platformsh3.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 09:03:7a:ee:2e:dc:e7:db:de:db:c7:c6 was issued on by GlobalSign nv-sa.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 09:03:7a:ee:2e:dc:e7:db:de:db:c7:c6
Serial Number (int): 2789572388263777897780332486
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 3a:99:3a:26:9b:bd:55:d0:c5:76:9a:9e:a2:88:36:70:4b:75:e7:c4
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c0:c6:e8:e9:1f:de:37:cf:03:8e:85:e8:d7:ec:22:ad:35:8c:98:95
Fingerprint (sha256): 32:15:da:f6:a6:c6:42:39:6d:ea:5d:0e:6f:17:aa:7a:d7:b6:60:12:b8:f7:cf:50:aa:2f:fe:f2:42:c4:60:85

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate platformsh3.map.fastly.net

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformsh3.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformsh3.map.fastly.net
*.afrimarket.bj
*.afrimarket.ci
*.afrimarket.cm
*.afrimarket.fr
*.afrimarket.ml
*.afrimarket.sn
*.au.platformsh.site
*.auchan.afrimarket.sn
*.bellewaerde.be
*.bielertagblatt.ch
*.biomerieux-industry.com
*.boattest.com
*.bpce.fr
*.ca-1.platformsh.site
*.carac.fr
*.ccgpay-test.co.uk
*.de-2.platformsh.site
*.drupal.msstate.edu
*.editionsduboisbaudry.com
*.eu-2.platformsh.site
*.eu-3.platformsh.site
*.eu-4.platformsh.site
*.filieres-avicoles.com
*.fr-1.platformsh.site
*.franceminiature.fr
*.freerice.com
*.gecina.fr
*.groupebpce.com
*.groupebpce.fr
*.la-retraite-en-clair.fr
*.lrec-pp.la-retraite-en-clair.fr
*.maybelline.afrimarket.sn
*.mizzou.edu
*.moigneu.com
*.numobile.com.au
*.plm-magazine.com
*.preprod.formations.avocats.fr
*.processalimentaire.com
*.rayon-boissons.com
*.s-afrimarket.com
*.skimium.fr
*.teeps-sph.co
*.ubaldi.pro
*.us-2.platformsh.site
afrimarket.bj
afrimarket.ci
afrimarket.cm
afrimarket.fr
afrimarket.ml
afrimarket.sn
bellewaerde.be
bielertagblatt.ch
biomerieux-industry.com
blog.lrb.co.uk
boattest.com
bpce.fr
carac.fr
ccgpay-test.co.uk
drupal.msstate.edu
editionsduboisbaudry.com
emergency.msstate.edu
epargnonssolidaire.fr
filieres-avicoles.com
franceminiature.fr
freerice-engine.nuvole.org
freerice.com
gecina.fr
groupebpce.com
groupebpce.fr
la-retraite-en-clair.fr
measuresup.missouri.edu
missouri.edu
mizzou.edu
msstate.edu
numobile.com.au
plm-magazine.com
preprod.formations.avocats.fr
processalimentaire.com
prod.missouri.edu
rayon-boissons.com
skimium.fr
staging.api-content.skimium.fr
staging.api-customer.skimium.fr
staging.api-offer.skimium.fr
staging.api-reporting.skimium.fr
staging.api-user.skimium.fr
staging.missouri.edu
staging.skimium.be
staging.skimium.co.uk
staging.skimium.de
staging.skimium.es
staging.skimium.fr
staging.skimium.it
staging.skimium.nl
ubaldi.pro
visitus.missouri.edu
www.emergency.msstate.edu
www.epargnonssolidaire.fr
www.missouri.edu
www.msstate.edu
www.prod.drupal.msstate.edu
www.prod.emergency.msstate.edu
www.prod.missouri.edu
www.prod.msstate.edu
www.staging.drupal.msstate.edu
www.staging.emergency.msstate.edu
www.staging.missouri.edu
www.staging.msstate.edu
www.staging.skimium.fr

