k2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 07:8b:5a:58:85:e5:f0:0b:81:66:0b:67 was issued on by GlobalSign nv-sa.

With 111 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 07:8b:5a:58:85:e5:f0:0b:81:66:0b:67
Serial Number (int): 2334862403621167399784811367
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 2a:02:42:99:58:77:85:08:a4:4d:05:7e:f8:15:ba:dd:d0:41:b3:01
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e6:78:cd:f2:7a:29:59:04:01:fc:fc:e8:39:08:fb:16:70:e9:ac:f5
Fingerprint (sha256): 24:b2:76:42:4d:48:d7:13:0e:3f:61:27:27:2c:57:b2:b0:ae:f4:13:83:eb:df:91:1e:82:98:20:56:fc:88:bb

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate k2.shared.global.fastly.net

111

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k2.shared.global.fastly.net
*.accordo.com
*.acuris.com
*.anti-corruption.com
*.automatic.co
*.cliqueinc.com
*.colesqualityacademy.com.au
*.constructormarketplace.com
*.dctest.donorschoose.net
*.dctest.donorschoose.org
*.dentalplans.goodrx.com
*.elitedaily.com
*.faktisk.no
*.fastly.brightcove.com
*.files.quantilope.com
*.fs.airtable.com
*.fs.staging.airtable.com
*.fs.teachablecdn.com
*.grubstreet.com
*.hamcamp.co
*.hchrx.goodrx.com
*.hchrxduncan.goodrx.com
*.hitched.ca
*.hitched.co.in
*.hitched.co.za
*.hitched.com.au
*.hitched.ie
*.ican.goodrx.com
*.ihop.goodrx.com
*.keenan.goodrx.com
*.mail.foursquare.com
*.med.unc.edu
*.mic.com
*.nmgplatform.com
*.nylon.com
*.perfectinfo.com
*.pomona.edu
*.releases.hashicorp.com
*.rocdn.com
*.rocketleague.com
*.seattlecca.org
*.sentinelproject.io
*.sep.goodrx.com
*.sitelabweb.com
*.sites.unc.edu
*.smartrx.goodrx.com
*.stbank.com
*.tarheels.live
*.thethirty.com
*.toysfortots.goodrx.com
*.usertesting.com
*.web.unc.edu
*.wellcheck.arizona.edu
*.whowhatwear.co.uk
*.whowhatwear.com
*.whowhatwear.com.au
*.wonderbly.io
*.workmarket.goodrx.com
*.yourmedcenter.goodrx.com
acuris.com
alphauniverse.ca
anti-corruption.com
app.featureflow.io
automatic.co
ci.secretcdn-stg.net
cliqueinc.com
concacafleague.com
donatelife.gov.au
elitedaily.com
faktisk.no
fs.teachablecdn.com
hamcamp.co
hitched.ca
hitched.co.in
hitched.co.za
hitched.com.au
hitched.ie
images.yelpwifi.com
jp.abeam.com
link.99u.adobe.com
media.macphun.com
mic.com
nylon.com
orders-staging-app.qa.usertesting.com
register.donatelife.gov.au
rocdn.com
seattlecca.org
sentinelproject.io
static.fotolia.com
stbank.com
td-assets.bn765.com
thethirty.com
usertesting.com
wellcheck.arizona.edu
whowhatwear.co.uk
whowhatwear.com
whowhatwear.com.au
wonderbly.io
www.alexanderhall.co.uk
www.bikeradar.com
www.cbncambodia.com
www.cloudsavvyit.com
www.concacafleague.com
www.coronadirect.be
www.distilled.net
www.foxtonsgroup.co.uk
www.mindbounce.com
www.superbowlmusicfest.com
www.ticketmastervip.com
www.topmba.com
yourcareer.cimaglobal.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for k2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ExXFmyVUMD+qMp+Nned
2WIa4vcbhe7j4ZVRZ4Snj0La8NKAIb+QbotOd8j57dsFRk+ExmLaDX4xupQ8KRkF
yypU8n58ec467jl8j1+qPSlNFifukckB4BRb8CZSg7xwND9dBdoso9VgK4Bj3njj
b9g+edHVvrhNtg1DC9F9wRAx+2vsv+/SSsJrTpoG6vox56qcic1/B36XDdhSOXxQ
//F1Mw/expgh+GCblWkwumlv3+ku4+23ZnVElihpVngi7qTQxCRqnsXXI8KFBILe
oQkVtJXUbHyiumOBdt/DLl1ZtYRf1/M03xqjJqIttb59xlTMB7s4hwtnwoDd+hQB
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2334862403621167399784811367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 20:58:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-17 16:32:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'k2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26800165401518323188545773271926499156940746134372382924794540202379480055622259688963471300250092443687927754618293346796178076703624291668460510660809761273846236744047726239643981798451831169315326402032284000267780104208938957018488191246282554579840130353404639870286726936689067213023449088283963458107090835654585916908763897501759800650670603382647162912527232521877755636315960603278410830138112577200485545021006752661675805701759329178017943139397931839244608825521364915239434280614991894275577189488023057729574971382505935595673382469345997475106045406864288323498526056392522061147031866743828384055617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acuris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anti-corruption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automatic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliqueinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colesqualityacademy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constructormarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dctest.donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dctest.donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalplans.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faktisk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.quantilope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.airtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.staging.airtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.teachablecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grubstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamcamp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hchrx.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hchrxduncan.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitched.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ican.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihop.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keenan.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mail.foursquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.med.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmgplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pomona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.releases.hashicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seattlecca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentinelproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sep.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitelabweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartrx.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarheels.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thethirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toysfortots.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellcheck.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whowhatwear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whowhatwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whowhatwear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wonderbly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workmarket.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourmedcenter.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphauniverse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anti-corruption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.featureflow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automatic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.secretcdn-stg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliqueinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concacafleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatelife.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faktisk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.teachablecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamcamp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitched.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.yelpwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.abeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.99u.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.macphun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders-staging-app.qa.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.donatelife.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattlecca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentinelproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.fotolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td-assets.bn765.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thethirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellcheck.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whowhatwear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whowhatwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whowhatwear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderbly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexanderhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikeradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbncambodia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudsavvyit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concacafleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronadirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distilled.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtonsgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindbounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superbowlmusicfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticketmastervip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topmba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourcareer.cimaglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a02429958778508a44d057ef815baddd041b301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017557416d5d0000040300483046022100f7c719a774ff27f36f56cec2ebbefa893a9189c3502e08519a3cf9bf1b631041022100d5f6387640d031e1b74e8f4c427f39690832b34b8dd742c29b6ae27291c2b72e007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017557416d8b0000040300463044022025172d7a9e701378dc2ee94b4644ba25eb08a3b2d5c725c0c029ad1774792228022074fa8b7721bc22a9abcc63df4e92ab9625c008235b29568349b5c63b0a43c387
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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