lakana-02.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5b:dd:86:94:50:a4:41:a4:76:31:df:d9 was issued on by GlobalSign nv-sa.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:dd:86:94:50:a4:41:a4:76:31:df:d9
Serial Number (int): 28430944032914903336865619929
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 93:43:ad:ad:e5:37:51:87:d1:c1:7d:74:59:ea:a7:a9:9a:db:3d:5d
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ef:6a:9a:cd:ab:a5:e7:15:a2:6d:45:dd:36:73:b5:55:8c:64:28:dc
Fingerprint (sha256): b5:5c:19:d1:9d:96:17:39:e2:7a:de:9e:1f:53:6a:1c:ba:fd:eb:e9:2a:42:1e:4a:7e:9b:66:22:f1:54:58:a3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate lakana-02.map.fastly.net

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lakana-02.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lakana-02.map.fastly.net
*.1041kqth.com
*.1045thefox.com
*.104star.com
*.1063thegroove.com
*.1067theriver.com
*.10news.com
*.1170kfaq.com
*.3newsnow.com
*.929bobfm.com
*.929thedrive.com
*.931wnox.com
*.abc15.com
*.abc2news.com
*.abcactionnews.com
*.bigcountry995.com
*.cd1059.com
*.channel941.com
*.classiccountry1070.com
*.fox47news.com
*.fox4now.com
*.hot1045.net
*.ironcheftucson.com
*.j105.com
*.kfdi.com
*.kgun9.com
*.khits.com
*.khits.fm
*.kivitv.com
*.kjrh.com
*.kmtv.com
*.ksgf.com
*.kshb.com
*.kticountry.com
*.ktnv.com
*.ktts.com
*.kvoo.com
*.kypost.com
*.mixfm.com
*.nbc26.com
*.news5cleveland.com
*.newschannel5.com
*.newsnet5.com
*.power965.com
*.q100country.com
*.radiolobo1065.com
*.riverinteractive.com
*.scrippsnationalnews.com
*.star1021fm.com
*.t95.com
*.thedenverchannel.com
*.theindychannel.com
*.thelistshow.tv
*.thelisttv.com
*.tmj4.com
*.tntradioempire.com
*.turnto23.com
*.tv20detroit.com
*.varietyrocks.com
*.wcpo.com
*.wkbw.com
*.wmar2news.com
*.wptv.com
*.wsts1.com
*.wsts2.com
*.wtmj.com
*.wxyz.com
*.xrock.com
*.z92.com

Other certificates including the domain name lakana-02.map.fastly.net

(limited to 100 certificates)
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net

Certificate

The complete raw certificate details for lakana-02.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qunmcww9CyaKuw8+XOD
Ka/sb+3fDdP0AfD2DPwsTFsTU956GH/FBhdTexxoX3FOvihZ6EfcC3R1r/y5EbJX
uvWIMUQ9xHUmTAcvqEiV27mbt71L2hz4dGDHNYHv9HhJyR/9rqcPBUY9j/bNC8k+
FVgnvpx/FEXTSFbKGV1j3YqI0Sn8XUYuQdKnUt+ycllYuBTWRQG8bBozDIIzcmD6
7RngCZKs2CvidKGnvQZ5gIVHF5hJp0aBn93wPLfUGh7MNDZ2f0q4l2+QIJp18kMJ
K3FIJ4Z/GRtAd8IMmzfVpAX3cwcmwI+uTmbjpNCp8IpxybpBTMq1oGxKZ5Z5i6Ud
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28430944032914903336865619929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 00:07:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 22:21:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lakana-02.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28409365759455288411555684842265956380556181424042124131633531047934454126453573940190367751324423035077544047902565016855945712184286165190081273901040106165098660339792355421735500764068637460799452753325127122787660252927279864230889028231264058413933924804951440744058077329361237926609174183258626342820435463927340689954564166722197049948618657452338300692793455793444203133064911632404916325923585508355483064738596206685400068014277398612480027510627683303647352997693397472007671732464055332908786146357456585826981156808978731518587023066792496230735569943309039830373291143871438319077897970701511654972909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakana-02.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1041kqth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1045thefox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.104star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1063thegroove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1067theriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1170kfaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3newsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.929bobfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.929thedrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.931wnox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigcountry995.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cd1059.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channel941.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classiccountry1070.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox47news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox4now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hot1045.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironcheftucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.j105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgun9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khits.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kivitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ksgf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kticountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kvoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mixfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbc26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news5cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newschannel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.power965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.q100country.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiolobo1065.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.star1021fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedenverchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theindychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelistshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelisttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmj4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tntradioempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turnto23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv20detroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varietyrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wkbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmar2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsts1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsts2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z92.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9343adade5375187d1c17d7459eaa7a99adb3d5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163dcb7d5ff000004030046304402205aeab082198e462802f776b575e56d28a424373be0656fab61d054b2da94008f022067645caaa8bb0662d3031b37558db17c6fd5d78153552cd5ec011bff7c56feaa0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000163dcb7d5ad00000403004630440220467d860aed8bd8b9fe8e3f7ef8783da1c40a1fed928543f89dc51e509b7af1e7022032da308faf85f3541302f11d833272bb2233b2e430bea209e94ab99e182fc1cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f0039bfb7049abbee5330b6583d817f0952c5caad5cca903f2772d2fdb1fec9f8dd5699040fdf8ff130beb3c09836d9e5795a1120374864963d9e9e558401e029929318e12750ae50f889dd3f7739915e9e883e329953f4deda6259923f2e5c84fa5835f2125c84756b238ff6f40446681a3ed69c6ffac2c261bde3e8c6ca1490e01549c503a6f773a5a7d2fac2da07d2917da92613b85da7aedbe9fa9e2270190f0d280112e81a3a5c629e84d398bb4be927e91e2f458e6ba2287baa0a1719a9109b3d1c189e35494f03722045a763cade0db32ce89ae3bb8682ed7afec5309268f1601da08771b302cc6a6b5666b35353816727b04ea16fd24ec3d3299f35