Other certificates including the domain name platformsh3.map.fastly.net

(limited to 100 certificates)
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net

Certificate

The complete raw certificate details for platformsh3.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj6qEn4OeLbHsYFVi5F8
Ngk/TZWa95bOJYfk2GEOkbCY9Kl45/TzoWw0Ptr748UEY4w+6ie/OWDzSQ9i8TKc
qH9Ld04rjAgBgAndisihiSA7B9z2jG3z6vbsqiQKeNPmtjQv55LUihPayNJn35Mh
hyaDdNx/PXXJmhKglaB5nv0GtkW+SVekKexQiyO/OvypvZqjriuoXxzjCWWzghio
ZY1lrNARHs/IlTrockACX1o7Tu94j1WQ3947KP8ex63LYWsIEgIK0MiH51FBVyZa
IIUVW2u3PFyAgf21k+hrl4SlyGcxcDBFawGXcC+I99/c5pzSC4d6ssphlAtLOdpN
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2789572388263777897780332486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 16:07:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 14:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platformsh3.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26035991763059527632158950319227112910836414528292316067470450595600462432057981744029227060820110654413607329526891227821909124874632898988180941049658381589928273684997386775948388608192662945942024666739596707195818522319765998497596006634560002880194824357236916918270474828178299706363858941181137287906151677813684941937888380286611861106329632247759228796316637181493257036441923385861635918064772875222255302178167791220200775611875270927704019571302770853167016717629563259828943108149967909006276244797292760579509745751219734340341029634021213424853087650477691702824856745722628177401646270841639115836793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformsh3.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.au.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auchan.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellewaerde.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bielertagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biomerieux-industry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boattest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-1.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccgpay-test.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editionsduboisbaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-3.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-4.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filieres-avicoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr-1.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franceminiature.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freerice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gecina.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupebpce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupebpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrec-pp.la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maybelline.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizzou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moigneu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.numobile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plm-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.formations.avocats.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.processalimentaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayon-boissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-afrimarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teeps-sph.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubaldi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellewaerde.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bielertagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomerieux-industry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lrb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boattest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccgpay-test.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editionsduboisbaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epargnonssolidaire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filieres-avicoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franceminiature.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerice-engine.nuvole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecina.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupebpce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupebpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'measuresup.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mizzou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numobile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plm-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.formations.avocats.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processalimentaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayon-boissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-content.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-customer.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-offer.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-reporting.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-user.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubaldi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitus.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epargnonssolidaire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.skimium.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a993a269bbd55d0c5769a9ea28836704b75e7c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c7722543800000403004730450220034eea24b6137261ba1dcc04cf1d52e24e51a4e2cc1e49dd0c231af2f3649687022100f510232ecba34df6839ebda34ad1312f6a7ab0f7f7e9c869ae3f949f06acfec90075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c772254810000040300463044022043d622cde4da8bfbdb73ff1aa6172f24a8c86926d14beaca55c153e37e985afa02202b46b320cd0171ac7f4b72c6d5dd3e90d8a548a9960c0be2b01fa55e944d80a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00082b2120fa6397abe13850fd534f274935b00d2fa811a1454ee72f21b51543d66985593c9c915f9553346e3846233ec3c747e6ab934945bb53011894caae060138e0461877be4072717eb5d5d1048fc68ada689bf66e521150d4ef0b9d297941fa41e56150cfdf4b062d0ec3dde8a9abe3a458a0a98d034a201f4e2985e34b3b807f0257bb0b33efce5d34349e053ad1db353e1da2e33c36f292f2bcf52d67633dbc8d919ed0b0f601f09ee66da72507165686f10a424bc21ce4e8a9273fdb7fec7ec12f39f91e4e4d715a23605eb7a6707c356a6cc1674840f8c50ebca2b5a07a5b4b42223ca199d9f12aa1831453503ce5d6753ddfa4dcea05ee2711a288c7