o.ssl.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 60:da:85:7f:3b:3b:7c:ca:7f:cd:dd:ec was issued on by GlobalSign nv-sa.
With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 60:da:85:7f:3b:3b:7c:ca:7f:cd:dd:ecSerial Number (int): 29974737193271977062624517612
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 33:6b:6a:1d:8c:de:8d:ea:48:0c:f0:52:74:7f:4f:31:ba:75:3e:17
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 0b:d8:6b:96:ef:d1:1f:6b:4d:f2:29:f9:ee:f4:9c:46:32:90:8e:8b
Fingerprint (sha256): 11:e6:e9:1c:84:fb:ec:d5:50:f1:16:e5:a2:e1:55:a3:2d:06:fe:7b:cc:31:96:bc:30:a3:f7:e2:24:af:3a:37
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate o.ssl.fastly.net
74
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for o.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
o.ssl.fastly.net
*.cdn.fm
*.charitywater.org
*.corp.fastly.com
*.cpcdn.com
*.fdm.dk
*.fourleggedfinishers.com
*.fs.agorize.com
*.fs.arixio.com
*.fs.fitthumb.com
*.fs.keela.co
*.fs.nipponcareers.com
*.fs.pathgather.com
*.gofundme.com
*.govx.com
*.govx.io
*.hypebeast.com
*.netbsd.org
*.oddworks.io
*.overpwn.com
*.ovisto.com.au
*.rosettastone.com
*.salesforce-communities.com
*.staging.devdrupal.org
*.tagboard.com
*.vorkers.com
*.wepay.com
*.wepayapi.com
*.wework.com
*.xtractresearch.com
allseenalliance.jp
api.geekdo.com
api.oxfamactions.org
assets.centurylink.imeet.com
assets.imeet.com
assets.imeet.net
assets.imeet.pwnbeta.net
assets.imeetbeta.net
b1.awin1.com
barkboxdev.com
cdn.oxitec.com
cdn.switchadhub.com
craftsy-stage.test.sympoz.net
craftsy.prod.sympoz.net
customercommunity.newforma.com
fastly.net
fdm.dk
g.redditmedia.com
gofundme.com
govx.com
govx.io
i.redd.it
i.redditmedia.com
laxstream02.daxcloud.net
link.sg.booking.com
lntv.com
nevs.trell.tech
site.pfm.ebisubook.com
site.pfm.moneyforward.com
sourceetf.com
staging.devdrupal.org
static.a-z.ch
tag.brainient.com
tagboard.com
wepayapi.com
wl-static.fotolia.com
www.dekoruma.com
www.escrow-stg.net
www.fastly.net
www.joyent.com
www.latina.com
www.netcentric.biz
www.pourdebon.com
www.sourceetf.com
*.cdn.fm
*.charitywater.org
*.corp.fastly.com
*.cpcdn.com
*.fdm.dk
*.fourleggedfinishers.com
*.fs.agorize.com
*.fs.arixio.com
*.fs.fitthumb.com
*.fs.keela.co
*.fs.nipponcareers.com
*.fs.pathgather.com
*.gofundme.com
*.govx.com
*.govx.io
*.hypebeast.com
*.netbsd.org
*.oddworks.io
*.overpwn.com
*.ovisto.com.au
*.rosettastone.com
*.salesforce-communities.com
*.staging.devdrupal.org
*.tagboard.com
*.vorkers.com
*.wepay.com
*.wepayapi.com
*.wework.com
*.xtractresearch.com
allseenalliance.jp
api.geekdo.com
api.oxfamactions.org
assets.centurylink.imeet.com
assets.imeet.com
assets.imeet.net
assets.imeet.pwnbeta.net
assets.imeetbeta.net
b1.awin1.com
barkboxdev.com
cdn.oxitec.com
cdn.switchadhub.com
craftsy-stage.test.sympoz.net
craftsy.prod.sympoz.net
customercommunity.newforma.com
fastly.net
fdm.dk
g.redditmedia.com
gofundme.com
govx.com
govx.io
i.redd.it
i.redditmedia.com
laxstream02.daxcloud.net
link.sg.booking.com
lntv.com
nevs.trell.tech
site.pfm.ebisubook.com
site.pfm.moneyforward.com
sourceetf.com
staging.devdrupal.org
static.a-z.ch
tag.brainient.com
tagboard.com
wepayapi.com
wl-static.fotolia.com
www.dekoruma.com
www.escrow-stg.net
www.fastly.net
www.joyent.com
www.latina.com
www.netcentric.biz
www.pourdebon.com
www.sourceetf.com
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
Certificate
