s2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 42:b1:60:0c:84:18:fb:17:e5:32:14:2b was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:b1:60:0c:84:18:fb:17:e5:32:14:2b
Serial Number (int): 20640444096342482162709304363
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 28:d9:7d:d8:a3:12:9d:cb:60:21:75:79:e6:48:24:cb:9b:77:7e:46
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 80:77:d3:e6:3f:15:89:b1:90:7e:e6:56:14:d1:f9:6b:c8:a0:28:fa
Fingerprint (sha256): 99:d4:6e:d7:aa:16:88:17:ba:a0:f2:ba:b1:b9:7b:ad:ce:78:c8:6d:52:c5:70:a3:bc:af:7b:ba:57:b9:79:90

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate s2.shared.global.fastly.net

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2.shared.global.fastly.net
*.agilecontent.com
*.beta.theplayerstribune.com
*.bodendev.com
*.bodenstaging.com
*.bodentest.com
*.convertmedia.com
*.dev.theplayerstribune.com
*.jungledisk.com
*.kahoot.it
*.lemde.fr
*.lemonde.fr
*.marvelapp.com
*.medalsofamerica.com
*.musement.com
*.ntppool.org
*.openreel.com
*.playerstribune.com
*.psychonautwiki.org
*.sheknowsmedia.com
*.shopvcs.com
*.srnd.org
*.staging.theplayerstribune.com
*.teampassword.com
*.theplayerstribune.com
abonnes.mobile.lemonde.fr
agilecontent.com
api-dev.aruki.cloud
api.cmft.io
api.ntppool.org
api.vhxqa3.com
bongbo.ng
boutik.dev.absolunet.com
cdn.oculosshop.com.br
cdn.tous.com
cdn.vhxqa3.com
cdn.webproof.com
content.gartner.com
corporate.innogames.com
correlate.one
d2d.market
d8.sjwater.com
datastreamer.io
doc.govt.nz
download.marketcircle.com
ebooks.cisco.com
embed.vhxqa3.com
fapi.vttp.co
futurestack.com
futurestack.io
grandwesternsteaks.com
gwscdn.com
help.ticketmaster.com
innogames.com
keralakart.com
legacy.xrpcharts.ripple.com
lemde.fr
lemonde.fr
live.hitc.com
marvelapp.com
medalsofamerica.com
media.rosehosting.com
mediacat.com
messo-fastly.trychameleon.com
musement.com
photos.sig.ma
playerstribune.com
production-api.globalforestwatch.org
psychonautwiki.org
reservebar.com
robinpowered.com
sheknowsmedia.com
sjwater.com
stag.d8.sjwater.com
staging.reservebar.com
staging.sjwater.com
static.bandicam.com
theplayerstribune.com
tiffanycojewelry.win
video.sumtotal.host
video.sumtotallab.host
viewer.webproof.com
wayfairnext.com
www.bandicam.com
www.bongbo.ng
www.buysmartjapan.com
www.cretalive.gr
www.datastreamer.io
www.doc.govt.nz
www.futurestack.com
www.futurestack.io
www.hammarbyfotboll.se
www.hatch-green-chile.com
www.hitc.com
www.innogames.com
www.linuxcloudvps.com
www.ntppool.org
www.percona.com
www.pool.ntp.org
www.reservebar.com
www.rosehosting.com
www.sjwater.com
www.teampassword.com
www.ubergizmo.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for s2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uTF/FgjqH8sK5OAaBrO
7Agk6AmUCrxcfuac960lDQbdg5bPEiM4H0vH+fp7uCWVsJWoGRnCpaaJLaVnzQzC
KPAlhCGiQyt1zobOFcZ5kBGu7CiGmbuhtNo1nc5zSf7xcBtS03DcgprmQk+q5QP/
syIbZF37I10UV1d7KNPeB/zZXBFxBVzR0qUr8aifcvkYv/QnW7szraDIBSvdxw7d
t7S/v2mECfsWV4Yc+7gWKkdhHYWfStJ/xz6mL49y3cVKbB5qlOqlEoqCa1hYWZMY
99EeQ64wKMsZY4r3xMFNEhGi0Zw40OaHh+zFdpnO7+Y4VENoK1pW3A9sgzjbj2QO
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20640444096342482162709304363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 10:34:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 19:15:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 's2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27632762841700303931072585931321763599644994751917176744815149134053147464249060765279398518728384460928569167386162986365194430625410991334343604222028924321199281160694061725208334117705414525968573181745759859555545917814827081762996594298270867549122747951823521067818012732459015074245782346277502112145752888970261106202046064925562623403401916719917218440244407659066907721542141147892650148729140836263866352548383081525732178170746136114051966902996037369660951355694664639280633130596371842239396597633355642377398654431300956168863251452186944364504937904213035049423182505790210090746562163031044077653637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2007 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodendev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodenstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.convertmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungledisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychonautwiki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheknowsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teampassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abonnes.mobile.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.aruki.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cmft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongbo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutik.dev.absolunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oculosshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.webproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.gartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correlate.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2d.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd8.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastreamer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.marketcircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.cisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.vhxqa3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fapi.vttp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurestack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandwesternsteaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwscdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keralakart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.xrpcharts.ripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.hitc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medalsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.rosehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messo-fastly.trychameleon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.sig.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-api.globalforestwatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychonautwiki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinpowered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheknowsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.d8.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bandicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplayerstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffanycojewelry.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sumtotal.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sumtotallab.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer.webproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayfairnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bongbo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buysmartjapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretalive.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datastreamer.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurestack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hammarbyfotboll.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hatch-green-chile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hitc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linuxcloudvps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntppool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.percona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pool.ntp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teampassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubergizmo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28d97dd8a3129dcb60217579e64824cb9b777e46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016538002ea40000040300483046022100cd97a3db7694ae503d31040d9b3183001032041c911ffffaad5ef93c896b8f55022100b0e776fa7df11dd707c86242ce8cfb50aefeb9900c04101135f060759349a56c0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016538002e8700000403004630440220200ae9a98e29033c0e5a940eb44eb670c7844738f4cb5e4426732cd0f1c69bed022038d364f8eb4ac39693e0ebe704956f3f3ed4244e6603163733ca84d69bfa682f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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