newrelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.nr-data.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffxblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kravet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luzernerzeitung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metacpan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviefanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmgassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowth.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scalefastr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startle.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipcar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apf.psa.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.exponea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tipotapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.besynchro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hyfnlocalcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pachamama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagocitysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuchro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codigodescuento.enfemenino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couponroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.newrelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu01.nr-data.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.storytel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kravet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marthalouisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalnote.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacpan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviefanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmgassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowth.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.mps-gba.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesports.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketleagueesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.a-mo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.paymo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startle.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-secure.paymo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.mage.forixdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australia.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barigallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cigarpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadventures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadventures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomran.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marthalouisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlesports.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketleagueesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagingworkyardwebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipcar.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32b8f4fa889e1599fa7fd3fc2c2f3b4f641bbad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000161f57e64f20000040300473045022100900871bb43ead4191e4c71b62c233719c40ac8aa15420fb327b95e3f007b5d9402207eb2dbb0bdb40b524502373d17e5926d7554c5783d37066311e4580021b56e32007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000161f57e65480000040300473045022064969577ef48da5e779f625988e9c533615e1f2def3a986cc28e2ff44a48a436022100f1e41a80508a58edcb9066deb4d62a68e081556de3b2184a1f21f9b0eba3aaf6007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000161f57e65d60000040300463044022030493b9317864981edb9d3f706b87aa16f219cbb857fb8d703f81c3d0cba7136022064059f7e9a41896e6027edb3b85b4599795238e2c54913e4660e19fd7c4c3b91007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000161f57e67860000040300473045022100ab07cd4114c34fd3288a667ad58b295bd25aece9b6c0d4ecf992ce6afdedd8ed02204d0a7451017252a9d1b2e143ce106ef136115bd2d3d2d5a0f90c39b01c25f622
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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