magentocloud28.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 02:e8:75:5f:60:7a:c5:f8:ac:8c:42:42 was issued on by GlobalSign nv-sa.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e8:75:5f:60:7a:c5:f8:ac:8c:42:42
Serial Number (int): 899995086064553503516017218
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: a1:d3:dc:d4:4d:1c:d4:b2:81:f3:73:40:d7:f2:61:4a:e3:eb:81:aa
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c1:24:ef:29:b0:e0:0f:3b:49:b7:17:03:85:d5:34:35:45:af:8d:69
Fingerprint (sha256): 6f:ef:81:e2:8b:fc:3d:10:e7:10:8e:f8:c5:e4:ac:ca:5a:76:9d:a0:91:bb:3e:be:6b:a2:7c:fc:16:59:4c:fa

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate magentocloud28.map.fastly.net

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magentocloud28.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magentocloud28.map.fastly.net
*.1881napa.com
*.atelierfinefoods.com
*.audiomusica.com
*.bkee.com
*.boissetcollection.com
*.buenavistawinery.com
*.buildnowonline.com
*.bulovawatch.co.uk
*.bulovawatch.ie
*.buuzcom.com
*.cigarauctioneer.com
*.cigarmonster.com
*.couplers.com
*.courreges.com
*.courreges.de
*.courreges.fr
*.courreges.it
*.crafterscompanion.co.uk
*.crafterscompanion.com
*.crafterscompanion.eu
*.deloachvineyards.com
*.directsupply.com
*.directsupplyhome.com
*.dismac.com.bo
*.famous-smoke.com
*.floraandfauna.com.au
*.frenchiewinery.com
*.halfpricebanners.com
*.hautecouturebubbles.com
*.hemsa.com
*.jcbcollection.com
*.kaylighting.com
*.kidkraft.ca
*.kidkraft.co.uk
*.kidkraft.com.au
*.kidkraft.es
*.lipsmacker.com
*.lvewines.com
*.lyracons.tk
*.magidglove.com
*.napaspringsestate.com
*.oakvillegrocery.com
*.raymondvineyards.com
*.roche.com
*.sail.ca
*.sensesbyjcb.com
*.sommiercenter.com
*.sportium.ca
*.surplusrd.com
*.talleycom.com
*.thecarycompany.com
*.vcbizz.com
*.virtueprofessional.com
*.wattlecreek.com
*.wesanco.com
*.zsi-inc.com
1881napa.com
atelierfinefoods.com
audiomusica.com
bkee.com
boissetcollection.com
buenavistawinery.com
buildnowonline.com
bulovawatch.co.uk
bulovawatch.ie
buuzcom.com
cigarauctioneer.com
cigarmonster.com
couplers.com
courreges.com
courreges.de
courreges.fr
courreges.it
crafterscompanion.co.uk
crafterscompanion.com
crafterscompanion.eu
deloachvineyards.com
directsupply.com
directsupplyhome.com
dismac.com.bo
famous-smoke.com
floraandfauna.com.au
frenchiewinery.com
halfpricebanners.com
hautecouturebubbles.com
hemsa.com
jcbcollection.com
kaylighting.com
kidkraft.co.uk
kidkraft.com.au
lipsmacker.com
lvewines.com
lyracons.tk
magidglove.com
napaspringsestate.com
oakvillegrocery.com
raymondvineyards.com
sail.ca
sensesbyjcb.com
sommiercenter.com
sportium.ca
surplusrd.com
talleycom.com
thecarycompany.com
vcbizz.com
virtueprofessional.com
wattlecreek.com
wesanco.com
zsi-inc.com

Other certificates including the domain name magentocloud28.map.fastly.net

(limited to 100 certificates)
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net
magentocloud28.map.fastly.net

Certificate

The complete raw certificate details for magentocloud28.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn+K9CyFtezLqd6vvU5G
P27L69AjxkKK8uASejudPy6JcxFOxGCDn/6qd1P2cIK/fkQPFlMBLTN1Y0szd6Fi
SeifpnTdgzThKlh8RrdG5CDHdNSnLCyOZOpFixePQcXmLPA2Zpnq9d7O23dhIYVB
ifz/6AVkQ7OyXVaJ1B145OVqGXrEuiccAT/rIcVt78hjsguwn1clnptlikUCQlSI
zSlDP6LryyMLgN5Hr3Cv9yo1rNkNtubg/7cQxN3O/bAJm8cRrmrf0QA4bcwGEoqZ
ReUuMdXaMfhPtchtm0rKa6hgJv7DPP4jQ036vHYesu8aQJpJTq63UVvGpHveAMpj
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 899995086064553503516017218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 16:32:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 23:43:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magentocloud28.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21523405537219880444584707803847492496416008546502778401014124060713255203435947641035994487655571418920761675111004385395294174953006750301778898662034373011638971419555639377635526642278961398641325565366709372865614885939459177476593406294648603134669540895374946875528046958412870901403556620895705652503415225356715280571261611286990511952492984680227152388368022886340806054873518570234459356890860026647915802410400053092087727809890401798539008657546038129524251520583255873996595764178243227375038763771133025858789597165666103746854371130844165399963956283041276140555508764086723687278729969234784805348181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentocloud28.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1881napa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelierfinefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audiomusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bkee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boissetcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buenavistawinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildnowonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulovawatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulovawatch.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buuzcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cigarauctioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cigarmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.couplers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courreges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courreges.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courreges.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courreges.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crafterscompanion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crafterscompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crafterscompanion.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deloachvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directsupplyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dismac.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.famous-smoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floraandfauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frenchiewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfpricebanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautecouturebubbles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcbcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaylighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidkraft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidkraft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidkraft.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidkraft.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lipsmacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lvewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyracons.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magidglove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.napaspringsestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oakvillegrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raymondvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensesbyjcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sommiercenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportium.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surplusrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talleycom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecarycompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcbizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtueprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wattlecreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zsi-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1881napa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierfinefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiomusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boissetcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenavistawinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildnowonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulovawatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulovawatch.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buuzcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigarauctioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigarmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couplers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crafterscompanion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crafterscompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crafterscompanion.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deloachvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsupplyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dismac.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famous-smoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floraandfauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenchiewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfpricebanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautecouturebubbles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcbcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaylighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidkraft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidkraft.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipsmacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyracons.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magidglove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napaspringsestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakvillegrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raymondvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensesbyjcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sommiercenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportium.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surplusrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talleycom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecarycompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcbizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtueprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wattlecreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsi-inc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1d3dcd44d1cd4b281f37340d7f2614ae3eb81aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016f0f8e180b000004030048304602210097401f290f04f629dd953324f46485a776e1f7db4d9c4d8846df3e7b1d47fc6a022100e46bdb2cd99ef681f521d82047e1aa5166675ce6212da8273cbbf6d57d95faf1007700c652a0ec48ceb3fcab170992c43a87413309e80065a26252401ba3362a17c5650000016f0f8e18300000040300483046022100824ddf1521e4c89936247149e0ea22ba639f6d7d87adb986cb34545026914891022100b6826e2c6fa8287608dc186b5d736ad070341405fa456eed7c74bd78fa58dbf2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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