standard2.imgix.net

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:44:c8:ad:8e:95:fb:71:8c:02:76:43:0f:85:61:5e was issued on by GlobalSign nv-sa.

With 108 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=standard2.imgix.net

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:44:c8:ad:8e:95:fb:71:8c:02:76:43:0f:85:61:5e
Serial Number (int): 1686374414686318203770690205764641118
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 56:c8:c4:7a:4b:d2:58:76:d8:8b:29:f5:71:f0:31:92:0b:37:64:80
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 01:ed:48:59:ec:0c:e6:65:fa:d9:ce:c4:0f:df:a2:9b:a2:1f:12:a2
Fingerprint (sha256): 5b:8a:21:a0:75:3a:46:ea:d3:40:66:a7:06:03:b7:86:63:59:42:8f:41:c0:15:e7:ff:f9:a0:33:39:f8:11:bf

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate standard2.imgix.net

108

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for standard2.imgix.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

standard2.imgix.net
assets.extract.studio
assets.kbs-services.com
assets.mindtrust.com
assets.prodigyusercontent.com
assets.verdn.com
bilder.autoludwig.at
blog-img.speedcurve.com
cdn.aalborgteater.dk
cdn.amor.de
cdn.btyaly.fr
cdn.commonstock.com
cdn.kirk.studio
cdn.kovocredit.com
cdn.kraeuterland.de
cdn.noelani.de
cdn.operationsmile.se
cdn.seifert-mb.de
cdn.shiplus.co.il
cdn.swapacar.no
cdn2.whiskyworld.de
cmcdn.castlighthealth.com
cms-media.lannebo.se
content.snowmachine.me
image.airkitchen.me
image.hylte-lantman.com
images-production.catchandrelease.com
images.beano.com
images.bigge.com
images.globalgiving.org
images.halt.nl
images.helloclub.com
images.hika.app
images.inspirationspaint.com.au
images.marsblade.com
images.mybrightwheel.com
images.nappy.co
images.pakk.cloud
images.rainbowtours.co.uk
images.shespeaks.com
images.supplyfront.io
images.thewanderful.co
images.timetocop.com
images.unboundsolar.com
images.veiligkopen.nu
images.versoskincare.com
images.victrex.com
images.vraiandoro.com
img.abundanceandhealth.co.uk
img.induux.de
img.innoluxe.com
img.neutrient.com
img.percent.com
img.speedcurve.com
img.tuscanyaccommodation.com
img1.nowpurchase.com
imgix.kitabisa.xyz
imgix.sonarworks.com
kiwi-cdn-staging.tlservers.com
media.aptosfoundation.org
media.duab.se
media.fidget-toys.fr
media.heifer.org
media.mythopedia.com
media.snapkitchen.com
media.ultimate-manga.com
media.wntr.io
products.marsblade.com
products.versoskincare.com
quest-files.snowjoe.com
staging-images.sifted.eu
static-artifacts-assets.skillovilla.com
uploads.getdizzie.com
vehicle-images.instamotor.com
webassets.eurac.edu
wpcdn.unitedwaypbc.org
a.mpcdn.io
a1.vaping360.com
assets.toneitup.com
cdn-img.myswissalps.com
cdn.btyaly.com
cdn.hanfosan.de
cdn.m7g.twitch.tv
cdn.raster.app
cdn.smart-portal.co.uk
cdn1.discovertuscany.com
content.italic.com
images.101cookbooks.com
images.66north.com
images.blacktomato.com
images.carhuna.com
images.forenom.com
images.g2k.co
images.markethype.io
images.nanawall.com
images.royalbathrooms.co.uk
images.sifted.eu
images.stadlerform.com
images.studee.com
img.broadwaybox.com
img.grudado.com.br
img.sportsbookreview.com
media.dealervenom.com
media.maskinklippet.se
media.twistshake.com
products.sandqvist.com
static.starzone.ch
static.the.akdn

