platformsh.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5a:d1:6d:b4:83:e4:a2:1e:7b:8d:44:4e was issued on by GlobalSign nv-sa.

With 121 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:d1:6d:b4:83:e4:a2:1e:7b:8d:44:4e
Serial Number (int): 28106834448084979107255632974
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 03:ae:4b:12:a8:b4:9d:ff:26:ea:ae:be:31:a6:17:e5:58:24:6d:4a
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 4d:a8:96:02:08:b9:52:8d:7c:b7:91:a8:8d:b2:c9:90:eb:58:c1:1d
Fingerprint (sha256): 2a:a8:ac:1c:48:b3:0a:59:71:d4:eb:86:9b:b3:da:fc:20:55:7c:93:36:40:f5:1c:6b:68:54:ba:7c:88:84:9d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate platformsh.map.fastly.net

121

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformsh.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformsh.map.fastly.net
*.a2presse.fr
*.aiatsis.gov.au
*.animalis.com
*.animo-shop.com
*.armonea.be
*.centrale-canine.fr
*.christianaid.ie
*.christianaid.org.uk
*.clickandcroquettes.com
*.convention.parisinfo.com
*.copadata.com
*.corwin.com
*.dbaudio.com
*.elegia.fr
*.esmo.org
*.frightnights.nl
*.garantiemultinomades-carrefour.fr
*.hamworthy-heating.com
*.illustre.ch
*.isravision.com
*.ixiacom.com
*.joinymaryland.org
*.lostgravity.nl
*.lrm.fr
*.marshall.usc.edu
*.medalsofamerica.com
*.nationaltheatre.org.uk
*.osce.org
*.parisinfo.com
*.preprod.parisinfo.com
*.prod.parisinfo.com
*.rarecancerseurope.org
*.sagepub.com
*.southbankcentre.co.uk
*.stars-insight.com
*.suedostschweiz.ch
*.suzuki.fr
*.thehashtag.news
*.truffaut.com
*.ukscoutnetwork.org.uk
*.usmedals.com
*.valrhona-selection.fr
*.walibi.be
*.walibi.fr
*.walibi.nl
*.walibiholland.nl
*.yafterschoolcare.org
*.ymaryland.org
*.ymarylandcamp.org
*.ymarylandcareers.org
*.ymarylandheadstart.org
*.ymarylandpreschool.org
*.zueriost.ch
a2presse.fr
aiatsis.gov.au
animalis.com
animo-shop.com
armonea.be
assurance.carrefour.fr
centrale-canine.fr
christianaid.ie
christianaid.org.uk
clickandcroquettes.com
convention.parisinfo.com
copadata.com
corwin.com
dbaudio.com
digitalLibrary.bernardcontrols.com
elegia.fr
esmo.org
fastly.test-cdn.pltfrm.sh
flexible-web-publisher.orange-business.com
frightnights.nl
garantiemultinomades-carrefour.fr
hamworthy-heating.com
illustre.ch
intranet.ausy.fr
isravision.com
ixia.keysight.com
ixiacom.com
jira.pltfrm.sh
joinymaryland.org
lostgravity.nl
lrm.fr
marshall.usc.edu
medalsofamerica.com
nationaltheatre.org.uk
osce.org
parisinfo.com
pimcorecache.srvp.io
preprod-assurance.carrefour.fr
rarecancerseurope.org
sagepub.com
shop.encory.com
southbankcentre.co.uk
staging.flexible-web-publisher.orange-business.com
staging.nrdc.org
stars-insight.com
suzuki.fr
testshop.encory.com
thehashtag.news
truffaut.com
usmedals.com
valrhona-selection.fr
walibi.be
walibi.fr
walibi.nl
walibiholland.nl
www.assurance.carrefour.fr
www.christianaid.org.uk
www.monin.com
www.nrdc.org
www.ukscoutnetwork.org.uk
yafterschoolcare.org
ymaryland.org
ymarylandcamp.org
ymarylandcareers.org
ymarylandheadstart.org
ymarylandpreschool.org
zueriost.ch

Other certificates including the domain name platformsh.map.fastly.net

(limited to 100 certificates)
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net

Certificate

The complete raw certificate details for platformsh.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqx450nTjxNDjEr+I76w
PNSsfHvlM/pAb/HuecL6fT4yBYzaj9d16GtfU9zfXgR6K2p+O17CkME3qSwBc98x
5jnjWjtmLyg5iCCVbrXtKaonVOnAhM9kyKJC91I7RMWXbBDt/ECNXCcBI1sxYdVW
Tko3V85/QAOwWXQp+nm56pUxI8NblTYLVZCMgSYWBPbtvoO3a++6VbirJ5jiLl20
/tTsWYEskdblbl5/jfwibCfk+6AVEeD/e4uGcsQM51inCDXe8n0bjBNA0n6gXnX3
7b3FqgWGyadmde88bDTUwlpdGPzbUK4DEjeNuC4vgquFiJgFMXIBuqiJeKhUl7R4
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28106834448084979107255632974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 21:06:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 23:27:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'platformsh.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19525748215465998961852855669641034541729897084377207012084626393096023256317759902753555336226352732020295626524910755290280567502568426481878259190785831592059527481981240459130044074099209456303167153162496671759277497986489359083566115695541305387980356369375326358129769363313762684533630310548700948029418405960913396964130556915345907008315813892044536400291422785102788301751319872678710391404748356891745674954120199199481907665963485690803329018285457698844619581299478288032762261222919701605195841527053835640962221433436292286614047153419291194128960841964441534449501868292926829215130024541310279776493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformsh.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a2presse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiatsis.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animo-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armonea.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrale-canine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianaid.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianaid.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickandcroquettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.convention.parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dbaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frightnights.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garantiemultinomades-carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamworthy-heating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illustre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isravision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ixiacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joinymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lostgravity.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltheatre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rarecancerseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stars-insight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suedostschweiz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suzuki.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truffaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukscoutnetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usmedals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valrhona-selection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibiholland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yafterschoolcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymarylandcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymarylandcareers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymarylandheadstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymarylandpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zueriost.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2presse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiatsis.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animo-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armonea.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrale-canine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianaid.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianaid.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickandcroquettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convention.parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalLibrary.bernardcontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.test-cdn.pltfrm.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexible-web-publisher.orange-business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frightnights.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garantiemultinomades-carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamworthy-heating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illustre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ausy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isravision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixia.keysight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixiacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.pltfrm.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostgravity.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaltheatre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimcorecache.srvp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assurance.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecancerseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.encory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.flexible-web-publisher.orange-business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nrdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stars-insight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suzuki.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testshop.encory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truffaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usmedals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valrhona-selection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibiholland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianaid.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukscoutnetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yafterschoolcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymarylandcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymarylandcareers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymarylandheadstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymarylandpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zueriost.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03ae4b12a8b49dff26eaaebe31a617e558246d4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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