a2.ssl.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 75:40:0b:72:71:88:8f:01:21:56:1d:f8 was issued on by GlobalSign nv-sa.

With 116 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 75:40:0b:72:71:88:8f:01:21:56:1d:f8
Serial Number (int): 36287171458693791235102350840
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: df:15:55:04:7f:87:a4:f1:b7:5c:25:c3:47:62:62:c8:ae:12:e1:e2
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 2a:fe:ba:d1:e2:d9:cc:b6:5f:b8:44:f6:e9:b2:72:94:44:31:a2:56
Fingerprint (sha256): 2d:ef:ff:92:63:f4:bc:62:62:4c:a9:96:73:b6:5d:1c:4f:ad:bd:55:ab:79:7b:7d:cf:3b:48:09:92:47:8a:fd

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate a2.ssl.fastly.net

116

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a2.ssl.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a2.ssl.fastly.net
*.bankrate.com
*.baqend.com
*.becollective.com
*.chairnerd.com
*.embedcdn.com
*.esl-one.com
*.filestack.kidblog.org
*.filestack.secure-platform.com
*.filestack.yello.co
*.foodfanatic.com
*.fp.zeemee.com
*.fs.adviesannonu.nl
*.fs.app.getsynapse.com
*.fs.fromabirdie.com
*.fs.infinidat.com
*.fs.lucette.com
*.fs.trint.com
*.fs.trint.ninja
*.geonet.cloud
*.getambassador.com
*.inspec.io
*.intelextrememasters.com
*.layershift.com
*.mergermarket.com
*.msf.es
*.paneco.com.sg
*.prod.ihrhls.com
*.rc.filepickerapp.com
*.refinery29.com
*.romper.com
*.safaribooksonline.com
*.safaribooksonline.de
*.splashthat.com
*.stage.ihrhls.com
*.studionodes.net
*.tcsrv.com
*.thehollywoodgossip.com
*.tvfanatic.com
*.upload.execonline.com
*.ustudio.com
*.vice.com
*.viceops.net
*.vidangel.com
*.videoamp.com
*.whowhatwear.com
*.wix.com
aircondirect.co.uk
api.xmltime.com
assets.digital.coop.co.uk
assets.imeet.de
bankrate.com
becollective.com
betterbathrooms.com
cdn.transifex.com
cdn.videoamp.com
cdn1.api.esl.tv
chairnerd.com
charitywater.org
dronesdirect.co.uk
embedcdn.com
event.eslgaming.com
filestack.secure-platform.com
filestack.yello.co
foodfanatic.com
fp.zeemee.com
fs.lucette.com
gadventures.de
geonet.cloud
getambassador.com
grubstreet.com
inspec.io
int.audiusa.com
joinin.coop.co.uk
layershift.com
learning.oreilly.com
matchesfashion.com
mergermarket.com
paneco.com.sg
preprod.assets.digital.coop.co.uk
pro.eslgaming.com
proquest.business.safaribooksonline.de
proquest.tech.safaribooksonline.de
proquest.techbus.safaribooksonline.de
rc.filepickerapp.com
redirect.ihrhls.com
romper.com
safaribooksonline.com
sleepingduck.com
studionodes.net
thehollywoodgossip.com
thezoereport.com
tradish.wfm.com
tradish.wholefoods.com
tvfanatic.com
ustudio.com
vice.com
viceops.net
vidangel.com
whowhatwear.com
www.aircondirect.co.uk
www.betterbathrooms.com
www.brimg.net
www.buyitdirect.ie
www.dronesdirect.co.uk
www.fastly.io
www.furniture123.co.uk
www.laptopsdirect.ie
www.massagefinder.com
www.masseurfinder.com
www.ocas.ca
www.ontariocolleges.ca
www.sleepingduck.com
www.timeanddate.de
www.timeanddate.no
www.xcelenergy.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for a2.ssl.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50hn5tuPzs9PQZEISZzm
3j5IOPBLconAYHUre4DoAe17Gm7VflA5Yu2clWGYUZYO8wBBIBGFI6gku3T0Kl45
TltKtHZGO1+/H2FYmoYIOVgmL8zp1q+bwvNdQONG7trdFdPkh6ItdO8FomZbJOIZ
ZR8UvU0Lbm3rJl6hxrFtX4bOtyPkYMSQFzYEA0R5g8Mc2n4oRnVaT+HMD85FgvRb
5/Aipoc+yAENAxQtTlPQW+lTWERMabo4YKgOXf8qribiIM6tgXFWAnrCm8+tOGYa
X42BMMs0YzNlFBEDJw5P2hQvXsarL4+spgfbKe968sIR5VQQOwSoYQ5bCmO67i4k
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36287171458693791235102350840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 18:52:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 20:36:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'a2.ssl.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29196753110591891046004402596395221885422154171677345681156735941525617942941948007636289467603418965195058472416105460589070468331515701089390685882242241392739382524617802393151609368526442433462908469777026065207353617947838627363521647111521225471752731698671566351791246018270944054658906276018249318670192151652216169369054476884958502715745400267829293937074673419819670240865047947256278583375122913974658287675225685007344300977497142389696046530717571277585153621392466875962286389220997661782114430083594052658926360315629647861985026967267601566591785661799883089298362022684638515101090688625563453498603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.ssl.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baqend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chairnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esl-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.kidblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.secure-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.yello.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodfanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.adviesannonu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.app.getsynapse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.fromabirdie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.infinidat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.lucette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.trint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.trint.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geonet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getambassador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspec.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelextrememasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layershift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mergermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paneco.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ihrhls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rc.filepickerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refinery29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safaribooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safaribooksonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.splashthat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.ihrhls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studionodes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehollywoodgossip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvfanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upload.execonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ustudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whowhatwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircondirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.xmltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.digital.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imeet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterbathrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.transifex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.videoamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.api.esl.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chairnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dronesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.eslgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestack.secure-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestack.yello.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodfanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.lucette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadventures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geonet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getambassador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grubstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspec.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.audiusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinin.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layershift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.oreilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchesfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mergermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paneco.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.assets.digital.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.eslgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proquest.business.safaribooksonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proquest.tech.safaribooksonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proquest.techbus.safaribooksonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.filepickerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.ihrhls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safaribooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studionodes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehollywoodgossip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thezoereport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradish.wfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradish.wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvfanatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whowhatwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aircondirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterbathrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyitdirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dronesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furniture123.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laptopsdirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massagefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseurfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ontariocolleges.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeanddate.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeanddate.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xcelenergy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df1555047f87a4f1b75c25c3476262c8ae12e1e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cd46bf3aa0000040300473045022018f956fd452ec0c856d3a53fbbb925e0bceaa28aabbfb1f05da59c8eb10cdb5f022100bec1adfd98826e3b57244f28b818dd87ff264535c022c44b8f9c852b2cc5a2210077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cd46bf3fe0000040300483046022100cf4d9e9bd94fb26627dc3a329d9047ff0011245bd6f033202b7c37dfe6db5cd9022100a8f51c40b35ea9de9d1f16c480abe3825c20223886a7e562ab4539532e0f7d4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00174397260c6e46b8e15a887c2f87c9b1507f2eb75b8fb7f430062c8e0bb6f7fd5a538c0343efd81ec46a5347a95eeaaa615bd695aa2fb51824a39c2eb66eaf2b5b63b282e41de880eee724c30f62ac66e73f361f99d11c9eca3bb9403d67b67c644d391b4551274cfdc1ef2d6e1f06d18696d97d2b12b843b029a6fa5bfdb45eaf792d2011eec44a8d4bfe5dbb6c2a6d5486f232b7a34155c77590e6f624c58b9e870342fbe063ef8fe4c588b05eed6ce2d8b38939480bfdcf3f3f2ebda0509ca70cc8fa21bb5de34a7b465b64039210b8efc91596da2ff7e61a26a49bdadfc7624f8185213669740517d255fdfe132660bb87485bdfa0092f67e48a4ddb8b7a