*.d.ssl.fastly.net
- Fastly, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 03:f0:32:03:45:18:e0:a4:45:b6:15:58:16:dc:78:8c was issued on by DigiCert Inc.
With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f0:32:03:45:18:e0:a4:45:b6:15:58:16:dc:78:8cSerial Number (int): 5234849612952317113597928076610402444
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 97:54:c6:c6:ea:bd:eb:84:67:32:e6:98:8d:04:95:6f:d3:a3:99:56
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 72:ba:8d:60:97:78:dc:5e:38:3f:ae:e9:88:6d:c7:bb:7c:58:d6:88
Fingerprint (sha256): 04:a1:12:d7:9e:c1:09:50:f3:98:7a:0d:2a:2d:0d:c6:1a:cc:65:ad:b8:43:b5:58:ca:ba:0a:1a:66:2a:6b:ae
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl
Check the revocation status for certificate *.d.ssl.fastly.net
97
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.d.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.d.ssl.fastly.net
*.1stdibs.us.com
*.hoopla.no
*.hoopladev.no
*.hoteltonight.com
*.hoteltonight-test.com
*.imagefly.io
cdn.shapeup.com
*.ak.yelpcdn.com
ugc-embed.yelpcdn.com
embed.yelpcdn.com
*.stage.yelpcdn.com
secure.common.csnimages.com
*.perftest.hoteltonight-test.com
www.fxcmapps.com
*.cpxinteractive.com
*.brealtime.com
js.doublerads.com
js.bunchofads.com
js.bigfineads.com
js.adxplosions.com
www.geokode.com
*.crowdsurge.com
img2.jpcycles.com
www.herokucdn.com
www.cheapcheapmovingboxes.com
*.fxcm.com
*.fxcm.co.uk
*.fxcorporate.com
*.dailyfx.com
*.planet.com
fast.eager.io
*.newrelic.com
*.nncms.com
www.onedirectionfragrance.com
vjs.zencdn.net
c.imallcdn.net
polyfill.webservices.ft.com
cdn.polyfill.io
static.geonet.org.nz
qa.safaribooksonline.com
membership.theguardian.com
j.ophan.co.uk
i.guim.co.uk
api.nextgen.guardianapps.co.uk
www.theguardian.com
f.wishabi.net
images.wishabi.net
*.blendtec.com
*.torquato-cdn.net
i.ophan.co.uk
edge.birchbox.com
f1.tacdn.com
www.rosehosting.com
*.scribdassets.com
*.urbandictionary.com
cdn.4uc.org
www.oswego.edu
app.launchdarkly.com
*.theconversation.com
*.01click.net
*.guardianapis.com
*.wikia-services.com
flightdecks.virgin-atlantic.com
*.saymedia-content.com
*.evbuc.com
*.fluentd.org
*.busbud.com
*.skill-capped.com
*.goote.ch
www.brightsettings.com
*.u.fastly-analytics.com
*.pops.fastly-analytics.com
*.fastly-analytics.com
cdn.auth0.com
www.nhcqualify.com
www.bcqualify.com
*.crate.io
*.realself.com
*.livestream.com
livestream.com
api.zova.com
www.viator.com
streamcdn.universalclass.com
*.goodhousekeeping.co.uk
www.mainstreet.com
modelviewculture.com
*.modelviewculture.com
*.thestreet.com
stag2.vogue.com
*.tiqcdn.com
vogue.com
*.vogue.com
embed.theguardian.com
*.banana-splash.com
newrelic.com
*.rand.fastly-analytics.com
*.1stdibs.us.com
*.hoopla.no
*.hoopladev.no
*.hoteltonight.com
*.hoteltonight-test.com
*.imagefly.io
cdn.shapeup.com
*.ak.yelpcdn.com
ugc-embed.yelpcdn.com
embed.yelpcdn.com
*.stage.yelpcdn.com
secure.common.csnimages.com
*.perftest.hoteltonight-test.com
www.fxcmapps.com
*.cpxinteractive.com
*.brealtime.com
js.doublerads.com
js.bunchofads.com
js.bigfineads.com
js.adxplosions.com
www.geokode.com
*.crowdsurge.com
img2.jpcycles.com
www.herokucdn.com
www.cheapcheapmovingboxes.com
*.fxcm.com
*.fxcm.co.uk
*.fxcorporate.com
*.dailyfx.com
*.planet.com
fast.eager.io
*.newrelic.com
*.nncms.com
www.onedirectionfragrance.com
vjs.zencdn.net
c.imallcdn.net
polyfill.webservices.ft.com
cdn.polyfill.io
static.geonet.org.nz
qa.safaribooksonline.com
membership.theguardian.com
j.ophan.co.uk
i.guim.co.uk
api.nextgen.guardianapps.co.uk
www.theguardian.com
f.wishabi.net
images.wishabi.net
*.blendtec.com
*.torquato-cdn.net
i.ophan.co.uk
edge.birchbox.com
f1.tacdn.com
www.rosehosting.com
*.scribdassets.com
*.urbandictionary.com
cdn.4uc.org
www.oswego.edu
app.launchdarkly.com
*.theconversation.com
*.01click.net
*.guardianapis.com
*.wikia-services.com
flightdecks.virgin-atlantic.com
*.saymedia-content.com
*.evbuc.com
*.fluentd.org
*.busbud.com
*.skill-capped.com
*.goote.ch
www.brightsettings.com
*.u.fastly-analytics.com
*.pops.fastly-analytics.com