Other certificates including the domain name imgix.net

(limited to 100 certificates)
*.imgix.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.a.ssl.fastly.net
imgix.map.fastly.net
dns-vetting1l.map.fastly.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
a.ssl.fastly.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
dns-vetting1l.map.fastly.net
*.a.ssl.fastly.net
*.imgix.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
imgix.map.fastly.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.a.ssl.fastly.net
*.a.ssl.fastly.net
theroyalgeorgetintern.co.uk
*.imgix.net
*.imgix.net
dns-vetting1l.map.fastly.net
dns-vetting1l.map.fastly.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
*.imgix.net
imgix.map.fastly.net
*.a.ssl.fastly.net
*.imgix.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.imgix.net
imgix.map.fastly.net
*.a.ssl.fastly.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
standard2.imgix.net
*.a.ssl.fastly.net
*.imgix.net
*.a.ssl.fastly.net
dns-vetting1l.map.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
theroyalgeorgetintern.co.uk
dns-vetting1l.map.fastly.net
*.imgix.net
*.imgix.net
*.a.ssl.fastly.net
*.imgix.net
a.ssl.fastly.net
*.imgix.net

Certificate

The complete raw certificate details for standard2.imgix.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2R2l1auLetXTejRre4U
PK77dUE5aYTHNcjnQeVonbb6neUGtUozwWt/yn8g5DhilwwmamPNI4IG41rawEhp
fOZM6SLJUH9N+/t9D4JPywzdRvhTvN8wzXgXlEZzEMmiAOh7NGNqcOTXXfaIAjsx
c5GHNUzOhYhDz0+/xXj8eqdoI+udkgfxjFrnb8Qlu+h8GdGqhh4pKXIxwadNTriP
5WCaGnXVdu8a1RvlW7JtngNV+QXlOM3V3ZKssq+s2pVRt1NIZWLLeJoDt2khDP4r
bMvt+pqLNQD9G7Ivpn7ICSKvzLZnCJB5ctX/x9Xq0kDrImKoMY2da/HSA5Ouu1c4
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1686374414686318203770690205764641118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 20:29:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 20:29:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'standard2.imgix.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20626383982828148680021781593061758776761175650858578065785738813087068319626929951572180292561151121951527990706187042671692594847737621525284207200985551442703403777671862496149258457031847897208742653565376441829209473060663291320827035981010200230472671015503314691343123661816773916873405624196251168888511351049756932032174650810176385554395206858699029852238989973359729820384656016889557535949941452524132847107501299571783783772024889351101721324186748922946584564782037933136825436005697587323862212856358767924435803155936447060866490686795957976873014596616609739045374561242144519377112808777054818875567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2385 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standard2.imgix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.extract.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.kbs-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.mindtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.prodigyusercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.verdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilder.autoludwig.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-img.speedcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.aalborgteater.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.amor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.btyaly.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.commonstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kirk.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kovocredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kraeuterland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.noelani.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.operationsmile.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.seifert-mb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shiplus.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.swapacar.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.whiskyworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmcdn.castlighthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-media.lannebo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.snowmachine.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.airkitchen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hylte-lantman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-production.catchandrelease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.beano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.bigge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.globalgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.halt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.helloclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.hika.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.inspirationspaint.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.marsblade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mybrightwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nappy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pakk.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.rainbowtours.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.shespeaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.supplyfront.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.thewanderful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.timetocop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.unboundsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.veiligkopen.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.versoskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.victrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.vraiandoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.abundanceandhealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.induux.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.innoluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.neutrient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.percent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.speedcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.tuscanyaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img1.nowpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgix.kitabisa.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgix.sonarworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwi-cdn-staging.tlservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.aptosfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.duab.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fidget-toys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.heifer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mythopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.snapkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ultimate-manga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.marsblade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.versoskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest-files.snowjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-images.sifted.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-artifacts-assets.skillovilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.getdizzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicle-images.instamotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webassets.eurac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpcdn.unitedwaypbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.mpcdn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.vaping360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.toneitup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-img.myswissalps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.btyaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hanfosan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.m7g.twitch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.raster.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.smart-portal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.discovertuscany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.italic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.101cookbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.66north.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.blacktomato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.carhuna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.forenom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.g2k.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.markethype.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nanawall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.royalbathrooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.sifted.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stadlerform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.studee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.broadwaybox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.grudado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.sportsbookreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dealervenom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.maskinklippet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.twistshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.sandqvist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.starzone.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.the.akdn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56c8c47a4bd25876d88b29f571f031920b376480
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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