ticketmaster5.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 25:b3:d9:b5:da:0c:15:cf:6b:85:e0:ea was issued on by GlobalSign nv-sa.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:b3:d9:b5:da:0c:15:cf:6b:85:e0:ea
Serial Number (int): 11668371193200203400124686570
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 59:4b:33:14:1f:a1:d3:a7:74:c7:3e:7f:f4:9a:e7:98:0a:c4:f7:12
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 12:fb:c1:33:f7:af:58:da:e8:ec:42:13:92:a1:ac:9d:4a:73:af:c3
Fingerprint (sha256): 1d:24:ce:51:84:c8:fe:f8:2e:b4:b4:41:3e:6f:74:11:d7:0b:f0:bf:4c:4b:e6:db:22:da:e3:0a:2e:f7:7d:11

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster5.map.fastly.net

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster5.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster5.map.fastly.net
*.livenation.be
*.livenation.lat
*.livenation.me
*.livenationsponsorship.com
*.ppub-tmaws.io
*.preprod.ticketmaster.net
*.pub-tmaws.io
*.ticketmaster.net
*.universe.com
am-stg-client-files-west.ppub-tmaws.io
am-stg-common-content-west.ppub-tmaws.io
beta-kube.tmol.co
beta2.tmol.co
canesstm.com
fan-wallet-preprod.ticketmaster.net
fan-wallet-stage.ticketmaster.com
fan-wallet.ticketmaster.com
identity.ticketstoday.com
livenation.com
my.usopen.org
myloyalblue.com
mylvaccount.raiders.com
next.ticketmaster.ca
next.ticketmaster.com
offeradapter.ticketmaster.com
offers-preprod.ticketmaster.net
offers.ticketmaster.com
pacerselite.com
redwingsseasontickets.com
starsseasontickets.com
stg-common-widgets-west.ppub-tmaws.io
tmdev.co
universe.com
www.canesstm.com
www.myloyalblue.com
www.pacerselite.com
www.redwingsseasontickets.com
www.starsseasontickets.com
www.tmdev.co

Other certificates including the domain name ticketmaster5.map.fastly.net

(limited to 100 certificates)
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster5.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+RjM0ld55zDpQYmGTy
Tgi7SJFS71wMrE+VKcVzQ7zQAtYCAw1SOmpiE/B7Jd7XI5lErHTXfpkrKO/eNn/l
aMPLTfMf7uQZBLUYbyC8ZII2uRJqHGiXQWPZNp/QgX0SbqjGjcby3mFeN2k5AYqI
SBPMkpeKiIfKdDBXYVBcXDkIvM0hhHtBp0hiuiH974xbq4NGMEdOBuwBeSO35LEU
HpYT4NznxEihbg5D9/z6jy/Toj75HJbWpSnp3/wRxokC3or4+VgqKs4EqGUTMtOO
BVqNauT26CLEkFzdaEps+foHHwXoQ/YWGr/vVCSAIJayanzVFTGEn0jHA4Adt5CB
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11668371193200203400124686570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 02:21:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 14:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketmaster5.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26470381818967568019460862420579362911074022209255498608359260606387459735070618870551044733724550981157397474483503257787793218228385952540832245527934612360341887053019938186527506257501011301610929465799529890327814821592301550403428957581871741065510760410186387161118720339298328938519814951678109182778566277208639141931597190336558456067272439050640119055807826591440946571111565122810129036117619344024146449460677375047940620438974381768556080844759100851223270151095648900971847633841287812503877085381645651571272485546234141038835725367539562683272551780748702687790952128800083883876394641256753885381011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (941 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster5.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenationsponsorship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-client-files-west.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-common-content-west.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-kube.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta2.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canesstm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan-wallet-preprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan-wallet-stage.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan-wallet.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usopen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myloyalblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylvaccount.raiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offeradapter.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers-preprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacerselite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwingsseasontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starsseasontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-common-widgets-west.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmdev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesstm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myloyalblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacerselite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwingsseasontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starsseasontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmdev.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							594b33141fa1d3a774c73e7ff49ae7980ac4f712
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028cbe0d568d6061206b3ab43b1d57d62915b15c2ae3ef6616d0cc1b584c5e172963fee9617acee5bc4f4b1be610b562719e56b064409f782a59e7b4ceb7c0be55b8d1a9acafe0111b31cf0c0c6e153c387d7a74c9a758c8ca2d46e64bface33a7d15b9efc7abc55f0d00d23e7b9715397863794f4d525f5b4e15c827a1403a1b40d612875a7431a16f82b1cecd1a4621c725d8cce6d83dfbe6597d2ca7fb1ef37b99d32be0747ab7ed050265f4a86176941724500e3b31eb50941cd95222569adaf4044b2273cba1c830b7677c2a8f8d85ca6ff4a81141178af6b96d80612df3a51c47c89bf5d0daaa7a409a692ac1b22d8a96ec6361094d170826fea22988be