*.fastly-analytics.com
cdn.auth0.com
www.nhcqualify.com
www.bcqualify.com
*.crate.io
*.realself.com
*.livestream.com
livestream.com
api.zova.com
www.viator.com
streamcdn.universalclass.com
*.goodhousekeeping.co.uk
www.mainstreet.com
modelviewculture.com
*.modelviewculture.com
*.thestreet.com
stag2.vogue.com
*.tiqcdn.com
vogue.com
*.vogue.com
embed.theguardian.com
*.banana-splash.com
newrelic.com
*.rand.fastly-analytics.com
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
Certificate
The complete raw certificate details for *.d.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMmzCCC4OgAwIBAgIQA/AyA0UY4KRFthVYFtx4jDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA2MTgwMDAwMDBaFw0xNTA2MjIxMjAwMDBa MG4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1T YW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxGYXN0bHksIEluYy4xGzAZBgNVBAMMEiou ZC5zc2wuZmFzdGx5Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALPhBaRcsdRoYOQJbyRCtrwGIs8eVlcQblEUwshZsloAkGHjHX7gmkAPt3EADm+m lhoDO6HZ/a9ak0sxtFjr2N+sT/YK8M/uDpPH25vSQCUIKncuTd54FcALeK1LDo0s EFEDfEb0eahdusRAJnM5sOfY6ao4/8hKTStgquP0yrsbODFhVOYN4/lxw6MUq67q BTQCapeeCNVwuoLUyP+PartjWrGgOMzfSLRpv3DcinnE/GEx/tSIFINXW4qZPUIA e5Ta9ECIsUxT3F+iqt6h/d/uM+uFsHQJ4h8LM0AKC4KarnxRuDgDSsXQ3uQXZD7y uG5E5kaznobJ9kJuccjT7BECAwEAAaOCCTEwggktMB8GA1UdIwQYMBaAFFFo/5Cv Agd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBSXVMbG6r3rhGcy5piNBJVv06OZVjCC B2sGA1UdEQSCB2IwggdeghIqLmQuc3NsLmZhc3RseS5uZXSCECouMXN0ZGlicy51 cy5jb22CCyouaG9vcGxhLm5vgg4qLmhvb3BsYWRldi5ub4ISKi5ob3RlbHRvbmln aHQuY29tghcqLmhvdGVsdG9uaWdodC10ZXN0LmNvbYINKi5pbWFnZWZseS5pb4IP Y2RuLnNoYXBldXAuY29tghAqLmFrLnllbHBjZG4uY29tghV1Z2MtZW1iZWQueWVs cGNkbi5jb22CEWVtYmVkLnllbHBjZG4uY29tghMqLnN0YWdlLnllbHBjZG4uY29t ghtzZWN1cmUuY29tbW9uLmNzbmltYWdlcy5jb22CICoucGVyZnRlc3QuaG90ZWx0 b25pZ2h0LXRlc3QuY29tghB3d3cuZnhjbWFwcHMuY29tghQqLmNweGludGVyYWN0 aXZlLmNvbYIPKi5icmVhbHRpbWUuY29tghFqcy5kb3VibGVyYWRzLmNvbYIRanMu YnVuY2hvZmFkcy5jb22CEWpzLmJpZ2ZpbmVhZHMuY29tghJqcy5hZHhwbG9zaW9u cy5jb22CD3d3dy5nZW9rb2RlLmNvbYIQKi5jcm93ZHN1cmdlLmNvbYIRaW1nMi5q cGN5Y2xlcy5jb22CEXd3dy5oZXJva3VjZG4uY29tgh13d3cuY2hlYXBjaGVhcG1v dmluZ2JveGVzLmNvbYIKKi5meGNtLmNvbYIMKi5meGNtLmNvLnVrghEqLmZ4Y29y cG9yYXRlLmNvbYINKi5kYWlseWZ4LmNvbYIMKi5wbGFuZXQuY29tgg1mYXN0LmVh Z2VyLmlvgg4qLm5ld3JlbGljLmNvbYILKi5ubmNtcy5jb22CHXd3dy5vbmVkaXJl Y3Rpb25mcmFncmFuY2UuY29tgg52anMuemVuY2RuLm5ldIIOYy5pbWFsbGNkbi5u ZXSCG3BvbHlmaWxsLndlYnNlcnZpY2VzLmZ0LmNvbYIPY2RuLnBvbHlmaWxsLmlv ghRzdGF0aWMuZ2VvbmV0Lm9yZy5ueoIYcWEuc2FmYXJpYm9va3NvbmxpbmUuY29t ghptZW1iZXJzaGlwLnRoZWd1YXJkaWFuLmNvbYINai5vcGhhbi5jby51a4IMaS5n dWltLmNvLnVrgh5hcGkubmV4dGdlbi5ndWFyZGlhbmFwcHMuY28udWuCE3d3dy50 aGVndWFyZGlhbi5jb22CDWYud2lzaGFiaS5uZXSCEmltYWdlcy53aXNoYWJpLm5l dIIOKi5ibGVuZHRlYy5jb22CEioudG9ycXVhdG8tY2RuLm5ldIINaS5vcGhhbi5j by51a4IRZWRnZS5iaXJjaGJveC5jb22CDGYxLnRhY2RuLmNvbYITd3d3LnJvc2Vo b3N0aW5nLmNvbYISKi5zY3JpYmRhc3NldHMuY29tghUqLnVyYmFuZGljdGlvbmFy eS5jb22CC2Nkbi40dWMub3Jngg53d3cub3N3ZWdvLmVkdYIUYXBwLmxhdW5jaGRh cmtseS5jb22CFSoudGhlY29udmVyc2F0aW9uLmNvbYINKi4wMWNsaWNrLm5ldIIS Ki5ndWFyZGlhbmFwaXMuY29tghQqLndpa2lhLXNlcnZpY2VzLmNvbYIfZmxpZ2h0 ZGVja3MudmlyZ2luLWF0bGFudGljLmNvbYIWKi5zYXltZWRpYS1jb250ZW50LmNv bYILKi5ldmJ1Yy5jb22CDSouZmx1ZW50ZC5vcmeCDCouYnVzYnVkLmNvbYISKi5z a2lsbC1jYXBwZWQuY29tggoqLmdvb3RlLmNoghZ3d3cuYnJpZ2h0c2V0dGluZ3Mu Y29tghgqLnUuZmFzdGx5LWFuYWx5dGljcy5jb22CGyoucG9wcy5mYXN0bHktYW5h bHl0aWNzLmNvbYIWKi5mYXN0bHktYW5hbHl0aWNzLmNvbYINY2RuLmF1dGgwLmNv bYISd3d3Lm5oY3F1YWxpZnkuY29tghF3d3cuYmNxdWFsaWZ5LmNvbYIKKi5jcmF0 ZS5pb4IOKi5yZWFsc2VsZi5jb22CECoubGl2ZXN0cmVhbS5jb22CDmxpdmVzdHJl YW0uY29tggxhcGkuem92YS5jb22CDnd3dy52aWF0b3IuY29tghxzdHJlYW1jZG4u dW5pdmVyc2FsY2xhc3MuY29tghgqLmdvb2Rob3VzZWtlZXBpbmcuY28udWuCEnd3 dy5tYWluc3RyZWV0LmNvbYIUbW9kZWx2aWV3Y3VsdHVyZS5jb22CFioubW9kZWx2 aWV3Y3VsdHVyZS5jb22CDyoudGhlc3RyZWV0LmNvbYIPc3RhZzIudm9ndWUuY29t ggwqLnRpcWNkbi5jb22CCXZvZ3VlLmNvbYILKi52b2d1ZS5jb22CFWVtYmVkLnRo ZWd1YXJkaWFuLmNvbYITKi5iYW5hbmEtc3BsYXNoLmNvbYIMbmV3cmVsaWMuY29t ghsqLnJhbmQuZmFzdGx5LWFuYWx5dGljcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5o dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzMuY3JsMDSg MqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzMu Y3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5j ZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAW vy07kCgzLjWiUKBSTlHJ3KOhaGeJVjP5ddlf1e82cCvxmLQsfagvTGIfz65CCwaY LyySw9JOA7wnlXFx9RtfPOMol9N+Yz5baiuDy/rP2xj2OfpsVo4ZO4RW5cE5nwgu 6flUTeo8bW/6S22eVQVWWJ5yhmmHXZ4fEs+FiVMC0YxmgkzS9EKreo3z0LtMvYAN hDlDktmqjw36uBJBc/U8+UGIoNSAI3Yj1Gr1Safz74kXBZ9ELaRVLlVOnv+VbXGc ksJiU/VrVhzlxSjbZ/2bIB2LeJlZw7FDXo58BYNzaa1O3UD7MQyHT5DSuLyI8T8h B+miiC4zNcf96SnWA2TX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+EFpFyx1Ghg5AlvJEK2 vAYizx5WVxBuURTCyFmyWgCQYeMdfuCaQA+3cQAOb6aWGgM7odn9r1qTSzG0WOvY 36xP9grwz+4Ok8fbm9JAJQgqdy5N3ngVwAt4rUsOjSwQUQN8RvR5qF26xEAmczmw 59jpqjj/yEpNK2Cq4/TKuxs4MWFU5g3j+XHDoxSrruoFNAJql54I1XC6gtTI/49q u2NasaA4zN9ItGm/cNyKecT8YTH+1IgUg1dbipk9QgB7lNr0QIixTFPcX6Kq3qH9 3+4z64WwdAniHwszQAoLgpqufFG4OANKxdDe5BdkPvK4bkTmRrOehsn2Qm5xyNPs EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5234849612952317113597928076610402444 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.d.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22707619092091247585543674395926221584840432364101485963820082917349685177035847048093625967309713029349173685374961179018140581537151037769080205350533526915056011488499720208935647188610907621504456799077237688342583106219966332828920162113767764971338450381888248414934951673591681778439326466782546248291231565653688556090278560219065237422809928217016166066416147784364190463592704850266329467412823170117326675667623602642365686515406652683193729329432429977444305039871782079310712217789723445850180082304450868635475293702277828916190486653263383774131373308964007419703884142568236399117533928102617102412817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9754c6c6eabdeb846732e6988d04956fd3a39956 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1stdibs.us.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoopla.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoopladev.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltonight-test.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagefly.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shapeup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ak.yelpcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-embed.yelpcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.yelpcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.yelpcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.common.csnimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perftest.hoteltonight-test.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxcmapps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpxinteractive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brealtime.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.doublerads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.bunchofads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.bigfineads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.adxplosions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geokode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdsurge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img2.jpcycles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herokucdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapcheapmovingboxes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxcm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxcm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxcorporate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyfx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.eager.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newrelic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nncms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedirectionfragrance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vjs.zencdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.imallcdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyfill.webservices.ft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.polyfill.