q2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 08:b7:40:ae:23:d8:d2:62:85:35:5c:a6 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:b7:40:ae:23:d8:d2:62:85:35:5c:a6
Serial Number (int): 2697418947331655878405610662
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: ec:df:12:1e:42:34:c8:ec:fe:4c:0d:51:2c:e2:b3:86:3d:d4:7a:91
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): cb:1b:9b:96:ba:da:6d:9d:17:00:55:d2:f7:7b:f4:30:a5:86:61:8c
Fingerprint (sha256): 26:1d:63:d4:b2:61:7c:f5:1f:db:19:98:00:44:76:54:95:d6:3b:e0:d9:63:d9:51:28:18:eb:33:38:0a:ac:be

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate q2.shared.global.fastly.net

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q2.shared.global.fastly.net
*.baileyhats.com
*.concacafchampionsleague.com
*.dev.feltapp.com
*.fbcd.co
*.feltapp.com
*.fl.bankaletihad.com
*.govx.net
*.hammerseries.com
*.hats.com
*.hipmunk.com
*.joany.com
*.kangolstore.com
*.legends.net
*.livebooks.com
*.myfreetaxes.com
*.n8s.jp
*.newsdeutschland.com
*.newsr.in
*.newsserve.net
*.nordschleswiger.dk
*.onenewspage.co.uk
*.onenewspage.com
*.onenewspage.com.au
*.onenewspage.us
*.px-cdn.net
*.reson8.com
*.resonate.com
*.sneak.viceops.net
*.spacecrafted.com
*.vcsva.com
*.youversion.com
api.resourcewatch.org
apidocs.joyent.com
baileyhats.com
cdn.acme-east.jauntxr.com
cdn.acme.jauntxr.com
cdn.demo.jauntxr.com
cdn.directv.jauntxr.com
cdn.jaunt.jauntxr.com
cdn.jauntchina.jauntxr.com
cdn.nbcu.jauntvr.com
cdn.nbcu.jauntxr.com
cdn.nttdata.jauntvr.com
cdn.nttdata.jauntxr.com
cdn.sky.jauntvr.com
cdn.sky.jauntxr.com
cdn.unbnd.jauntvr.com
cdn.unbnd.jauntxr.com
cgit.drupalcode.org
chillisauce.com
client.px-cdn.net
concacafchampionsleague.com
containersummit.io
docs.joyent.com
drupalcode.org
e.bravissimo.com
email.elitedangerous.com
email.frontier.co.uk
email.jurassicworldevolutiongame.com
email.museumselection.co.uk
email.museumselection.de
email.museumselection.fr
email.piabijoux.fr
email.piajewellery.com
email.planetcoaster.com
fbcd.co
goldcup.org
govx.net
hammerseries.com
hats.com
help.usertesting.com
hipmunk.com
images.dev.yelpwifi.com
img.gifmagazine.net
jauntxr.com
joany.com
joyent.com
kangolstore.com
legends.net
livebooks.com
media1.tenor.co
media1.tenor.com
myfreetaxes.com
newsdeutschland.com
newsr.in
newsserve.net
nordschleswiger.dk
onenewspage.co.uk
onenewspage.com
onenewspage.com.au
onenewspage.us
registry.terraform.io
rpm.opera.com
rvm.io
s.mmgo.io
sp-prd.theglobeandmail.ca
spacecrafted.com
static.seatme.com
static.seatme.yelp.com
static.yelpreservations.com
tenor.co
test.chillisauce.com
testersupport.usertesting.com
vcsva.com
velon.cc
webmail1.amnesty.org.uk
wifi-assets.fl.yelpcdn.com
wifi-fastly.getturnstyle.com
wifi.getturnstyle.com
www.culturewhisper.com
www.jauntxr.com
www.technobezz.com
youversion.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for q2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYXaJs/NDyAWawcoL4Wg
C61QSpQ/zpGRMeYX2wF8UXgpmfZSdgx5VHd3xeiqoOIEzd9JzO5tpdxmb8pwrdJo
ICv48zVEtV4Wc0M7c0COEze7sdiFeG5dZjPJGq+Us/SsqbeKwHf+xZKJaCv59nst
lDpVDzuhol56mKuPqdbzIWavf/p9Mia3tKwK99T47s3XgWXJI+KvKpEJqJoXogq8
RVguVI/qCVpu8hC0wDTi+S53pmg6xbm5LqghdQY2UNSd/mNovYJxvOohOnBjZwP4
W3Z1+3dcbKlNMizZ5oVxPyQ+bZ/uWXpFmsfm3Hrv/BAzM4hrPsCnZIVDBY7l/C6z
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2697418947331655878405610662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 18:25:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 18:30:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'q2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20895325276930506744331118745702975795475654594915419404217582752643320814681690985008459549808110444421792555829375214170824663821434677136360153660932774637855897335134976513719198151418176496214181907962621722967499786568912048011056612516978445268655556814335899045620904117537114410212121478075976744089507492666565018317231972585076271480569439160568288829526948656113479320670702250005579221025020511039154275489076894089267102803989749339115556644394700840308908936500012679108539070262305131912121052116272028706710116146385356489486612240285205306315977579763149033328724036078809614601982375071769175176119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baileyhats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.feltapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fbcd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feltapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fl.bankaletihad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hammerseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangolstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n8s.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsdeutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsr.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsserve.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenewspage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.px-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reson8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resonate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sneak.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcsva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.resourcewatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileyhats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.acme-east.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.acme.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.demo.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.directv.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.jaunt.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.jauntchina.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nbcu.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nbcu.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nttdata.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nttdata.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sky.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sky.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.unbnd.jauntvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.unbnd.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgit.drupalcode.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillisauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.px-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containersummit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupalcode.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.bravissimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.elitedangerous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.frontier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.jurassicworldevolutiongame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piabijoux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piajewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.planetcoaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hammerseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dev.yelpwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.gifmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangolstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsdeutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsr.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsserve.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenewspage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpm.opera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvm.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mmgo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp-prd.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.seatme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.seatme.yelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.yelpreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.chillisauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testersupport.usertesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velon.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.amnesty.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi-assets.fl.yelpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi-fastly.getturnstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.getturnstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturewhisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technobezz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youversion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecdf121e4234c8ecfe4c0d512ce2b3863dd47a91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001636a32eb2e0000040300473045022100afcc2d97e82f4d0dfea884f1f1afaf883f569a59fb02185153014ebd6b25356902201e479570305591690d8e3278c0cf649ec2081f74a3f751cfd1546b9872788faa007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001636a32eba40000040300483046022100c104827f8187a6db8b774d63e8ff83ba90eb8301796f5b76ad4618ccb4e7453c022100a20784e5caf78d5a73161333c6f080b417bbd94d616469fd18d05afcdcee9c4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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