t.ssl.fastly.net
- Fastly, Inc -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 5d:ea:97:cd:7a:42:f4:85:9b:03:10:da was issued on by GlobalSign nv-sa.
With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc
Organization:
Fastly, Inc
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 5d:ea:97:cd:7a:42:f4:85:9b:03:10:daSerial Number (int): 29065711422906235720929841370
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: cf:e9:21:66:9f:97:15:04:5c:8f:2d:b3:8e:44:70:6f:9a:59:1d:45
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): bf:74:1b:b1:e8:3f:7e:0b:0e:54:ca:df:af:df:4b:a7:b1:b3:9b:9d
Fingerprint (sha256): 07:3e:ed:3b:86:3d:6e:98:3c:dd:93:a3:34:c9:cb:37:3d:fa:2b:a4:c4:94:52:c3:e9:3b:14:a7:05:37:2d:a5
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate t.ssl.fastly.net
66
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for t.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
t.ssl.fastly.net
*.artifactstaging.com
*.asana.com
*.biler.dk
*.bluenationreview.com
*.foolcdn.com
*.fs.fleetio.com
*.fs.surepeople.com
*.homesandproperty.co.uk
*.independent.co.uk
*.parr-global.com
*.replicon.com
*.rl.talis.com
*.shareblue.com
*.standard.co.uk
*.streamable.com
*.talis.com
*.talktalk.co.uk
*.theindy100.com
*.topspeed.in
*.vimeo-staging2.com
*.webflow.io
*.wepay-inc.com
asana.com
assets-au.dollarshaveclub.com
assets-ca.dollarshaveclub.com
au.dollarshaveclub.com
biler.dk
bluenationreview.com
c.dlnws.com
ca.dollarshaveclub.com
cavil.api.sympoz.com
cdn.elf.leandergames.com
cdn.streamable.com
config.shazamid.com
dpeoples.jp
embed.studionodes.net
embed.ustudio.com
homesandproperty.co.uk
hypebae.com
images.otto.de
independent.co.uk
media.paulsmith.co.uk
membership.coop.co.uk
move-dev.banksimple.com
preprod.membership.coop.co.uk
prod-stg-store.hellyhansen.com
prod.faith-connexion.com
shareblue.com
staging-shop.hellyhansen.com
staging.faith-connexion.com
standard.co.uk
streamable.com
talis.com
talktalk.co.uk
thebalance.com
theindy100.com
vimeo-staging2.com
webflow.io
wepay-inc.com
www.cato-unbound.org
www.dexigner.com
www.downsizinggovernment.org
www.independent.co.uk
www.libertarianism.org
www.ultrafibreoptic.co.uk
*.artifactstaging.com
*.asana.com
*.biler.dk
*.bluenationreview.com
*.foolcdn.com
*.fs.fleetio.com
*.fs.surepeople.com
*.homesandproperty.co.uk
*.independent.co.uk
*.parr-global.com
*.replicon.com
*.rl.talis.com
*.shareblue.com
*.standard.co.uk
*.streamable.com
*.talis.com
*.talktalk.co.uk
*.theindy100.com
*.topspeed.in
*.vimeo-staging2.com
*.webflow.io
*.wepay-inc.com
asana.com
assets-au.dollarshaveclub.com
assets-ca.dollarshaveclub.com
au.dollarshaveclub.com
biler.dk
bluenationreview.com
c.dlnws.com
ca.dollarshaveclub.com
cavil.api.sympoz.com
cdn.elf.leandergames.com
cdn.streamable.com
config.shazamid.com
dpeoples.jp
embed.studionodes.net
embed.ustudio.com
homesandproperty.co.uk
hypebae.com
images.otto.de
independent.co.uk
media.paulsmith.co.uk
membership.coop.co.uk
move-dev.banksimple.com
preprod.membership.coop.co.uk
prod-stg-store.hellyhansen.com
prod.faith-connexion.com
shareblue.com
staging-shop.hellyhansen.com
staging.faith-connexion.com
standard.co.uk
streamable.com
talis.com
talktalk.co.uk
thebalance.com
theindy100.com
vimeo-staging2.com
webflow.io
wepay-inc.com
www.cato-unbound.org
www.dexigner.com
www.downsizinggovernment.org
www.independent.co.uk
www.libertarianism.org
www.ultrafibreoptic.co.uk
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
Certificate
The complete raw certificate details for t.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIK4zCCCcugAwIBAgIMXeqXzXpC9IWbAxDaMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwNjA1MjIy NTE3WhcNMjAwNTMxMTcyMjAzWjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEUMBIGA1UECgwLRmFzdGx5 LCBJbmMxGTAXBgNVBAMMEHQuc3NsLmZhc3RseS5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDdHkZlyk1zH99Ryid/hRHVz7HMcA1E3TmcAXubTqhR FeeXsaRtZS7mwCfOR6mcy1RBjcCraU1wxVEVVBYMT14fFZD5uq6EGAjIyBJa5rWt qtxHT2JuLh6UqKFAbT4xKOYarMPGu9XWPDPK+gOI5h68i36LYYM/crgBqHtPn4dN Yr3SvIxhOLZODHv7X1A0zP5SxfOoUjd/QQ0YjOMCtTS5yedhyysU8uU4qwBOxtkq HFEoBH6oshMEF93oILe6CfBeMmG5h5orPdHU7C/z65q6ZujTIc7A0BtaRUuLusOT