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.geonet.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.safaribooksonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.theguardian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j.ophan.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.guim.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nextgen.guardianapps.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theguardian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.wishabi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.wishabi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blendtec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torquato-cdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ophan.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.birchbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1.tacdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosehosting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scribdassets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbandictionary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.4uc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oswego.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.launchdarkly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theconversation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.01click.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardianapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikia-services.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightdecks.virgin-atlantic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saymedia-content.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evbuc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fluentd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busbud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skill-capped.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goote.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightsettings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u.fastly-analytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pops.fastly-analytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly-analytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.auth0.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhcqualify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcqualify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crate.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realself.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestream.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.zova.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamcdn.universalclass.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelviewculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelviewculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestreet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.vogue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiqcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vogue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.theguardian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banana-splash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newrelic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rand.fastly-analytics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0016bf2d3b9028332e35a250a0524e51c9dca3a16867895633f975d95fd5ef36702bf198b42c7da82f4c621fcfae420b06982f2c92c3d24e03bc27957171f51b5f3ce32897d37e633e5b6a2b83cbfacfdb18f639fa6c568e193b8456e5c1399f082ee9f9544dea3c6d6ffa4b6d9e550556589e728669875d9e1f12cf85895302d18c66824cd2f442ab7a8df3d0bb4cbd800d84394392d9aa8f0dfab8124173f53cf94188a0d480237623d46af549a7f3ef8917059f442da4552e554e9eff956d719c92c26253f56b561ce5c528db67fd9b201d8b789959c3b1435e8e7c05837369ad4edd40fb310c874f90d2b8bc88f13f2107e9a2882e3335c7fde929d60364d7