shopify.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 09:ea:1c:03:99:5f:52:1c:14:a5:56:07 was issued on by GlobalSign nv-sa.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ea:1c:03:99:5f:52:1c:14:a5:56:07
Serial Number (int): 3068386022835323707748341255
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 76:a3:02:7f:b5:77:31:e0:ae:fd:86:7f:e0:ff:9d:70:17:66:06:8a
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 8b:f0:d6:31:b5:d2:c5:a8:1e:15:a8:93:af:d1:88:a9:4b:6e:40:88
Fingerprint (sha256): 0f:43:e0:7d:2a:d7:67:f4:85:7e:36:17:58:ac:b8:eb:1e:d5:61:e8:6d:55:f3:91:cd:19:c2:8b:8f:01:87:bd

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate shopify.map.fastly.net

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopify.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopify.map.fastly.net
*.i.shopifycdn.com
*.s.shopifycdn.com
*.screenshot.click
*.shopifycdn.com
cdn.shopify.com
cdn.shopify.io
cdn2.shopify.com
fastly.monitoring.shopifycdn.com
frenzy.sale
frenzy.shopifyapps.com
screenshot.click
widgets.shopifyapps.com

Other certificates including the domain name shopify.map.fastly.net

(limited to 100 certificates)
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net
shopify.map.fastly.net

Certificate

The complete raw certificate details for shopify.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri+cxaUfPSa4TOQKjsPo
ShXKDCMjkzGteSIE34zuyQyjFhbb30hoyJRzSQwfLOMahOMBmUo3Mln7V3DYP1Zn
8ytuLUsAk9NV2k3XO4xNC3vDGtU5isC4c4RpJ6+dc/LfeWcv+ttkuUwcU8n/Chtj
nQk6i0ITcF/OqjCQHR70hCOgdkiBsl6hSChXqghdSMRI3AgSiDq7Ddnx6vVjzddG
4PEfxX09M0hSJFJbyXq0CbNnFZyq0cB6QXvk1Ck3KYnecmA4t+maLXLaAiqtWue3
5Ed4tVa/cwV1rJqmCPMaGvwszi9yylbsjd0Iy6zK9y57wFcZUUaWfA40HBSygem8
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3068386022835323707748341255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 21:11:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 15:24:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shopify.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21988943609066615426758161173366199479629659592396364924364570684370465828436076853122422395383828780795613795954580795942882067354254907065891124859220878598340946409593374095081566608480483745186331985467630363065795359603846632656300064799613836926864996171174257363895729662596282330028804275375917373140658636928936052039113593166243675289877890418372236393911606371612725747649970810066808634032114054164547978142750404045243673834127245610775997238704110721540558498217694950774592899086988338158002823656973400173888545589154805298956349686876396854131039674520129933684498230822464806185604503266275227188377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.shopifycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.shopifycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screenshot.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopifycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shopify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.shopify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.monitoring.shopifycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenzy.sale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenzy.shopifyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenshot.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.shopifyapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76a3027fb57731e0aefd867fe0ff9d701766068a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ab82f8fa80000040300473045022100f1271e386e981650f895331f74172a7e7d0301d493637c79a410deac4333e1710220063bfe963a266cbe6a47898e895e9357e4dd9063ba72474e0f3eb523021f8dec007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ab82f8baf0000040300483046022100faa2196f380c109490a585ee6c1049a30a416092fa834c125ff05d2a83953ef0022100864b27c25e3e76249a9bc39ed640694f7dcaf5e565692926defceac35946f6cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ca08c6ee531d4642ed7818e81bee1fdb7fc559400f69f4aa75ab72cc148a8bf53e6447406944510aa5575b251fa4fad5a11b5560c51e278434a88a374024e2b195b59ff7492c1e42f1cac325d621ed826efe47b4cddb6ae5577b74167b372b7adc4e35f5cd7b7cf4cb58d6ef1d9e542a176c947cdc0355cd3afb70c6277207148a4c1200167edd80d5cb6b8f4b83226303560ac6daa94d52eebdb734e4d2c69ee8fa531c38228ebddd8bb0307d362faaef3c894e16a9865484acd1d4e17b847b1199f3ff7032f57429291ae57b0e1673674d588e8c2b7c9f6fdc839be52c792487f021da06b5286f762510e40258379bd9879ea10ce4a8e27b76d33b4559963