The complete raw certificate details for o.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILAzCCCeugAwIBAgIMYNqFfzs7fMp/zd3sMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwNjE0MDAy NzExWhcNMTgxMjI4MTQ0MjI3WjBsMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMRkwFwYDVQQDDBBvLnNzbC5mYXN0bHkubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAy01kvLXm+nmtzLOUwJ9tENHfJ4/i1epNkoxmszUF 7J6uZRw8N5gLJla0+6yxSAL6lTpGCg24oInNyXX4ioEXWE14kCgKxMt+z2LPU2A8 0R9/xLwcJVfOralj/1PEksHTRN70s1+3nhQfWWJ7bOQhvOt4U9oKbs+AHQxvyTXE JjPbBBC5GY+UYCtkEz91gH5ArxRlEdrYd0PViwef+Ji9ez7bsJB2tMV02NFcgQam uR5vKH63ZjaGi7b72PpVQnsmNYFJtSxfJfetlzKbk5EjI58fCIQnXU4wTf/lJfdZ TRybCXrIUATmCj9grov6di989JdXejj2hx08MmpwE6PEeQIDAQABo4IHuDCCB7Qw DgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0 dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmcz LmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Ns b3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUH AgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeB DAECAjAJBgNVHRMEAjAAMIIFSQYDVR0RBIIFQDCCBTyCEG8uc3NsLmZhc3RseS5u ZXSCCCouY2RuLmZtghIqLmNoYXJpdHl3YXRlci5vcmeCESouY29ycC5mYXN0bHku Y29tggsqLmNwY2RuLmNvbYIIKi5mZG0uZGuCGSouZm91cmxlZ2dlZGZpbmlzaGVy cy5jb22CECouZnMuYWdvcml6ZS5jb22CDyouZnMuYXJpeGlvLmNvbYIRKi5mcy5m aXR0aHVtYi5jb22CDSouZnMua2VlbGEuY2+CFiouZnMubmlwcG9uY2FyZWVycy5j b22CEyouZnMucGF0aGdhdGhlci5jb22CDiouZ29mdW5kbWUuY29tggoqLmdvdngu Y29tggkqLmdvdnguaW+CDyouaHlwZWJlYXN0LmNvbYIMKi5uZXRic2Qub3Jngg0q Lm9kZHdvcmtzLmlvgg0qLm92ZXJwd24uY29tgg8qLm92aXN0by5jb20uYXWCEiou cm9zZXR0YXN0b25lLmNvbYIcKi5zYWxlc2ZvcmNlLWNvbW11bml0aWVzLmNvbYIX Ki5zdGFnaW5nLmRldmRydXBhbC5vcmeCDioudGFnYm9hcmQuY29tgg0qLnZvcmtl cnMuY29tggsqLndlcGF5LmNvbYIOKi53ZXBheWFwaS5jb22CDCoud2V3b3JrLmNv bYIUKi54dHJhY3RyZXNlYXJjaC5jb22CEmFsbHNlZW5hbGxpYW5jZS5qcIIOYXBp LmdlZWtkby5jb22CFGFwaS5veGZhbWFjdGlvbnMub3Jnghxhc3NldHMuY2VudHVy eWxpbmsuaW1lZXQuY29tghBhc3NldHMuaW1lZXQuY29tghBhc3NldHMuaW1lZXQu bmV0ghhhc3NldHMuaW1lZXQucHduYmV0YS5uZXSCFGFzc2V0cy5pbWVldGJldGEu bmV0ggxiMS5hd2luMS5jb22CDmJhcmtib3hkZXYuY29tgg5jZG4ub3hpdGVjLmNv bYITY2RuLnN3aXRjaGFkaHViLmNvbYIdY3JhZnRzeS1zdGFnZS50ZXN0LnN5bXBv ei5uZXSCF2NyYWZ0c3kucHJvZC5zeW1wb3oubmV0gh5jdXN0b21lcmNvbW11bml0 eS5uZXdmb3JtYS5jb22CCmZhc3RseS5uZXSCBmZkbS5ka4IRZy5yZWRkaXRtZWRp YS5jb22CDGdvZnVuZG1lLmNvbYIIZ292eC5jb22CB2dvdnguaW+CCWkucmVkZC5p dIIRaS5yZWRkaXRtZWRpYS5jb22CGGxheHN0cmVhbTAyLmRheGNsb3VkLm5ldIIT bGluay5zZy5ib29raW5nLmNvbYIIbG50di5jb22CD25ldnMudHJlbGwudGVjaIIW c2l0ZS5wZm0uZWJpc3Vib29rLmNvbYIZc2l0ZS5wZm0ubW9uZXlmb3J3YXJkLmNv bYINc291cmNlZXRmLmNvbYIVc3RhZ2luZy5kZXZkcnVwYWwub3Jngg1zdGF0aWMu YS16LmNoghF0YWcuYnJhaW5pZW50LmNvbYIMdGFnYm9hcmQuY29tggx3ZXBheWFw aS5jb22CFXdsLXN0YXRpYy5mb3RvbGlhLmNvbYIQd3d3LmRla29ydW1hLmNvbYIS d3d3LmVzY3Jvdy1zdGcubmV0gg53d3cuZmFzdGx5Lm5ldIIOd3d3LmpveWVudC5j b22CDnd3dy5sYXRpbmEuY29tghJ3d3cubmV0Y2VudHJpYy5iaXqCEXd3dy5wb3Vy ZGVib24uY29tghF3d3cuc291cmNlZXRmLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwHQYDVR0OBBYEFDNrah2M3o3qSAzwUnR/TzG6dT4XMB8GA1Ud IwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFj+7BulQAA BAMARzBFAiEA+/pbZiBazksE8uNMCp0QDsLBxMaeCidkVRlYxJPU0CsCID9ALHpX B14Dp5O+bM2uBKd+Iccu6D764Gk7qdH7hOBLAHYAu9nfvB+KcbWTlCOXqpJ7RzhX lQqrUugakJZkNo4e0YUAAAFj+7BvygAABAMARzBFAiEAngGmSxJL8HIHzsnHiznp z7z0ShCtk/LSrVDxznTlf1ICIExNd4fD5gCaX/f8BJtuZzrINZBEtNGQrMSlBkSt oIeEMA0GCSqGSIb3DQEBCwUAA4IBAQBdkrUNXHlggAwBQrzL7R679scB7QKDqTE0 drjuymTAyc1CPMko7frWkriSCcmzIBjrttqavbZNg8Sfv+OYMaqfTG81HK7CuulG