prospective.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 37:d9:62:ec:4d:a4:97:f6:77:d5:3a:8c was issued on by GlobalSign nv-sa.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 37:d9:62:ec:4d:a4:97:f6:77:d5:3a:8c
Serial Number (int): 17284479593972039653388532364
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 8d:3d:f8:f4:44:1c:27:2a:0a:7f:8f:1f:b5:dd:d1:49:1b:8f:c2:35
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 8f:44:90:2e:89:b3:13:95:04:8f:e6:95:d4:96:22:16:0e:bf:43:cd
Fingerprint (sha256): 40:17:be:0c:bd:4b:d6:1e:42:3f:be:a9:2b:e1:e4:b8:5f:ce:27:04:6e:cd:dd:2c:ab:99:3f:12:52:7a:42:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate prospective.shared.global.fastly.net

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prospective.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prospective.shared.global.fastly.net
*.adrise.tv
*.aerlingus.com
*.altcdn.perthnow.com.au
*.altcdn.thewest.com.au
*.aovstats.com
*.apttherapy.net
*.assets.pixlee.com
*.demo.fastly-sandbox.ntworkers.com
*.dev.platform.dental
*.drivewealth.io
*.eileenfisher.com
*.eurosport.com
*.eurosportshop.com
*.fastly.hotstar-labs.com
*.fivebelow.com
*.foxnews.com
*.frequency.stream
*.hugoboss.com
*.majorleaguegaming.com
*.monoprice.com
*.nme.com
*.nrl.digital
*.nscreen.iptv.bell.ca
*.ola.org
*.parentingforbrain.com
*.paynearmeeng.com
*.pharma-mall.eu
*.picsart.com
*.pixlee.com
*.resumehelp.com
*.staging.broadwaybeta.com
*.system76.com
*.woodhouseclothing.com
*.zingbot.bz
Uat.uk.virginmoneygiving.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
acc-learn-cdn.adobe.com
acc-learn-stage-cdn.adobe.com
aovstats.zam.com
api.drivewealth.io
cdn2.yandy.com
cdn6.f-cdn.com
docs.mongodb.com
edge.virtuance.com
fast-www.zopa.com
fast.sirevant.com
fastly.jetshop.se
fastly.paypalobjects.com
fastly.tubi-staging.video
foxnews.com
fs.splay.com
hackday.access.worldpay.io
img.runningwarehouse.eu
img.tenniswarehouse-europe.com
ispot.tv
itgua.com
mobile29.gcontent.eu
nscreen.iptv.bell.ca
parentingforbrain.com
pharma-mall.eu
recruiterly.com
sapqas.canadianhotelsupply.com
squareoffs.com
stage.footballamerica.com
staging-na.testyeti.com
staging.bevello.com
staging.chatterbug.com
supporttest.corra.com
team-h-aarpmedicareplans.uhc.com
testgblsite.nio.com
tippingthescales.com
tryblendsmart.io
uk.virginmoneygiving.com
video.live.playshow.io
weseegenius.com
www.breezerbikes.com
www.freelancer.com
www.freelancer.de
www.freelancer.in
www.lifeontheedge.world
www.norwegian.com
www.ola.org
www.olatest.org
www.recruiterly.com
www.runningwarehouse.de
www.runningwarehouse.es
www.runningwarehouse.eu
www.runningwarehouse.fr
www.runningwarehouse.it
www.shop.eurosport.co.uk
www.shop.eurosport.de
www.shop.eurosport.fr
www.squareoffs.com
www.tenniswarehouse-europe.com
www.tippingthescales.com
www.trustedreviews.com
www.weseegenius.com
www2.villeroy-boch.com
www2.villeroy-boch.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for prospective.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E/4ExN0IBAgneYB2MQ6
RZXtI7RH0m9OHXp3W9O4SchlPwCmvt2kKrSYpQl3XAkzYG80ieWWYoFraZJUq3Rx
qA69I5KvFfEXyD/DHOwvb6d5w8N1254qJTrTW6FUAdY1/hD+jBL7jTqAaoZiYQsy
pofKyDFYIMEM8hRJ6DQp43YhGg6+B3wRj6VNUFWQLDKhBt2Lcuwp8sVEBI+fZgqD
F+o+eS1ZRyFPwadPJhhLs/s33g7CPp0FN/fFjK/Y7gIUtUMCiCpT/Gd+sHUWJzJq
Pgq9gzphBXP7c1ZymT7slL1aQG+1vHoq4kz8sjjIh3o4t+GeyLE3m4FNCIol5RXk
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17284479593972039653388532364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 22:32:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 17:58:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'prospective.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29831674175877572130299242064086461729389329219668532618320813390893509462516460809862886844887022740630172855120673400620912440597893493399545862476344360131996267783095838462841472496925310776713508282788828875528459586684019836698439700758937410556372673300192914806783004860147708608987688637212408325943405410154351461990868934110402993007451590923025584690347965736151996988577505091456279443778248606154200342950322003523847629617559059849608117082321097956268695199232564693076140538472658672189633205540554392605729955746760126097549817882516983482753404996173418317269488749589944297600038500484751090377807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospective.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrise.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.perthnow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.thewest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aovstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.fastly-sandbox.ntworkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivewealth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eileenfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.hotstar-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivebelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frequency.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hugoboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majorleaguegaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrl.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nscreen.iptv.bell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentingforbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paynearmeeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharma-mall.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resumehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.broadwaybeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.system76.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodhouseclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zingbot.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Uat.uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-stage-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aovstats.zam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.drivewealth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.yandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn6.f-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.mongodb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.virtuance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast-www.zopa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.sirevant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.jetshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.paypalobjects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.tubi-staging.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.splay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackday.access.worldpay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.runningwarehouse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.tenniswarehouse-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispot.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itgua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile29.gcontent.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscreen.iptv.bell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentingforbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharma-mall.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiterly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapqas.canadianhotelsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squareoffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.footballamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.testyeti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chatterbug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporttest.corra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-h-aarpmedicareplans.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testgblsite.nio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tippingthescales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryblendsmart.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.live.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weseegenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breezerbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeontheedge.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwegian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olatest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruiterly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runningwarehouse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runningwarehouse.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runningwarehouse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runningwarehouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runningwarehouse.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squareoffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenniswarehouse-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tippingthescales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustedreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weseegenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.villeroy-boch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.villeroy-boch.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d3df8f4441c272a0a7f8f1fb5ddd1491b8fc235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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