sL2i8AiJ0/DpwVEG2y6KSK2HtAYQo1dGz1FTrbVtDABNAgMBAAGjggeZMIIHlTAO BgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggrBgEFBQcwAoY2aHR0 cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xvdWRzc2xzaGEyZzMu Y3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vY2xv dWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcC ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM AQICMAkGA1UdEwQCMAAwggUrBgNVHREEggUiMIIFHoIQdC5zc2wuZmFzdGx5Lm5l dIIVKi5hcnRpZmFjdHN0YWdpbmcuY29tggsqLmFzYW5hLmNvbYIKKi5iaWxlci5k a4IWKi5ibHVlbmF0aW9ucmV2aWV3LmNvbYINKi5mb29sY2RuLmNvbYIQKi5mcy5m bGVldGlvLmNvbYITKi5mcy5zdXJlcGVvcGxlLmNvbYIYKi5ob21lc2FuZHByb3Bl cnR5LmNvLnVrghMqLmluZGVwZW5kZW50LmNvLnVrghEqLnBhcnItZ2xvYmFsLmNv bYIOKi5yZXBsaWNvbi5jb22CDioucmwudGFsaXMuY29tgg8qLnNoYXJlYmx1ZS5j b22CECouc3RhbmRhcmQuY28udWuCECouc3RyZWFtYWJsZS5jb22CCyoudGFsaXMu Y29tghAqLnRhbGt0YWxrLmNvLnVrghAqLnRoZWluZHkxMDAuY29tgg0qLnRvcHNw ZWVkLmlughQqLnZpbWVvLXN0YWdpbmcyLmNvbYIMKi53ZWJmbG93Lmlvgg8qLndl cGF5LWluYy5jb22CCWFzYW5hLmNvbYIdYXNzZXRzLWF1LmRvbGxhcnNoYXZlY2x1 Yi5jb22CHWFzc2V0cy1jYS5kb2xsYXJzaGF2ZWNsdWIuY29tghZhdS5kb2xsYXJz aGF2ZWNsdWIuY29tgghiaWxlci5ka4IUYmx1ZW5hdGlvbnJldmlldy5jb22CC2Mu ZGxud3MuY29tghZjYS5kb2xsYXJzaGF2ZWNsdWIuY29tghRjYXZpbC5hcGkuc3lt cG96LmNvbYIYY2RuLmVsZi5sZWFuZGVyZ2FtZXMuY29tghJjZG4uc3RyZWFtYWJs ZS5jb22CE2NvbmZpZy5zaGF6YW1pZC5jb22CC2RwZW9wbGVzLmpwghVlbWJlZC5z dHVkaW9ub2Rlcy5uZXSCEWVtYmVkLnVzdHVkaW8uY29tghZob21lc2FuZHByb3Bl cnR5LmNvLnVrggtoeXBlYmFlLmNvbYIOaW1hZ2VzLm90dG8uZGWCEWluZGVwZW5k ZW50LmNvLnVrghVtZWRpYS5wYXVsc21pdGguY28udWuCFW1lbWJlcnNoaXAuY29v cC5jby51a4IXbW92ZS1kZXYuYmFua3NpbXBsZS5jb22CHXByZXByb2QubWVtYmVy c2hpcC5jb29wLmNvLnVrgh5wcm9kLXN0Zy1zdG9yZS5oZWxseWhhbnNlbi5jb22C GHByb2QuZmFpdGgtY29ubmV4aW9uLmNvbYINc2hhcmVibHVlLmNvbYIcc3RhZ2lu Zy1zaG9wLmhlbGx5aGFuc2VuLmNvbYIbc3RhZ2luZy5mYWl0aC1jb25uZXhpb24u Y29tgg5zdGFuZGFyZC5jby51a4IOc3RyZWFtYWJsZS5jb22CCXRhbGlzLmNvbYIO dGFsa3RhbGsuY28udWuCDnRoZWJhbGFuY2UuY29tgg50aGVpbmR5MTAwLmNvbYIS dmltZW8tc3RhZ2luZzIuY29tggp3ZWJmbG93Lmlvgg13ZXBheS1pbmMuY29tghR3 d3cuY2F0by11bmJvdW5kLm9yZ4IQd3d3LmRleGlnbmVyLmNvbYIcd3d3LmRvd25z aXppbmdnb3Zlcm5tZW50Lm9yZ4IVd3d3LmluZGVwZW5kZW50LmNvLnVrghZ3d3cu bGliZXJ0YXJpYW5pc20ub3Jnghl3d3cudWx0cmFmaWJyZW9wdGljLmNvLnVrMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSpK4fhziRH Oxu/z4U3AlWdDZRY5jAdBgNVHQ4EFgQUz+khZp+XFQRcjy2zjkRwb5pZHUUwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA xHuJeqj9ywAAAWspvyEaAAAEAwBGMEQCIDb3zx9iIcgC6NBJhUmfJNpWVuXRAQxi J3C4Da5dxD8OAiBlMRzTDoI2vBQPklgcTK4YoPHThsA15l1kMZyOdhiJcwB2AId1 v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABaym/IJQAAAQDAEcwRQIg YRkF+uctkLyK0B9fSJ42D8/ejVP8Ht9CUNWtskSPhxcCIQCozJrfPVtQxe4Ma9xX PxLbnchRFSmewtWJPrfJ4LUCgTANBgkqhkiG9w0BAQsFAAOCAQEAR8mwtHpP0SI/ 3RpZaIDKly1EvkVpY32LHVh8iOQQRpWANJuvI0WfllTo1QUo1xD/ZH24v8lFTijH spKMzVN+5q73t1EbRspNNSl++KdJiatTRWNnxEXTEgS9a0ko1l1DjYldnoVPNFOC iq0m4fa2Ddc6UQY5Ft0vdw64zAcM4IjX7X0wXc22E+dxNr0q2O1aQKLcwSfqqX+q h2Q4GZPsT3eVBC+y/uCLGdsvGElPxEL+bZttB3PO3RE9EVcxOQvEMJ6826v4Qnvj 66EaBw/5rXohh9wz2aj+L3yHlBoBKX1LX4lX+tcpB3V3eA0zOSA0A5hrrwOoPE8P yiyScfPkNw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R5GZcpNcx/fUconf4UR 1c+xzHANRN05nAF7m06oURXnl7GkbWUu5sAnzkepnMtUQY3Aq2lNcMVRFVQWDE9e HxWQ+bquhBgIyMgSWua1rarcR09ibi4elKihQG0+MSjmGqzDxrvV1jwzyvoDiOYe vIt+i2GDP3K4Aah7T5+HTWK90ryMYTi2Tgx7+19QNMz+UsXzqFI3f0ENGIzjArU0 ucnnYcsrFPLlOKsATsbZKhxRKAR+qLITBBfd6CC3ugnwXjJhuYeaKz3R1Owv8+ua umbo0yHOwNAbWkVLi7rDk7C9ovAIidPw6cFRBtsuikith7QGEKNXRs9RU621bQwA TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 29065711422906235720929841370 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 22:25:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 17:22:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27913594551828288909810725579111469487107941548187768782082941867081316425983196870498990258434919672087055302682347076854813195627046123814981290465067669148935687230117047751245995489759759640082393325564621690463712527752509999716385356104908306029956661735071314063823387071523816696634402097233043060316130946159443614043093327494506210419614744098654258323461589553161099343048544233881424060561992561868309343598730956386004916427472454116643608970378392101467671018215324716205065448005956132908503334941973220944931372354456447140797128482988367794916529584956745635518224662682775838107451561688090368802893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1314 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artifactstaging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biler.