y2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 29:25:fb:b6:31:f2:8e:88:cb:76:d3:84 was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:25:fb:b6:31:f2:8e:88:cb:76:d3:84
Serial Number (int): 12734804332894606563669889924
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 40:39:2c:bd:1b:5b:09:5d:4d:c3:de:00:77:5e:81:97:23:0e:8d:f5
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 50:2a:d3:32:ff:9b:87:73:92:96:55:8c:23:3e:be:21:79:e9:9c:21
Fingerprint (sha256): 1c:32:8b:66:1e:16:4c:ec:18:0f:df:07:b0:98:0a:b7:9d:2b:93:f8:db:78:e8:98:69:1e:83:72:a2:19:60:cf

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate y2.shared.global.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for y2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

y2.shared.global.fastly.net
*.anywhereindonesia.com
*.anywheremyanmar.com
*.askwonder.com
*.atvstatic.com
*.bramptonbeast.com
*.byteoversea.com
*.copa90.com
*.crowdfiber.io
*.echlthunder.com
*.haaretz.co.il
*.haaretz.com
*.kwings.com
*.legendsinternational.com
*.makewithprism.com
*.masteryconnect-demo.com
*.masteryconnect-staging.com
*.masteryconnect.com
*.merpay-sandbox.com
*.merpay.in
*.nlgrowlers.com
*.norfolkadmirals.com
*.noujoumtounes.com
*.on-dev.com
*.palantir.fr
*.rapidcityrush.com
*.royalshockey.com
*.sec.merpay.ninja
*.stingrayshockey.com
*.themarker.com
*.tlaus.com
*.topbuzzcdn.com
*.wheelingnailers.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
account.fineproxy.org
aircon-okaidoku.com
anywhere.com
app.split.io
askwonder.com
assets.myadmessenger.com
bramptonbeast.com
buttercms.com
cdn.myadmessenger.com
cdn.thescroller.com
cdn.trippng.com
chemmate.co.nz
cntnt.idgconnect.com
config.gorgias.io
copa90.com
cue.moneyforward.com
dev.chemmate.co.nz
e.thegourmet.com.au
echlthunder.com
edt.greenbot.com
edt.idgeinsider.com
edt.javaworld.com
edt.macworld.com
edt.networkworld.com
edt.pcworld.com
edt.techconnect.com
edt.techhive.com
email.culturevulture.de
email.handymanmatters.com
email.thehorse.com
enews.cafeappliances.com
enews.geappliances.com
enews.haierappliances.com
enews.hotpoint.com
enews.monogram.com
events.netcentric.biz
fastly.wovnio.com
fis-ski.com
fisski.com
haaretz.co.il
haaretz.com
images.haarets.co.il
images.newscientist.com
images.newscientistbeta.com
js.avocandocdn.com
kwings.com
legendsinternational.com
nlgrowlers.com
norfolkadmirals.com
palantir.fr
photos.selio.com
rapidcityrush.com
royalshockey.com
safcodental.com
staging-fastly.wovnio.com
staging.photos.com
staging.vinoshipper.com
static.selio.com
static.web.selio.com
stingrayshockey.com
themarker.com
userscdn.selio.com
wheelingnailers.com
www-gcp-fastly.float.com
www-stage.netcentric.biz
www.actionagainsthunger.org.uk
www.aircon-labo.net
www.allting.com
www.chemmate.co.nz
www.elitesarms.com
www.float.com
www.flooranddecor.com
www.leapingbunny.org
www.ncregister.com
www.newscientistbeta.com
www.photos.com
www.raleighrealtyhomes.com
www.safcodental.com
www.totalmerchandise.co.uk
xn--08j2fxcxa0d6wy18otram37a2kz.net

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for y2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODjCCDPagAwIBAgIMKSX7tjHyjojLdtOEMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgxMjAzMjMw
MTE2WhcNMTkwNzI3MTkzNTQwWjB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMSQwIgYDVQQDExt5Mi5zaGFyZWQuZ2xvYmFsLmZhc3RseS5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hpMl8XQij8msQGetsuW3d18r
K49I1cnk0Q/Tnja/fg/Tdn6fSUyN2Ygbozk6xVlsMXiFhpJAikx9F61CcgjPxgtD
BefiRb3deNoa9/0Ks7bNssbrw8cN4CmBX8Pjy76sQExEGp3FeUfIpscpLERBIlyw
sDf7/b/DP7kfAdwDd2LZHAU63qw7lpV5mzeoR3KK5BTojQIrwEaG1TZXjH1B0Oxu
Ad7QzNGE+KYWYY7vAZnqOaRhC4W54zm+o9DtM64sPVtsANtNNwZ1NMo2Wjmr7UP+
oS9y73a+4lqCNtR4Uv8TbP19nvvc3XgrXUGNbbMLxvOnDqXsorqW/KcfvDURAgMB
AAGjggq4MIIKtDAOBgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggr
BgEFBQcwAoY2aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xv
dWRzc2xzaGEyZzMuY3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFs
c2lnbi5jb20vY2xvdWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwggk8BgNVHREEggkzMIIJL4IbeTIu
c2hhcmVkLmdsb2JhbC5mYXN0bHkubmV0ghcqLmFueXdoZXJlaW5kb25lc2lhLmNv
bYIVKi5hbnl3aGVyZW15YW5tYXIuY29tgg8qLmFza3dvbmRlci5jb22CDyouYXR2
c3RhdGljLmNvbYITKi5icmFtcHRvbmJlYXN0LmNvbYIRKi5ieXRlb3ZlcnNlYS5j
b22CDCouY29wYTkwLmNvbYIPKi5jcm93ZGZpYmVyLmlvghEqLmVjaGx0aHVuZGVy
LmNvbYIPKi5oYWFyZXR6LmNvLmlsgg0qLmhhYXJldHouY29tggwqLmt3aW5ncy5j
b22CGioubGVnZW5kc2ludGVybmF0aW9uYWwuY29tghMqLm1ha2V3aXRocHJpc20u
Y29tghkqLm1hc3Rlcnljb25uZWN0LWRlbW8uY29tghwqLm1hc3Rlcnljb25uZWN0
LXN0YWdpbmcuY29tghQqLm1hc3Rlcnljb25uZWN0LmNvbYIUKi5tZXJwYXktc2Fu
ZGJveC5jb22CCyoubWVycGF5LmlughAqLm5sZ3Jvd2xlcnMuY29tghUqLm5vcmZv
bGthZG1pcmFscy5jb22CEyoubm91am91bXRvdW5lcy5jb22CDCoub24tZGV2LmNv
bYINKi5wYWxhbnRpci5mcoITKi5yYXBpZGNpdHlydXNoLmNvbYISKi5yb3lhbHNo
b2NrZXkuY29tghIqLnNlYy5tZXJwYXkubmluamGCFSouc3RpbmdyYXlzaG9ja2V5
LmNvbYIPKi50aGVtYXJrZXIuY29tggsqLnRsYXVzLmNvbYIQKi50b3BidXp6Y2Ru
LmNvbYIVKi53aGVlbGluZ25haWxlcnMuY29tghthYmxpbmsuZW1wb3dlcmVkLnJv
YWRpZC5jb22CGmFibGluay5maXN0YnVtcC5yb2FkaWQuY29tghVhY2NvdW50LmZp
bmVwcm94eS5vcmeCE2FpcmNvbi1va2FpZG9rdS5jb22CDGFueXdoZXJlLmNvbYIM
YXBwLnNwbGl0Lmlvgg1hc2t3b25kZXIuY29tghhhc3NldHMubXlhZG1lc3Nlbmdl
ci5jb22CEWJyYW1wdG9uYmVhc3QuY29tgg1idXR0ZXJjbXMuY29tghVjZG4ubXlh
ZG1lc3Nlbmdlci5jb22CE2Nkbi50aGVzY3JvbGxlci5jb22CD2Nkbi50cmlwcG5n
LmNvbYIOY2hlbW1hdGUuY28ubnqCFGNudG50LmlkZ2Nvbm5lY3QuY29tghFjb25m
aWcuZ29yZ2lhcy5pb4IKY29wYTkwLmNvbYIUY3VlLm1vbmV5Zm9yd2FyZC5jb22C
EmRldi5jaGVtbWF0ZS5jby5ueoITZS50aGVnb3VybWV0LmNvbS5hdYIPZWNobHRo
dW5kZXIuY29tghBlZHQuZ3JlZW5ib3QuY29tghNlZHQuaWRnZWluc2lkZXIuY29t
ghFlZHQuamF2YXdvcmxkLmNvbYIQZWR0Lm1hY3dvcmxkLmNvbYIUZWR0Lm5ldHdv
cmt3b3JsZC5jb22CD2VkdC5wY3dvcmxkLmNvbYITZWR0LnRlY2hjb25uZWN0LmNv
bYIQZWR0LnRlY2hoaXZlLmNvbYIXZW1haWwuY3VsdHVyZXZ1bHR1cmUuZGWCGWVt
YWlsLmhhbmR5bWFubWF0dGVycy5jb22CEmVtYWlsLnRoZWhvcnNlLmNvbYIYZW5l
d3MuY2FmZWFwcGxpYW5jZXMuY29tghZlbmV3cy5nZWFwcGxpYW5jZXMuY29tghll
bmV3cy5oYWllcmFwcGxpYW5jZXMuY29tghJlbmV3cy5ob3Rwb2ludC5jb22CEmVu
ZXdzLm1vbm9ncmFtLmNvbYIVZXZlbnRzLm5ldGNlbnRyaWMuYml6ghFmYXN0bHku
d292bmlvLmNvbYILZmlzLXNraS5jb22CCmZpc3NraS5jb22CDWhhYXJldHouY28u
aWyCC2hhYXJldHouY29tghRpbWFnZXMuaGFhcmV0cy5jby5pbIIXaW1hZ2VzLm5l
d3NjaWVudGlzdC5jb22CG2ltYWdlcy5uZXdzY2llbnRpc3RiZXRhLmNvbYISanMu
YXZvY2FuZG9jZG4uY29tggprd2luZ3MuY29tghhsZWdlbmRzaW50ZXJuYXRpb25h
bC5jb22CDm5sZ3Jvd2xlcnMuY29tghNub3Jmb2xrYWRtaXJhbHMuY29tggtwYWxh