LWKtlIxmfsk9I72rim/DaYSOJGe0WEgL7xSZsls7k+P9WojlkUW0akL93L/Ur3qQ fwG9TlVDMTzvqLsapvczrN3+NAP7jaMHAnkCe/AO46ugRx5IJAcFHEhj2jOYX2Yv 3PIdIoJJs5P0aKX7qn0It2ZC/YryuUV1YENWvEoRG5RL0ppQMS0M24JIYfID/JpO oHJCbx0xuJFTi7Pyl7Zn/Zrw5dPjrDQeOlD3YHrU0NO6Rkac5mFH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy01kvLXm+nmtzLOUwJ9t ENHfJ4/i1epNkoxmszUF7J6uZRw8N5gLJla0+6yxSAL6lTpGCg24oInNyXX4ioEX WE14kCgKxMt+z2LPU2A80R9/xLwcJVfOralj/1PEksHTRN70s1+3nhQfWWJ7bOQh vOt4U9oKbs+AHQxvyTXEJjPbBBC5GY+UYCtkEz91gH5ArxRlEdrYd0PViwef+Ji9 ez7bsJB2tMV02NFcgQamuR5vKH63ZjaGi7b72PpVQnsmNYFJtSxfJfetlzKbk5Ej I58fCIQnXU4wTf/lJfdZTRybCXrIUATmCj9grov6di989JdXejj2hx08MmpwE6PE eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 29974737193271977062624517612 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 00:27:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 14:42:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'o.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25664540067573871850143079721788300565533977066132037244643341557808997200394190134799195438119921049114080920385148500545722336888938036289538256072926352108728068372765469012882059157901244200483932084914058212356291564535234367287881254930505682482859907481813083740589963184157573275794778528954233589502285369778987683857577293479432326419863868562327793464887167040802393521320773469452023947330907988766166704714254544286234258213265751455648911973012053358300573679705046532006879215768399350963605436889643745751884129454474920436795435209137710357200179154363276705674836978693619428326375539136915210224761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1344 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charitywater.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corp.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdm.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fourleggedfinishers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.agorize.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.arixio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.fitthumb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.keela.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.nipponcareers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pathgather.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofundme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govx.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypebeast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netbsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oddworks.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overpwn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovisto.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosettastone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesforce-communities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.devdrupal.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagboard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorkers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wepay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wepayapi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wework.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtractresearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allseenalliance.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.geekdo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.oxfamactions.