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluenationreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foolcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.fleetio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.surepeople.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesandproperty.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independent.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parr-global.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replicon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rl.talis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.standard.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talktalk.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theindy100.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topspeed.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeo-staging2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webflow.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wepay-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-au.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-ca.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biler.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluenationreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.dlnws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavil.api.sympoz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.elf.leandergames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.streamable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.shazamid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpeoples.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.studionodes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ustudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesandproperty.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypebae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.otto.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.paulsmith.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'move-dev.banksimple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.membership.coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-stg-store.hellyhansen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.faith-connexion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-shop.hellyhansen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.faith-connexion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standard.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talktalk.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindy100.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo-staging2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webflow.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepay-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cato-unbound.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dexigner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downsizinggovernment.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.independent.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertarianism.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrafibreoptic.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cfe921669f9715045c8f2db38e44706f9a591d45 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b29bf211a0000040300463044022036f7cf1f6221c802e8d04985499f24da5656e5d1010c622770b80dae5dc43f0e022065311cd30e8236bc140f92581c4cae18a0f1d386c035e65d64319c8e761889730076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b29bf209400000403004730450220611905fae72d90bc8ad01f5f489e360fcfde8d53fc1edf4250d5adb2448f8717022100a8cc9adf3d5b50c5ee0c6bdc573f12db9dc85115299ec2d5893eb7c9e0b50281 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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