bnRpci5mcoIQcGhvdG9zLnNlbGlvLmNvbYIRcmFwaWRjaXR5cnVzaC5jb22CEHJv
eWFsc2hvY2tleS5jb22CD3NhZmNvZGVudGFsLmNvbYIZc3RhZ2luZy1mYXN0bHku
d292bmlvLmNvbYISc3RhZ2luZy5waG90b3MuY29tghdzdGFnaW5nLnZpbm9zaGlw
cGVyLmNvbYIQc3RhdGljLnNlbGlvLmNvbYIUc3RhdGljLndlYi5zZWxpby5jb22C
E3N0aW5ncmF5c2hvY2tleS5jb22CDXRoZW1hcmtlci5jb22CEnVzZXJzY2RuLnNl
bGlvLmNvbYITd2hlZWxpbmduYWlsZXJzLmNvbYIYd3d3LWdjcC1mYXN0bHkuZmxv
YXQuY29tghh3d3ctc3RhZ2UubmV0Y2VudHJpYy5iaXqCHnd3dy5hY3Rpb25hZ2Fp
bnN0aHVuZ2VyLm9yZy51a4ITd3d3LmFpcmNvbi1sYWJvLm5ldIIPd3d3LmFsbHRp
bmcuY29tghJ3d3cuY2hlbW1hdGUuY28ubnqCEnd3dy5lbGl0ZXNhcm1zLmNvbYIN
d3d3LmZsb2F0LmNvbYIVd3d3LmZsb29yYW5kZGVjb3IuY29tghR3d3cubGVhcGlu
Z2J1bm55Lm9yZ4ISd3d3Lm5jcmVnaXN0ZXIuY29tghh3d3cubmV3c2NpZW50aXN0
YmV0YS5jb22CDnd3dy5waG90b3MuY29tghp3d3cucmFsZWlnaHJlYWx0eWhvbWVz
LmNvbYITd3d3LnNhZmNvZGVudGFsLmNvbYIad3d3LnRvdGFsbWVyY2hhbmRpc2Uu
Y28udWuCI3huLS0wOGoyZnhjeGEwZDZ3eTE4b3RyYW0zN2Eya3oubmV0MB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUQDksvRtbCV1Nw94A
d16BlyMOjfUwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABi88uDp+dgfknMPFXak
WCM5R72TMl1UT4Qvtnw45NuHBa+RUmZ3lfnJ6EtLAp3t3SqtI6yOx8W8Ye3/+qBP
Ir85Y3zlD9Nig4dZTbtQ+w1tiwU9obHgmvdO6Cqd8ZeiUeDjZCCsJNKvfjQZs9Yt
cFD0CcqqTeqycghple/efNDrkfgdl18ZHoNgXZ9HnSh/rwLI9diOdCzo7W4HLZbS
usQi+KGiHFHQ5iCrwBojm8pY27797nf2UTAzuoeX5JCqQrMMK88W1lzy/g5D4obd
49X+MsBa2mMqiVjlYFobq0RalFSZe17aRzyeuzKUgOGCgf2cy7/68twr5Sj2U5FU
+5I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIaTJfF0Io/JrEBnrbLl
t3dfKyuPSNXJ5NEP0542v34P03Z+n0lMjdmIG6M5OsVZbDF4hYaSQIpMfRetQnII
z8YLQwXn4kW93XjaGvf9CrO2zbLG68PHDeApgV/D48u+rEBMRBqdxXlHyKbHKSxE
QSJcsLA3+/2/wz+5HwHcA3di2RwFOt6sO5aVeZs3qEdyiuQU6I0CK8BGhtU2V4x9
QdDsbgHe0MzRhPimFmGO7wGZ6jmkYQuFueM5vqPQ7TOuLD1bbADbTTcGdTTKNlo5
q+1D/qEvcu92vuJagjbUeFL/E2z9fZ773N14K11BjW2zC8bzpw6l7KK6lvynH7w1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12734804332894606563669889924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 23:01:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 19:35:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'y2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22789256199964530722184597670080012917938915185873150001403594758928285979634697213258708409260910020226614449279458697517145050492355166166465717268073330305986932361254972372296330802051596275010558468826586122395876947954239014129784770751045233354479024573056824727556875148650316643527337728874702853194869355599789847520159619654761075624454623216136347702685165537980878129908531045489189956193918148579431512540925162152347661780693818803925447896941531427764334596035956336103615250840170057022913932409607632807510974275202999198077599678806076541017534450957527187508746481560267879649461924777486951658769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2355 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywhereindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywheremyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atvstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byteoversea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdfiber.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makewithprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merpay-sandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merpay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noujoumtounes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.on-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec.merpay.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tlaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topbuzzcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.fineproxy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircon-okaidoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.split.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buttercms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thescroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.trippng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntnt.idgconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.gorgias.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue.moneyforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.thegourmet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.greenbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.idgeinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulture.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.handymanmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.cafeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.geappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.haierappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.hotpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.monogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fis-ski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.haarets.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.avocandocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vinoshipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.web.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userscdn.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-gcp-fastly.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionagainsthunger.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aircon-labo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitesarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flooranddecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leapingbunny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighrealtyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalmerchandise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--08j2fxcxa0d6wy18otram37a2kz.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40392cbd1b5b095d4dc3de00775e8197230e8df5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0018bcf2e0e9f9d81f92730f1576a458233947bd93325d544f842fb67c38e4db8705af9152667795f9c9e84b4b029deddd2aad23ac8ec7c5bc61edfffaa04f22bf39637ce50fd3628387594dbb50fb0d6d8b053da1b1e09af74ee82a9df197a251e0e36420ac24d2af7e3419b3d62d7050f409caaa4deab272086995efde7cd0eb91f81d975f191e83605d9f479d287faf02c8f5d88e742ce8ed6e072d96d2bac422f8a1a21c51d0e620abc01a239bca58dbbefdee77f6513033ba8797e490aa42b30c2bcf16d65cf2fe0e43e286dde3d5fe32c05ada632a8958e5605a1bab445a9454997b5eda473c9ebb329480e18281fd9ccbbffaf2dc2be528f6539154fb92