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.centurylink.imeet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imeet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imeet.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imeet.pwnbeta.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imeetbeta.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b1.awin1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkboxdev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oxitec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.switchadhub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftsy-stage.test.sympoz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftsy.prod.sympoz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercommunity.newforma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdm.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.redditmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofundme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.redd.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.redditmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laxstream02.daxcloud.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sg.booking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lntv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.trell.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.pfm.ebisubook.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.pfm.moneyforward.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceetf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.devdrupal.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.a-z.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.brainient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagboard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepayapi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wl-static.fotolia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dekoruma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escrow-stg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joyent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcentric.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pourdebon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourceetf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 336b6a1d8cde8dea480cf052747f4f31ba753e17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163fbb06e950000040300473045022100fbfa5b66205ace4b04f2e34c0a9d100ec2c1c4c69e0a2764551958c493d4d02b02203f402c7a57075e03a793be6ccdae04a77e21c72ee83efae0693ba9d1fb84e04b007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163fbb06fca00000403004730450221009e01a64b124bf07207cec9c78b39e9cfbcf44a10ad93f2d2ad50f1ce74e57f5202204c4d7787c3e6009a5ff7fc049b6e673ac8359044b4d190acc4a50644ada08784 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005d92b50d5c7960800c0142bccbed1ebbf6c701ed0283a9313476b8eeca64c0c9cd423cc928edfad692b89209c9b32018ebb6da9abdb64d83c49fbfe39831aa9f4c6f351caec2bae9462d62ad948c667ec93d23bdab8a6fc369848e2467b458480bef1499b25b3b93e3fd5a88e59145b46a42fddcbfd4af7a907f01bd4e5543313cefa8bb1aa6f733acddfe3403fb8da3070279027bf00ee3aba0471e482407051c4863da33985f662fdcf21d228249b393f468a5fbaa7d08b76642fd8af2b94575604356bc4a111b944bd29a50312d0cdb824861f203fc9a4ea072426f1d31b891538bb3f297b667fd9af0e5d3e3ac341e3a50f7607ad4d0d3ba46469ce66147