twentythree4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 28:5d:50:ce:cf:8b:7b:d6:01:e5:a0:83 was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 28:5d:50:ce:cf:8b:7b:d6:01:e5:a0:83
Serial Number (int): 12492212098381055164722552963
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 3d:1e:39:d2:51:4c:07:5f:7f:4e:47:a5:d8:9d:8f:60:46:90:bf:4b
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): b5:ed:df:dc:c2:18:e8:d1:8c:a4:45:ba:2f:1d:61:93:0d:55:28:a9
Fingerprint (sha256): 1c:a2:26:b7:f8:db:3b:92:c6:63:2d:2c:01:91:da:04:7b:d7:c2:d3:91:1d:28:2a:89:04:4f:b7:5e:ed:48:d6

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate twentythree4.map.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twentythree4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twentythree4.map.fastly.net
*.23demo.com
*.23video.com
*.personalvideo.co
*.videomarketingplatform.co
23.seeknspeak.dk
aivi.webtvksoft.tv
film.bjorkneshoyskole.no
intern.video.koege.dk
internal-video.rockwoolgroup.com
play.estatenyheter.no
ski-tv.no
test.video.merkantilplay.dk
tv-intranett.roede.com
tv.issworld.com
tv.kilroy.be
tv.kilroy.dk
tv.kilroy.fi
tv.kilroy.is
tv.kilroy.net
tv.kilroy.no
tv.kilroy.se
tv.kilroyworld.nl
tv.tec.dk
uk.video.adama.com
video-eudvoksen.gyldendal.dk
video.allenmatkins.com
video.assaabloyopeningsolutions.no
video.assetadvisor.dk
video.audikagroup.com
video.barely.live
video.bornibyen.dk
video.chapmanbright.com
video.confindustria.vicenza.it
video.cphlive.dk
video.danskerhverv.dk
video.digital22.com
video.digitalpi.com
video.dis-play.dk
video.ecolane.com
video.em.dk
video.excellenceinstallation.com
video.flsmidth.com
video.fukk.dk
video.georgjensen.com
video.globeshare.mds.net
video.goecker.dk
video.gorizen.com
video.inboundnorway.com
video.iteo.no
video.koege.dk
video.ku.dk
video.labovick.com
video.madfeed.co
video.markedspartner.no
video.mediajunction.com
video.merkantilplay.dk
video.mo.agency
video.nextconf.eu
video.ngn.no
video.nortekgroup.com
video.novonordisk.es
video.pokalturnering.dk
video.qiagen.com
video.ramboll.com
video.revenueriver.co
video.rockwoolgroup.com
video.rodekors.dk
video.salesvalue.net
video.sana-commerce.com
video.santaritaranchaustin.com
video.seeknspeak.dk
video.sikkertrafik.dk
video.skousen.dk
video.skousen.no
video.stjernholmco.dk
video.successflow.co.uk
video.sunviewsoftware.com
video.survata.com
video.techfestival.co
video.teliacompany.com
video.teliacompany.net
video.thatagency.com
video.tretti.se
video.trioving.no
video.vestas.com
video.vibbio.com
video.vikingfootwear.com
video.webcruiter.com
video.whiteaway.com
video.whiteaway.no
video.whiteaway.se
video.whitehat-seo.co.uk
video.wuerth.no
video.ysi.com
videos.agencenile.com
videos.cliptoo.nl
videos.firstcut.io
videos.impulsecreative.com
videos.inbound.film
videos.inc-asean.com
videos.onestreamsoftware.com
videos.spotify.net
videos.storyblock.media
videostream.kpmg.de
webinar.aspia.se
webinar.intranote.dk
webinar.jyskebank.dk
webinar.nordicsemi.com
webinars.nordicsemi.com
webinars.sitecore.com
www.atletiktv.dk
www.seges.tv
www.ski-tv.no
www.video.teledynemarine.com

Other certificates including the domain name twentythree4.map.fastly.net

(limited to 100 certificates)
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net

Certificate

The complete raw certificate details for twentythree4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRcIF0mRw9hxJwCsquFm
YKwRcLfxKVbPCZ44Jzd7fHA5LvsWBjlHozscu8fcZP0uZvOcN5k4zQ31GVEVZ1kh
EwcKJVhbAe4uz2h95K1W/dfYZFJwv1pUKXCbquMxeWtnlz0OFzh9P6qh5PQxpvn5
2THuojqWEZgrZ+wnwr8yg8KEDEKh5VHQSaolWh/i2FwUdD1c21vTYXLtCgybJ/K+
zc8SuADIL13r9Jx/Hwpng8xBVnPjPiy2iGo7A0HKx/ez4YIWoDgKY+/ZKH3B6evK
NL16XJvxLhyha/4zLYEjpgX29Imvz4TogHMFmvp3VxZNZB8qVQHtYoP831YujsMs
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12492212098381055164722552963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 10:06:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 17:55:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'twentythree4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23365443726605292963579099255091134887109926026101280205053570494811264993697770511729988946133386064981659710041659402950596924482542325761625314193862104495769439708481931346446428476486598260195339930057161577689215157524409987431091378505338651363558702120119382852981836028576426367165044588896897100108021221545523080952558868562832057457195887470146272934457373729652181336344561781744261134828116763565611788010273132074581787658481612305312058833934678877294352199883252809250913894323680200039589925983082327290754328962274506215409335571928447479098612416176481406141489020703934300931489170354613589847243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2436 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentythree4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23video.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalvideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videomarketingplatform.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '23.seeknspeak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aivi.webtvksoft.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.bjorkneshoyskole.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.video.koege.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-video.rockwoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.estatenyheter.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ski-tv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.video.merkantilplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-intranett.roede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.issworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.kilroyworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.tec.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.video.adama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-eudvoksen.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.allenmatkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.assaabloyopeningsolutions.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.assetadvisor.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.audikagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.barely.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.bornibyen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.chapmanbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.confindustria.vicenza.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.cphlive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.danskerhverv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.digital22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.digitalpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.dis-play.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ecolane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.em.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.excellenceinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.flsmidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.fukk.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.georgjensen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.globeshare.mds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.goecker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.gorizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.inboundnorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.iteo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.koege.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ku.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.labovick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.madfeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.markedspartner.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.mediajunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.merkantilplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.mo.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.nextconf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ngn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.nortekgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.novonordisk.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.pokalturnering.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.qiagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ramboll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.revenueriver.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.rockwoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.rodekors.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.salesvalue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sana-commerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.santaritaranchaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.seeknspeak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sikkertrafik.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.skousen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.skousen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.stjernholmco.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.successflow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sunviewsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.survata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.techfestival.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.teliacompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.teliacompany.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.thatagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tretti.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.trioving.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vibbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.vikingfootwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.webcruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whiteaway.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.whitehat-seo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.wuerth.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.ysi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.agencenile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.cliptoo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.firstcut.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.impulsecreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.inbound.film'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.inc-asean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.onestreamsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.spotify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.storyblock.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostream.kpmg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.aspia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.intranote.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.nordicsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.nordicsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.sitecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atletiktv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seges.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ski-tv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video.teledynemarine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1e39d2514c075f7f4e47a5d89d8f604690bf4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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