m2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 22:ea:cb:fe:3b:0a:c2:0e:78:79:ed:da was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:ea:cb:fe:3b:0a:c2:0e:78:79:ed:da
Serial Number (int): 10806342305838998989139733978
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: cc:0f:e2:29:89:e7:ff:87:0e:e5:2c:72:34:7a:ba:14:10:a1:9e:b1
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ac:0f:36:3c:50:d4:b6:8c:99:ac:7a:f5:84:d5:85:96:77:3a:46:1d
Fingerprint (sha256): 45:80:5f:9d:10:9c:f8:e7:41:e2:bc:b3:28:02:b1:49:6c:41:c9:9c:50:8c:ef:08:eb:c4:fc:4d:dd:d0:9a:50

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate m2.shared.global.fastly.net

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m2.shared.global.fastly.net
*.24syv.dk
*.acurisriskintelligence.com
*.amitree-staging.com
*.api-dev.highstreetapp.com
*.api.highstreetapp.com
*.asia.nikkei.com
*.beatport.com
*.capitalprofile.com
*.commentsold.com
*.dealreporter.com
*.dev.rosettastone.com
*.dr-ubie.com
*.edl.io
*.fabguys.com
*.fabswingers.com
*.inframationgroup.com
*.radio24syv.dk
*.rhimg.com
*.savingcontent.com
*.scientificamerican.com
*.spareroom.co.uk
*.st-rentalia.com
*.teamviewer.com
*.thehashtag.news
*.ubie.app
24syv.dk
about.gitlab.com
about.philo.com
activistmonitor.com
acurisriskintelligence.com
app.maker.co
app.rayvn.global
appmedia.jp
asia.nikkei.com
assets.gitlab-static.net
beatport.com
blog.spareroom.co.uk
blog.spareroom.com
capitalprofile.com
cdn.mailout.co.nz
cdn.thinglink.me
cheapflights.co.uk
content-us-east-2-fastly-b.www.philo.com
content-us-east-2-kenny-fastly.www.philo.com
content-us-east-2-staging-fastly.www.philo.com
dealreporter.com
develop.app.rayvn.global
elegia.fr
f.nowjoin.me
f.pinid.com
fabguys.com
fabswingers.com
inframationgroup.com
nailnation.davidnail.com
photoshoto.com
pro.monin.com
radio24syv.dk
rhimg.com
robotic-cook.secretcdn.net
sandbox-widgets.thinglink.com
savingcontent.com
scientificamerican.com
slides-plugins.adobestock.com
spareroom.co.uk
st-rentalia.com
staging.app.rayvn.global
staging.asia.dev.nikkei.com
static-us-east-2-fastly-a.www.philo.com
static-us-east-2-kenny-fastly.www.philo.com
static-us-east-2-staging-fastly.www.philo.com
sun-gazing.com
teamviewer.com
thehashtag.news
widgets.thinglink.com
www.amitree-staging.com
www.amitree.com
www.artcurial.com
www.brandonflowersmusic.com
www.carrieunderwood.fm
www.centrale-canine.fr
www.cheapflights.ca
www.cheapflights.co.id
www.cheapflights.co.nz
www.cheapflights.co.uk
www.cheapflights.co.za
www.cheapflights.com.au
www.cheapflights.com.hk
www.cheapflights.com.my
www.cheapflights.com.ng
www.cheapflights.com.ph
www.cheapflights.com.sg
www.cheapflights.qa
www.elegia.fr
www.janetjackson.com
www.jasonaldean.com
www.mathcounts.org
www.rascalflatts.com
www.rootedbeauty.com
www.speqs.com
www.sun-gazing.com
www.thecatsfoundation.com
www.thelumineersfanclub.com
www.ufcfightclub.com
www.wahealthcarecompare.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for m2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSKC0VRZrVT6OR73SHw
+N5h0J/XYgOUI2LKyhLcgxgqfSsHtWEaHNdQbAeswi3VIpUirShRwEVo58U70fu6
SWyfA0H+DyWM68bq9fhexPiRQ+uhDdQeF1hFwr0si25khp+0JYUf9+M48VETDryP
VrTi1YvsoFTtMs3Ltl0J439ILxA0NQsFlrdBZenkmjQdQKYfi4WYIsDMF8DxJwQA
VXJsAXzmvn8mGLMyCfnmpxYKE7sbCcxxtVuj6EArB4K5JSA3jeL7BcDpUqSQ7ak+
dcIaOexkiDPxMe4AZTPq9d4PA66qaakBSc/lg69r7N39aC9cDwS+1tAgteNKiOSo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10806342305838998989139733978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 19:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 15:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22425317299543001678303712998314428527306981953911962443213375453875837247940638443539959742332931661131082278103288098394264435556158262139629888255872572664797502028483556013910385008163654781501303726883941244068554224064491626893282043605221455064237025013157973991315719115059928131552310847865470289510499429541005491879074027343481808098873059049180368600082201916308424681958199637838467514700062415944836685532312340163709737604879695321241314923846098402808287733502519495937969565652811594978263172424516062216469976810656104815815879721897152547761621911804582479023361029840392244408732695646336962570269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.highstreetapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commentsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr-ubie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.gitlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activistmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurisriskintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.maker.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmedia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.gitlab-static.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.spareroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mailout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thinglink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-fastly-b.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nowjoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.pinid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailnation.davidnail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.monin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio24syv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotic-cook.secretcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scientificamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides-plugins.adobestock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spareroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-rentalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.rayvn.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.asia.dev.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-fastly-a.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-kenny-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-staging-fastly.www.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehashtag.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.thinglink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artcurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonflowersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieunderwood.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrale-canine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflights.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elegia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janetjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonaldean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathcounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rascalflatts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rootedbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-gazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelumineersfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufcfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahealthcarecompare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0fe22989e7ff870ee52c72347aba1410a19eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b1735f7ba952eb8de8ff6cf0a2e5cf04f953d859963e7838c3d359b013a051b05f3ca277a27b7af34e0b9bdc6f8a180557525943b701d64fef64b6b21882dfda26f804747972ec2c972ee01ce783528e817b568d1f19325a34dd1118eba626dda17338b06c28f0728df3efa66bc0bbe0873e5b22f8eb247aa90b6d96839376593536fe5d5314dafe5c8ead31b0785d40d15b2f941f279cb834a233ce9f89cc981b2db88cb9228ed2bad6d81398684494f185e76502dc3aec5d083f068774b6b230d8af3206329b61bb0ec7f4055c2e2a6a3115cc253e9c801085a9efa915e52c6e101c8e1027458711bb56417fba3c8115128a5c0f21a8f9167d0aad3229276