m2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 01:f3:83:35:cd:7a:29:1b:6f:34:41:0e was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f3:83:35:cd:7a:29:1b:6f:34:41:0e
Serial Number (int): 603873606480583711048089870
Serial Number lenght: 89 bits, 12 octets

SubjectKeyId: cc:0f:e2:29:89:e7:ff:87:0e:e5:2c:72:34:7a:ba:14:10:a1:9e:b1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e0:7b:ff:51:82:20:bc:e5:da:11:de:72:13:75:c2:c7:8c:7f:9b:04
Fingerprint (sha256): 3b:58:25:91:5b:52:55:0b:8d:e8:30:5f:7e:72:76:07:d2:31:8a:b3:a4:0f:e0:ae:40:d6:9a:c0:84:f4:24:66

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate m2.shared.global.fastly.net

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m2.shared.global.fastly.net
*.api-dev.highstreetapp.com
*.api.highstreetapp.com
*.asia.nikkei.com
*.beatport.com
*.capitalprofile.com
*.commentsold.com
*.dev.rosettastone.com
*.edl.io
*.fabguys.com
*.fabswingers.com
*.radio24syv.dk
*.rhimg.com
*.savingcontent.com
*.scientificamerican.com
*.sitespeed.io
*.spareroom.co.uk
*.st-rentalia.com
*.teamviewer.com
*.thehashtag.news
about.gitlab.com
about.philo.com
app.rayvn.global
appmedia.jp
asia.nikkei.com
assets.gitlab-static.net
beatport.com
blog.spareroom.co.uk
blog.spareroom.com
capitalprofile.com
cdn.mailout.co.nz
cdn.thinglink.me
cheapflights.co.uk
content-us-east-2-fastly-b.www.philo.com
content-us-east-2-kenny-fastly.www.philo.com
content-us-east-2-staging-fastly.www.philo.com
develop.app.rayvn.global
elegia.fr
f.nowjoin.me
f.pinid.com
fabguys.com
fabswingers.com
photoshoto.com
pro.monin.com
radio24syv.dk
rhimg.com
robotic-cook.secretcdn.net
sandbox-widgets.thinglink.com
savingcontent.com
scientificamerican.com
sitespeed.io
slides-plugins.adobestock.com
spareroom.co.uk
st-rentalia.com
staging.amitree.com
staging.app.rayvn.global
staging.asia.dev.nikkei.com
static-us-east-2-fastly-a.www.philo.com
static-us-east-2-kenny-fastly.www.philo.com
static-us-east-2-staging-fastly.www.philo.com
teamviewer.com
thebonvoyage.com
thehashtag.news
widgets.thinglink.com
www.amitree-staging.com
www.amitree.com
www.artcurial.com
www.brandonflowersmusic.com
www.carrieunderwood.fm
www.centrale-canine.fr
www.cheapflights.ca
www.cheapflights.co.id
www.cheapflights.co.nz
www.cheapflights.co.uk
www.cheapflights.co.za
www.cheapflights.com.au
www.cheapflights.com.hk
www.cheapflights.com.my
www.cheapflights.com.ng
www.cheapflights.com.ph
www.cheapflights.com.sg
www.cheapflights.qa
www.elegia.fr
www.janetjackson.com
www.jasonaldean.com
www.johnsonfitness.com
www.mathcounts.org
www.rascalflatts.com
www.speqs.com
www.sun-gazing.com
www.thecatsfoundation.com
www.thelumineersfanclub.com
www.ufcfightclub.com
www.wahealthcarecompare.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for m2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSKC0VRZrVT6OR73SHw
+N5h0J/XYgOUI2LKyhLcgxgqfSsHtWEaHNdQbAeswi3VIpUirShRwEVo58U70fu6
SWyfA0H+DyWM68bq9fhexPiRQ+uhDdQeF1hFwr0si25khp+0JYUf9+M48VETDryP
VrTi1YvsoFTtMs3Ltl0J439ILxA0NQsFlrdBZenkmjQdQKYfi4WYIsDMF8DxJwQA
VXJsAXzmvn8mGLMyCfnmpxYKE7sbCcxxtVuj6EArB4K5JSA3jeL7BcDpUqSQ7ak+
dcIaOexkiDPxMe4AZTPq9d4PA66qaakBSc/lg69r7N39aC9cDwS+1tAgteNKiOSo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 603873606480583711048089870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 10:51:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 15:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22425317299543001678303712998314428527306981953911962443213375453875837247940638443539959742332931661131082278103288098394264435556158262139629888255872572664797502028483556013910385008163654781501303726883941244068554224064491626893282043605221455064237025013157973991315719115059928131552310847865470289510499429541005491879074027343481808098873059049180368600082201916308424681958199637838467514700062415944836685532312340163709737604879695321241314923846098402808287733502519495937969565652811594978263172424516062216469976810656104815815879721897152547761621911804582479023361029840392244408732695646336962570269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2084 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commentsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitespeed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmedia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.gitlab-static.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mailout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thinglink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-fastly-b.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nowjoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.pinid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.monin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotic-cook.secretcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitespeed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides-plugins.adobestock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.amitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.asia.dev.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-fastly-a.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebonvoyage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artcurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonflowersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieunderwood.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrale-canine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janetjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonaldean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsonfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathcounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rascalflatts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelumineersfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufcfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahealthcarecompare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0fe22989e7ff870ee52c72347aba1410a19eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164a7ddabef0000040300473045022100e1a671deaa1f149499cd2fb9828795aaf6e78d030009f7629f774b8e902f75ed022031f8b38ddc79eaa79e2b419a19649cdd6aab516dacb62f19a87845c00470c1f50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164a7ddabd80000040300483046022100c1503d6f33fc387e6fcd9a25cf710381aa755e778dbab9977da4ea8ff945fe4a022100c70cfcc310ae08f779fa2eb0865d228b8a86f1bfc959a0ccad9d7b190e973c57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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