b2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 34:85:c4:6e:80:f5:5c:3c:57:66:77:ed was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 34:85:c4:6e:80:f5:5c:3c:57:66:77:ed
Serial Number (int): 16254935266983614632820111341
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a3:2b:8f:4f:a8:89:e1:59:9f:a7:fd:3f:c2:c2:f3:b4:f6:41:bb:ad
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): cb:4a:09:72:bd:6a:52:eb:85:49:22:4b:21:a0:de:9a:f4:90:3a:21
Fingerprint (sha256): 21:29:6f:58:fc:dc:dd:06:1e:7b:07:92:4f:93:1f:6a:8f:fa:6f:6d:75:28:52:48:78:2c:5d:b4:2c:27:7c:39

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate b2.shared.global.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2.shared.global.fastly.net
*.barkcdn.net
*.brisbanetimes.com.au
*.chicagocitysports.com
*.chuchro.com
*.comtrade.com
*.couponroller.com
*.crew.co
*.diffen.com
*.eu.newrelic.com
*.eu01.nr-data.net
*.ffx.io
*.ffxblue.com.au
*.gadventures.com
*.getmyboat.ca
*.getmyboat.co.uk
*.getmyboat.co.za
*.getmyboat.com.au
*.getmyboat.ie
*.getmyboat.nz
*.kravet.com
*.luzernerzeitung.ch
*.menshealth.com
*.metacpan.org
*.middleware.6play.fr
*.moviefanatic.com
*.mux.com
*.nmgassets.com
*.nowth.is
*.nzz.ch
*.osce.org
*.perfectaudience.com
*.realcrowd.com
*.risd.edu
*.scalefastr.io
*.scroll.com
*.smh.com.au
*.startle.cloud
*.tagblatt.ch
*.theage.com.au
*.watoday.com.au
*.womenshealthmag.com
*.zipcar.com
*.zipcar.io
apf.psa.org.au
api.exponea.com
app.tipotapp.com
cdn.hyfnlocalcreative.com
cdn.pachamama.com
chicagocitysports.com
chuchro.com
codigodescuento.enfemenino.com
comtrade.com
couponroller.com
crew.co
diffen.com
eu.newrelic.com
eu01.nr-data.net
fastly.site
fastly.storytel.se
ffx.io
gadventures.co.uk
gadventures.com
gadventures.com.au
gadventures.de
getmyboat.ca
getmyboat.co.uk
getmyboat.co.za
getmyboat.com.au
getmyboat.ie
getmyboat.nz
images.6play.fr
kravet.com
medicalnote.jp
menshealth.com
metacpan.org
moviefanatic.com
mux.com
nmgassets.com
nowth.is
online.mps-gba.de
osce.org
perfectaudience.com
preview.pointb.com
realcrowd.com
risd.edu
rlesports.gg
rocketleagueesports.com
scroll.com
sdk.a-mo.net
secure.paymo.life
startle.cloud
stg-secure.paymo.life
voxer.com
web.voxer.com
wildfang.mage.forixdemo.com
womenshealthmag.com
www.6play.fr
www.australia.gov.au
www.barigallery.com
www.bitmart.com
www.cigarpage.com
www.fieldsupply.com
www.gadventures.co.uk
www.gadventures.com.au
www.kingdomran.jp
www.marthalouisa.com
www.pointb.com
www.rlesports.gg
www.rocketleagueesports.com
www.stagingworkyardwebsite.com
www.voxer.com
www.wildfang.com
www.wingsupply.com
zipcar.io

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for b2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61mLUH6Cvk9YCAsxFeaP
3rAg4DVXqgINjA/7phgNzxbvMCE/eWZGIVgBBjS1qkn2IFGxMhHIjIoMojz8yzdw
31fCjIBltK09o4oT6bpIfirUhFTwaKj+VHFcG+e6cIRmGvHaGgqa7yvbGiCJmmMH
UCVJcruRxyZcsYB744ZjfKuv9zxtRrcI23TJ8rLsvTA83LMuZkteuv7cb/hbHSB9
WKJDDFSJl2VYD7G1anwpslIaDh/nB3zZ+ZaGHsLRhcjkGQxnjoISuCpa8/nqBsx5
BfKtHMQiSFmJ8H3uLZtWjueAncrTZf7k6/25FufCbbf06dO3Q79h2J++wVhMW8bw
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16254935266983614632820111341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 21:09:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 14:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29710157556273924700696657697942439713296429409817651130043939800900944351272991817464676184493083229247377546848261062562011108751505460379556071728844892055436861862621215348576957823896802270529463108063926066911145130763483241326823923544542790572446732151231130326917803946963916859590001156154023304441562204723184146788011336255583714217749025458794844217867726425604934255974722351660991325022845470084513361604184937967095691828678820134211869078819595517647610963109504031325735269548278851264114415890185066220732569390453326996186028452123200332696255093649330307868982074035875811841653426705882451210419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1995 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagocitysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuchro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.couponroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.newrelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.nr-data.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffxblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyboat.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kravet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luzernerzeitung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metacpan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middleware.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviefanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmgassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowth.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scalefastr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startle.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipcar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apf.psa.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.exponea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tipotapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hyfnlocalcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pachamama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagocitysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuchro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codigodescuento.enfemenino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couponroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.newrelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu01.nr-data.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.storytel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyboat.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kravet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalnote.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacpan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviefanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmgassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowth.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.mps-gba.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesports.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketleagueesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.a-mo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.paymo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startle.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-secure.paymo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.mage.forixdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.6play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australia.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barigallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cigarpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadventures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadventures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomran.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marthalouisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlesports.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketleagueesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagingworkyardwebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipcar.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32b8f4fa889e1599fa7fd3fc2c2f3b4f641bbad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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