j2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 0a:89:2f:ae:06:23:bf:b1:7e:b8:c1:92 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:89:2f:ae:06:23:bf:b1:7e:b8:c1:92
Serial Number (int): 3260698096901226540438176146
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: a8:29:fd:a9:a5:1a:1c:37:0b:20:3b:98:b7:25:39:cc:e5:2f:f4:94
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 32:8b:73:a3:38:7f:9c:81:6d:ae:ab:64:6e:2f:a3:bc:84:a7:c8:b6
Fingerprint (sha256): 3a:12:cb:c6:4a:e2:7d:00:2b:5f:9f:e4:d5:b7:96:3a:3c:39:1d:d3:e8:1e:1f:62:6f:7c:e5:19:b2:0a:22:1b

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate j2.shared.global.fastly.net

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for j2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

j2.shared.global.fastly.net
*.art.fusestudio.net
*.casper.com
*.chakralinux.org
*.community.uaf.edu
*.echl.com
*.emailrenderer.com
*.emailsubscriptionpages.com
*.ezup.com
*.files.coachlogix.com
*.filestack.com
*.filestack.onemob.com
*.fis-ski.com
*.fisski.com
*.fp.brandfolder.com
*.fs.artrepreneur.com
*.fs.enplug.com
*.fs.enplug.in
*.fs.heroine.com
*.fs.heyorca.com
*.fs.learnzillioncdn.com
*.fs.localzillioncdn.com
*.fs.mindflash.com
*.fs.myblueprint.ca
*.fs.opszillioncdn.com
*.fs.pathlms.com
*.fs.pixvana.com
*.fs.qazillioncdn.com
*.fs.storyworth.com
*.fs.testzillioncdn.com
*.fs.topcoder.com
*.haxx.se
*.idatalink.com
*.idatalinkmaestro.com
*.img-taboola.com
*.inapprendering.com
*.julialang.org
*.kindsnacks.com
*.media.contentcal.io
*.news12.com
*.rockefellerfoundation.org
*.staging.ted.com
*.tedcdn.com
*.up.scienceexchange.com
*.uploads.checkr.com
*.uploads.foliohd.com
*.uploads.orlo.app
*.uploads.parentsquare.com
*.vouchercodes.co.uk
*.xalok.com
700club.ca
apis.idatalive.com
app-api.ted.com
casper.com
caspermattressbundle.com
chakralinux.org
digiday.com
digiload.co
drive.carimages.com.au
echl.com
eol-repositories.sensuapp.org
filestack.onemob.com
flashlogic.com
fs.enplug.com
fs.learnzillioncdn.com
fs.localzillioncdn.com
fs.opszillioncdn.com
fs.qazillioncdn.com
fs.testzillioncdn.com
idatalink.com
idatalinkmaestro.com
identity-views.sohohousedigital.com
img.triggermail.io
menu.treez.io
news12.com
omnigon.com
prod.cdn-fsty.philo.com
repositories.sensuapp.org
rl.talis.com
rockefellerfoundation.org
static.plumcache.com
stayingalive.msf.org
uploads.foliohd.com
us-eu.filestackcontent.com
vcl.casper.tools
vouchercodes.co.uk
womenshealth-jp.com
www.agf.dk
www.biointeractive.org
www.canstar.co.nz
www.canstarblue.co.nz
www.canstarblue.com.au
www.championshockeyleague.net
www.exterro.com
www.ezup.de
www.ezup.eu
www.ezup.nl
www.flashlogic.com
www.frankbody.com
www.goldcup.org
www.odense-marcipan.dk
www.oneclickdrive.com
www.pfaw.org
www.ted.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for j2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKiSu8mQteFdMm0n+Mx
0UB3yUtN/sh18zJ2rfkIIp76L/7sbMT1H3DJjwdIMa11GPwGWk/d/QU5byL5rWIa
nqYWSHWPuAcYJRqHMLA8b+CdkGMqFh8NEPwGfupR4rBtQkwsWfRrmT6CHQgEL6Bj
PKoO4V1nLbP0FdYWTqqRRWvFpu2Dr/HXQl6byDkMBnZ6uD4WcPXrizNaqQPteQ6t
u8T42pNTKsTJGtHDRNfG0MasE+O1czrfVBX7tGs2ORi1YRLwN6uBXwzn38HFXpln
hf+t1oIJHyflMlIY7DUvbMnmh84w9toEP6WKDK5bsOwpm+6PUh7iVhlFgDwCV1xS
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3260698096901226540438176146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 18:36:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 17:48:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'j2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24546759273903564148208007142261293013500665161244434226085728285476768021861968352143972046956193996499275437169973406799675830877243401582422718600368815826616934327713002456044971778328831939228360236537312428384854276955376407989707747442575912887737613385817823017093676665340453504329539808656969828664837444541188006099058298265543004835070423343137972951982543676256708152612489147628275595125720954358420369476872774035226942011381752250012159342951111001601543714261844094596744458172983225875743446115533021107882447331704391032061858598670850898430789526474838933600202421112137928175120721296098636616409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art.fusestudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chakralinux.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.community.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailrenderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailsubscriptionpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.coachlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.onemob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fis-ski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.brandfolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.artrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.enplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.enplug.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.heroine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.heyorca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.learnzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.localzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.mindflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.myblueprint.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.opszillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pathlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pixvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.qazillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.storyworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.testzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.topcoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haxx.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idatalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idatalinkmaestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.img-taboola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inapprendering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julialang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.contentcal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockefellerfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.up.scienceexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.checkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.foliohd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.orlo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.parentsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vouchercodes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '700club.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.idatalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-api.ted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caspermattressbundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chakralinux.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiload.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.carimages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eol-repositories.sensuapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestack.onemob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.enplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.learnzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.localzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.opszillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.qazillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.testzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idatalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idatalinkmaestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-views.sohohousedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.triggermail.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.treez.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnigon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cdn-fsty.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repositories.sensuapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rl.talis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockefellerfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.plumcache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayingalive.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.foliohd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-eu.filestackcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcl.casper.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchercodes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealth-jp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biointeractive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstar.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstarblue.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstarblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshockeyleague.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exterro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odense-marcipan.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneclickdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ted.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a829fda9a51a1c370b203b98b72539cce52ff494
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000172e79dfa23000004030048304602210083c8c300e71f81b8bf7817807e2c1284aaa9962798b9149db9eca937b3748201022100b6c3c112f6a80ecfee3580c21dafde15272e0809a37eb75f7c30291ec3f2fd80007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172e79dfcdb000004030047304502210093f013fef97b6b82a0e6a848270f968806c6a2b6c7746612d9fd1cbf917568260220655cd51b3706aa85a0c73d72e94f25fdf6fafdad172fe98bd021230b220cfdf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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