p.ssl.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7a:1f:b7:09:b9:f9:af:88:8d:16:0a:a7 was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:1f:b7:09:b9:f9:af:88:8d:16:0a:a7
Serial Number (int): 37795512271100148864534317735
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: be:dd:09:c5:17:8b:00:b0:b1:8b:6c:bd:9b:d7:5b:12:b2:02:81:0e
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): f3:8f:a5:d2:6a:76:40:fa:69:07:25:1c:ff:43:51:b3:99:89:b8:90
Fingerprint (sha256): 23:68:77:7b:26:1d:8f:02:78:c8:b8:bb:3c:ef:b0:8c:ab:53:bb:35:6e:86:51:5e:83:2d:95:7a:c2:0f:d1:ba

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate p.ssl.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p.ssl.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p.ssl.fastly.net
*.blastworksinc.com
*.borrowedandblue.com
*.brave.com
*.browserfeatures.io
*.buzzfed.com
*.buzzfeed.com
*.contagiousmedia.com
*.corebine.com
*.corednacdn.com
*.donorschoose.net
*.donorschoose.org
*.evercore.org
*.experiencepoint.com
*.fastco.news
*.foxtons.co.uk
*.freitag.ch
*.gadventures.ch
*.gadventures.de
*.i.thechive.com
*.kendrascott.com
*.knect365.com
*.mediavine.com
*.mos.org
*.netzwelt.de
*.onceit.co.nz
*.perfectlyposh.com
*.racingpost.com
*.relaymedia.com
*.salesforceiq.com
*.shave.io
*.shiftpreview.com
*.sonar.digitalocean.com
*.soubarato.io
*.unsplash.com
*.velpic.com
*.vidyard.com
1stdibs.com
48544d4c5.adready.com
ad.tagdelivery.com
amp.cnn.com
api.ci.crwd.mx
api.crwd.mx
api.pdflayer.com
api.performance.crwd.mx
api.qa.crwd.mx
api.shiftcommerce.com
api.staging.crwd.mx
api.tictail.com
app.hiresuccess.com
bestpractices.coreinfrastructure.org
beta.sciencelearn.org.nz
bloximages.chicago2.vip.townnews.com
bloximages.newyork1.vip.townnews.com
brave.com
bundler.io
buzzfed.com
buzzfeed.com
cdn-promote.weebly.com
cdn.spaces.hightail.com
contagiousmedia.com
content-promote.weebly.com
corebine.com
data-staging.ripple.com
data.ripple.com
deadspin.com
fastco.news
gawker.com
hcdn.fullscreen.com
hexdocs.pm
hypebeast.com
integrations.bluecore.com
jauntvr.com
jezebel.com
kendrascott.com
knect365.com
kotaku.com
kyoto.travel
lifehacker.com
live.amano.io
master.bestpractices.coreinfrastructure.org
media.ci.crwd.mx
media.crwd.mx
media.performance.crwd.mx
media.qa.crwd.mx
media.staging.crwd.mx
mediavine.com
mos.org
my.freshbooks.com
onceit.co.nz
preview.jauntvr.com
schoologynext.com
seoghoer-fastly-production.shape.dk
shave.io
staging.bestpractices.coreinfrastructure.org
staging.lightingdirect.com
studioatgawker.com
unsplash.com
widget.perfectmarket.com
www-dev.jauntvr.net
www-staging.jauntvr.net
www.astoundgroup.com
www.bundler.io
www.codeaurora.org
www.franceandson.com
www.fsa.go.jp
www.hcdn.fullscreen.com
www.hiresuccess.com
www.jauntvr.com
www.jurists.co.jp
www.pinalove.com
www.schoologynext.com
www.thaifriendly.com
wwwnew.linux.com
zueriost.ch

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for p.ssl.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnYBUvHyFnQfIuEo5T6v
C7nHH1dMJuX8DYts+VLNYHYxZ0WC6vvb4PujuB2i7H0N1KlD/ocNkGDY3goVXb94
Lk9kRdzdTNQh4TmljQcX9VtdbzcKd5d+9lGQYnRypmLRmyv0QVC/XuQ2J4PfYzKe
nRLTLlP0BMOkEPH0Gq5TXVL7tAHvJMS41HxDKEwNskw3xpYQ8mrs36EvRt24djCb
+taiW2g4Y3ayaKj0OV7nFarcJ+AM942y9vOqZfUYcMzMXU8oQO0m9dmPzJHByz6r
FJ6DVA7v+tMdAkkwj7KSL6KKaGa375f5ZSZLB5K64jQWvIAmyBa7J/XM57FtX9m5
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37795512271100148864534317735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 03:35:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 14:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'p.ssl.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25053374902329793523602608478719647064088127608229975079408807916661418991996335434871488511718280667553341599406004160866172848848158006534815655594571105573669082603149775866186554277964141377287645803307022486351133666389096975744713847017126368642095870053173588806265535980066090089619851647777893796513536751807713865205466829790108165560699312523218295615246201821554445910459488572379645286681850015277714292965256763938764675938126176091623070030259429147136769092259592587459941330429235994081258929462384174269473250114307245556264450673039190936924238118114393257726079145332476674140216194359966637341103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.ssl.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blastworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borrowedandblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.browserfeatures.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contagiousmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corebine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corednacdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evercore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experiencepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastco.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxtons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freitag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.thechive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kendrascott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knect365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediavine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netzwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onceit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectlyposh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesforceiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiftpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonar.digitalocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soubarato.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unsplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '48544d4c5.adready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.tagdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ci.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pdflayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.performance.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.shiftcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tictail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.hiresuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.coreinfrastructure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sciencelearn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloximages.chicago2.vip.townnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloximages.newyork1.vip.townnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundler.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-promote.weebly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.spaces.hightail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contagiousmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-promote.weebly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corebine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-staging.ripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.ripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastco.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcdn.fullscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexdocs.pm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypebeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations.bluecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jezebel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kendrascott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knect365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kotaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyoto.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifehacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.amano.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.bestpractices.coreinfrastructure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ci.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.performance.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.qa.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.staging.crwd.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediavine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.freshbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoologynext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoghoer-fastly-production.shape.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bestpractices.coreinfrastructure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lightingdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioatgawker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.perfectmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.jauntvr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.jauntvr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astoundgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundler.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franceandson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsa.go.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcdn.fullscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiresuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurists.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinalove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoologynext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaifriendly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnew.linux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zueriost.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bedd09c5178b00b0b18b6cbd9bd75b12b202810e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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