marfeel.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 22:51:43:14:99:2d:8b:b9:f8:95:37:2e was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:51:43:14:99:2d:8b:b9:f8:95:37:2e
Serial Number (int): 10620730103841382932824799022
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: e5:74:1b:fb:c3:85:c8:b5:8b:4e:a3:82:76:c2:04:fb:2e:37:4c:ec
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ba:8e:b8:96:54:b5:9b:5b:67:38:5f:ae:06:62:8f:8b:1c:73:47:4a
Fingerprint (sha256): 27:f0:35:0a:81:86:31:94:08:5f:22:23:44:b1:18:44:df:07:92:6d:ef:9d:df:ae:df:5b:2b:c2:4d:2f:0d:5f

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate marfeel.map.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marfeel.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marfeel.map.fastly.net
*.14ymedio.com
*.24horas.cl
*.acidadeon.com
*.aeroflap.com.br
*.amqueretaro.com
*.bonde.com.br
*.cocina-familiar.com
*.comarcalcv.com
*.curapelanatureza.com.br
*.defimedia.info
*.depeso.com
*.derrydaily.net
*.df.cl
*.elguardian.mx
*.eluniverso.com
*.f1actu.com
*.financialafrik.com
*.fisioterapia-online.com
*.giornodopogiorno.org
*.greenmebrasil.com
*.guanajuato.lasillarota.com
*.happyfacts.co
*.herbeauty.co
*.hidalgo.lasillarota.com
*.imagenzac.com.mx
*.imzansi.com
*.informationnigeria.com
*.integrationtests.com
*.julioastillero.com
*.kyaooo.net
*.lacuisinedebernard.com
*.lavozdeltajo.com
*.mobigaming.com
*.netflu.com.br
*.news365.co.za
*.ofuxico.com.br
*.pausecafein.fr
*.pianetadonna.it
*.protagonista.com.co
*.radioagricultura.cl
*.reisetopia.de
*.revistaforum.com.br
*.schuesselglueck.de
*.soapcentral.com
*.themazatlanpost.com
*.thephoblographer.com
*.thestandard.co.zw
*.tizkka.com
*.tonspion.de
*.tvn.cl
*.unzensuriert.at
*.unzensuriert.de
*.veracruz.lasillarota.com
*.viralistas.com
*.yourmoney.com
14ymedio.com
24horas.cl
acidadeon.com
aeroflap.com.br
amp.integrationtests.com
amp.radioagricultura.cl
amqueretaro.com
bonde.com.br
cocina-familiar.com
comarcalcv.com
curapelanatureza.com.br
defimedia.info
depeso.com
derrydaily.net
df.cl
elguardian.mx
eluniverso.com
f1actu.com
financialafrik.com
fisioterapia-online.com
giornodopogiorno.org
greenmebrasil.com
guanajuato.lasillarota.com
happyfacts.co
herbeauty.co
hidalgo.lasillarota.com
imagenzac.com.mx
imzansi.com
informationnigeria.com
integrationtests.com
julioastillero.com
kyaooo.fr
kyaooo.net
lacuisinedebernard.com
lavozdeltajo.com
mobigaming.com
netflu.com.br
news365.co.za
ofuxico.com.br
pausecafein.fr
pianetadonna.it
protagonista.com.co
radioagricultura.cl
reisetopia.de
revistaforum.com.br
schuesselglueck.de
soapcentral.com
themazatlanpost.com
thephoblographer.com
thestandard.co.zw
tizkka.com
tommyooi.com
tonspion.de
tvn.cl
unzensuriert.at
unzensuriert.de
veracruz.lasillarota.com
viralistas.com
yourmoney.com

Other certificates including the domain name marfeel.map.fastly.net

(limited to 100 certificates)
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net

Certificate

The complete raw certificate details for marfeel.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu81zRYROkXoSBnADRU3B
b1qoijYZr+VoVwLam5+CJVmAXJp8QDDKj1WSnOBLmff0GGHg7oBdHobsB8Sy9HTW
I7ckdGjk+8czbLWC0BzfdcKPFZ1idWrgIWAQhy5NIy/jdgRQk0OwtOB73IVu+4zl
Mp69SXodVMujKh/tTAW7tghlBKWQHCCWekcLiGfSa0AaLyzZeNqzMBHi4pw1/n/n
Wxu47oXRU2YHG7+8Jjf2QehMP77ODAC2bCA888N/Az+QuX+BDtL+52Vz90ZzjN8e
jxyz3RcEzARVlbVUWW/2eAFkx05ulsUIeGSlweLWeDhzuh3eCEpTaJevO5J3BXaT
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10620730103841382932824799022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 20:16:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-05 16:15:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'marfeel.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23707874337394926031798157888888252373506234616014884573500955170606351367496134887020086652469608455675364091450838168755592868535028741930005044060524903518420269094141952466076784929535560981546798525678292334069476009455092338517224032776708111979773525882163265768363117401416768592641959458205436510094417439136109909368996038190819439436897829470161281530252707745133143192642250778910420214827671231417924168260626241623228374308031228803561400367213626216691578512657120828263350013583034943288856910099317193623673521418613635463351143976480409444376404271344124593397345423020093958893096338688729542988737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marfeel.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.14ymedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24horas.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acidadeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeroflap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amqueretaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonde.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocina-familiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comarcalcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curapelanatureza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defimedia.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derrydaily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.df.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elguardian.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eluniverso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f1actu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialafrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisioterapia-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giornodopogiorno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenmebrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guanajuato.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happyfacts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herbeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hidalgo.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagenzac.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imzansi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informationnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integrationtests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julioastillero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyaooo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacuisinedebernard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavozdeltajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobigaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netflu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news365.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofuxico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pausecafein.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianetadonna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protagonista.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioagricultura.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reisetopia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revistaforum.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuesselglueck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soapcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themazatlanpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thephoblographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestandard.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tizkka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonspion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unzensuriert.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unzensuriert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracruz.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viralistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '14ymedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24horas.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acidadeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeroflap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.integrationtests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.radioagricultura.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amqueretaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonde.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocina-familiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comarcalcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curapelanatureza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defimedia.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derrydaily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elguardian.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eluniverso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1actu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialafrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisioterapia-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giornodopogiorno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmebrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guanajuato.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyfacts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidalgo.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagenzac.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imzansi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrationtests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julioastillero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyaooo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyaooo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacuisinedebernard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavozdeltajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobigaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netflu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news365.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofuxico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pausecafein.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianetadonna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protagonista.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioagricultura.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisetopia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistaforum.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuesselglueck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themazatlanpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thephoblographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestandard.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizkka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommyooi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonspion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unzensuriert.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unzensuriert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracruz.lasillarota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourmoney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5741bfbc385c8b58b4ea38276c204fb2e374cec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001768c18a03d0000040300463044022048afa1457f5cff1ed7761165beaae73a6a0ee0b66530d0aee63c2957cefd824f0220041f611d3319c2a84471a9c6c6b71a616e1e2a85058a4be9a8477d92044557d00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001768c189e5a0000040300473045022100c42269595914c7c7c988200ecd2a20e37c3d2fa230610a26ee19cdaf25e5586502203f5b2e2e554e34145769a76e661a5845d1a96e5b6fd4283d17957bf363c720a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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