s2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 32:65:23:87:f4:97:0e:22:4d:31:69:74 was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 32:65:23:87:f4:97:0e:22:4d:31:69:74
Serial Number (int): 15596519789610252578480810356
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 28:d9:7d:d8:a3:12:9d:cb:60:21:75:79:e6:48:24:cb:9b:77:7e:46
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 5c:76:eb:e4:ba:a7:56:71:8a:6c:d8:88:4d:a8:0b:ac:b9:82:55:78
Fingerprint (sha256): 70:9d:b7:02:d2:b3:f9:25:dc:c6:10:54:d7:8b:38:b1:de:2c:32:22:ba:ff:0c:5c:2f:2b:ce:8f:30:aa:a2:5f

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate s2.shared.global.fastly.net

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2.shared.global.fastly.net
*.agilecontent.com
*.beta.theplayerstribune.com
*.blogherads.com
*.bodendev.com
*.bodenstaging.com
*.bodentest.com
*.codeday.org
*.convertmedia.com
*.dev.theplayerstribune.com
*.jungledisk.com
*.kahoot-qa.it
*.kahoot.it
*.lemde.fr
*.lemonde.fr
*.marvelapp.com
*.medalsofamerica.com
*.musement.com
*.ntppool.org
*.openreel.com
*.playerstribune.com
*.psychonautwiki.org
*.sheknowsmedia.com
*.shopvcs.com
*.srnd.org
*.staging.theplayerstribune.com
*.teampassword.com
*.theplayerstribune.com
abonnes.mobile.lemonde.fr
agilecontent.com
api-dev.aruki.cloud
api.cmft.io
api.ntppool.org
api.vhxqa3.com
bongbo.ng
boutik.dev.absolunet.com
cdn.oculosshop.com.br
cdn.tous.com
cdn.vhxqa3.com
cdn.webproof.com
corporate.innogames.com
correlate.one
d2d.market
d8.sjwater.com
datastreamer.io
doc.govt.nz
download.marketcircle.com
ebooks.cisco.com
embed.vhxqa3.com
futurestack.com
futurestack.io
grandwesternsteaks.com
gwscdn.com
innogames.com
keralakart.com
legacy.xrpcharts.ripple.com
lemde.fr
lemonde.fr
live.hitc.com
marvelapp.com
medalsofamerica.com
media.rosehosting.com
mediacat.com
messo-fastly.trychameleon.com
musement.com
photos.sig.ma
playerstribune.com
production-api.globalforestwatch.org
psychonautwiki.org
reservebar.com
robinpowered.com
sheknowsmedia.com
shopvcs.com
sjwater.com
stag.d8.sjwater.com
staging.reservebar.com
staging.sjwater.com
static.bandicam.com
theme.gartner.com
theplayerstribune.com
video.sumtotal.host
video.sumtotallab.host
viewer.webproof.com
wayfairnext.com
www.bandicam.com
www.bongbo.ng
www.buysmartjapan.com
www.cretalive.gr
www.datastreamer.io
www.doc.govt.nz
www.futurestack.com
www.futurestack.io
www.hammarbyfotboll.se
www.hatch-green-chile.com
www.hitc.com
www.innogames.com
www.linuxcloudvps.com
www.ntppool.org
www.percona.com
www.pool.ntp.org
www.reservebar.com
www.rosehosting.com
www.sjwater.com
www.teampassword.com
www.ubergizmo.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for s2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uTF/FgjqH8sK5OAaBrO
7Agk6AmUCrxcfuac960lDQbdg5bPEiM4H0vH+fp7uCWVsJWoGRnCpaaJLaVnzQzC
KPAlhCGiQyt1zobOFcZ5kBGu7CiGmbuhtNo1nc5zSf7xcBtS03DcgprmQk+q5QP/
syIbZF37I10UV1d7KNPeB/zZXBFxBVzR0qUr8aifcvkYv/QnW7szraDIBSvdxw7d
t7S/v2mECfsWV4Yc+7gWKkdhHYWfStJ/xz6mL49y3cVKbB5qlOqlEoqCa1hYWZMY
99EeQ64wKMsZY4r3xMFNEhGi0Zw40OaHh+zFdpnO7+Y4VENoK1pW3A9sgzjbj2QO
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15596519789610252578480810356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 22:06:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 19:15:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 's2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27632762841700303931072585931321763599644994751917176744815149134053147464249060765279398518728384460928569167386162986365194430625410991334343604222028924321199281160694061725208334117705414525968573181745759859555545917814827081762996594298270867549122747951823521067818012732459015074245782346277502112145752888970261106202046064925562623403401916719917218440244407659066907721542141147892650148729140836263866352548383081525732178170746136114051966902996037369660951355694664639280633130596371842239396597633355642377398654431300956168863251452186944364504937904213035049423182505790210090746562163031044077653637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogherads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodendev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodenstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codeday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.convertmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungledisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-qa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychonautwiki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheknowsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teampassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abonnes.mobile.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.aruki.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cmft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongbo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutik.dev.absolunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oculosshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.webproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correlate.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2d.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd8.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastreamer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.marketcircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.cisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurestack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandwesternsteaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwscdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keralakart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.xrpcharts.ripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.hitc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.rosehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messo-fastly.trychameleon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.sig.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-api.globalforestwatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychonautwiki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinpowered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheknowsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.d8.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bandicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.gartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sumtotal.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sumtotallab.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer.webproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayfairnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bongbo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buysmartjapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretalive.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datastreamer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurestack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hammarbyfotboll.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hatch-green-chile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hitc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linuxcloudvps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.percona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pool.ntp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teampassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubergizmo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28d97dd8a3129dcb60217579e64824cb9b777e46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165eeb8713100000403004730450221009e76d6533eb9328d9bcccbb534cb713f9131ed7d36f8398b034b276dfe228d29022031070ffcbf3a855505dbb1ffbfc43896723354a00b4a243274489ca9cc6d1637007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165eeb871c90000040300473045022053cf64863de43944b22c8ce6fdbe684c10a90962413ec53183dac452b6fc3a35022100c4c784b10477f1b261be91fd34cec08b89aef2ce0bd5392f4a0caa3851b94437
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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