c3.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 41:b4:4a:e9:13:3b:c9:68:ac:9a:25:f0 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 41:b4:4a:e9:13:3b:c9:68:ac:9a:25:f0
Serial Number (int): 20334486040515087008385345008
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1e:2d:67:7d:95:9f:74:6b:f3:ae:c8:bc:70:55:7b:d1:a7:d5:0f:ec
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 60:5c:f5:d1:5f:e3:d9:03:02:86:e6:98:bf:ff:12:e5:fa:d3:ef:23
Fingerprint (sha256): 2f:e0:c0:b0:15:34:2b:ba:be:94:d4:d2:f1:bb:1d:44:79:53:50:7a:c3:a3:5b:df:fb:db:56:23:32:6a:47:e2

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate c3.shared.global.fastly.net

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c3.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c3.shared.global.fastly.net
*.antonellabella.com
*.befunky.com
*.blz-contentstack.com
*.brandfolder.com
*.coursecloud.net
*.creditflux.com
*.demo.nav.com
*.demo.nav.engineering
*.fastbackgroundcheck.com
*.finishbuild.com
*.firehydrant.io
*.gridshot.net
*.hornblower.com
*.int1.nav.com
*.int1.nav.engineering
*.int3.nav.com
*.int3.nav.engineering
*.kyc6.com
*.nav.com
*.nncms.com
*.p5cdn.com
*.paneco.com
*.policygenius.com
*.prod.nav.engineering
*.rollworks.com
*.smartbackgroundchecks.com
*.smartframe.io
*.staging.vinomofo.com
*.tv2.dk
*.usphonebook.com
*.wahoofitness.com
*.withkoji.com
*.yourmediaservices.com
advancedbackgroundchecks.com
allinclusiveresorts.com
antonellabella.com
app-test-tls-1-2.launchdarkly.com
befunky.com
bg.cdn.ustudio.com
bilarabi.cpf.jo
blog-elb.fast.klaviyo.com
blog.fotolia.com
capi.checkout.broadway.com
capi.staging.boxofficebeta.com
cdn.baseballmonkey.com
cdn.goaliemonkey.com
cdn.hockeymonkey.ca
cdn.hockeymonkey.com
cdn.lacrossemonkey.com
client-registry.mutinycdn.com
creditflux.com
cyberbackgroundchecks.com
dev.alu.jp
dev.runautoparts.com.au
fastbackgroundcheck.com
fdyn.pubwise.io
feeds.newscientistbeta.com
finishbuild.com
hamlet2.podchaser.com
help.getmevo.com
imagegen.podchaser.com
institutions.newscientist.com
institutions.newscientistbeta.com
koji-analytics.com
kyc6.com
loss-consultant.com
md.seamlessaccess.org
md.thiss.io
mevo.com
mktimg.mmgcache.net
molinarangel.com
myrelatives.com
nh.dev.novanthealth.redventures.io
nncms.com
policygenius.com
restorationcontrol.com
runautoparts.com.au
salma.ai
smartbackgroundchecks.com
staging-na.testyeti.com
staging.mevo.dev
static.newscientist.com
ststravel.com
use.thiss.io
user-data.mutinycdn-staging.com
user-data.mutinycdn.com
usphonebook.com
uva.dev.novanthealth.redventures.io
wahoofitness.com
withkoji.com
www.addsearch.com
www.advancedbackgroundchecks.com
www.allinclusiveresorts.com
www.cyberbackgroundchecks.com
www.datacore.com
www.dev.neighbourly.co.nz
www.dev.policygenius.cloud
www.drschaer.com
www.iphonelife.com
www.loss-consultant.com
www.mevo.com
www.molinarangel.com
www.myrelatives.com
www.namesnack.com
www.newscientist.com
www.penwizard.com
www.podchaser.com
www.restorationcontrol.com
www.salma.ai
www.ststravel.com
www.tedldcollection.com
www.x-life.no
yourmediaservices.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for c3.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQa0fUdC5GfvluGaBCyy
bmcr8pZ5xC9aBJUzkN7uHT93O1sWp+NIxmMjTtFzUVcafzQCD5A/nuHpZjV0RM//
EVY0sdsKjNselMk2KdQ7X5HiEQW004b27wKWpKbdujXHYk3LYupQBL82UZ4GWz1J
sdSlEPzIMObOG2OWCLGjr1/SF776Z4JQ+GpPUVIxo1s+33ARmQ0iimIsHvLzZ/r0
0QboknaezOSw0Fun86ltuWRbe3r9EiIj7pt6Al2XVhhre0n65WgoVAGoXnCLAdaB
wnpXTC3LYpEVXCvVI5oM36TgJtQpYQC7dzAxN7LfzgqDOEODvRTHLr/+rGEmOmR2
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20334486040515087008385345008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 11:18:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 16:47:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c3.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20327673476311343438892507518775460451176936002647336550607774471478767749049500371702351013165505538654380397813687410080146203079719244093505405205763230075914945265780663283623190249991137967503155906402036837802000061722940311802953534588025496719583148255205151271734230394257730321871739873212299971013810747442805510617135174328614418033376251573981172898919212232478047871968880118036838810214583288168584532136541784066519458729977176018435790415721517352337126869698088657381404608156880855917804604629707569641366997399279106776870575766450626357545270516763243626267671725170752414940522673655110978270933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c3.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antonellabella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.befunky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blz-contentstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandfolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coursecloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.nav.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastbackgroundcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finishbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firehydrant.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gridshot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hornblower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int1.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int1.nav.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int3.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int3.nav.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyc6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nncms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p5cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policygenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.nav.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartframe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.vinomofo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv2.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wahoofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withkoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourmediaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinclusiveresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonellabella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-test-tls-1-2.launchdarkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'befunky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.cdn.ustudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilarabi.cpf.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-elb.fast.klaviyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.fotolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.checkout.broadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.staging.boxofficebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.baseballmonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.goaliemonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hockeymonkey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hockeymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lacrossemonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client-registry.mutinycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.alu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.runautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbackgroundcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdyn.pubwise.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finishbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlet2.podchaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.getmevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagegen.podchaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutions.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutions.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koji-analytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyc6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loss-consultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.seamlessaccess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.thiss.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktimg.mmgcache.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinarangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrelatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh.dev.novanthealth.redventures.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nncms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policygenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorationcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runautoparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salma.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.testyeti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mevo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'use.thiss.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-data.mutinycdn-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-data.mutinycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uva.dev.novanthealth.redventures.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahoofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withkoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.addsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinclusiveresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyberbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datacore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.policygenius.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drschaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphonelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loss-consultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molinarangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrelatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namesnack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podchaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restorationcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salma.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ststravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedldcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.x-life.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourmediaservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e2d677d959f746bf3aec8bc70557bd1a7d50fec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000171071d6205000004030047304502205ebaff38781c8ebf07c12cd25fa09abbf10abb5468530f68a4bbf7cbd3e3fb710221008874937e258eaf5c02851d1888f0456724e9bf355181f1914208a1413da493e0007500eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f900000171071d6254000004030046304402206cefc68992eff3bac379608352a0a02c2722d873fc33642de66a5b4a41e59ec6022031d7985df28d47eadf5494cbfe1272d739b1e500769357758946ac85fe01cb3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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