marfeel.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 42:02:69:d1:41:39:51:31:7d:ed:05:8b was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:02:69:d1:41:39:51:31:7d:ed:05:8b
Serial Number (int): 20428928208398093471374443915
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e5:74:1b:fb:c3:85:c8:b5:8b:4e:a3:82:76:c2:04:fb:2e:37:4c:ec
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 95:a9:66:6d:d2:f9:0a:88:99:25:80:fe:0d:a1:68:0b:2a:bd:75:1a
Fingerprint (sha256): 20:3f:6c:d8:ec:a3:9d:64:36:02:9a:b0:b2:26:2b:8d:5d:e6:15:80:06:8f:7d:1b:59:36:44:04:f5:d9:8f:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate marfeel.map.fastly.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marfeel.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marfeel.map.fastly.net
*.albawaba.com
*.davidemaggio.it
*.gestacaobebe.com.br
*.wheninmanila.com

Other certificates including the domain name marfeel.map.fastly.net

(limited to 100 certificates)
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net
marfeel.map.fastly.net

Certificate

The complete raw certificate details for marfeel.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu81zRYROkXoSBnADRU3B
b1qoijYZr+VoVwLam5+CJVmAXJp8QDDKj1WSnOBLmff0GGHg7oBdHobsB8Sy9HTW
I7ckdGjk+8czbLWC0BzfdcKPFZ1idWrgIWAQhy5NIy/jdgRQk0OwtOB73IVu+4zl
Mp69SXodVMujKh/tTAW7tghlBKWQHCCWekcLiGfSa0AaLyzZeNqzMBHi4pw1/n/n
Wxu47oXRU2YHG7+8Jjf2QehMP77ODAC2bCA888N/Az+QuX+BDtL+52Vz90ZzjN8e
jxyz3RcEzARVlbVUWW/2eAFkx05ulsUIeGSlweLWeDhzuh3eCEpTaJevO5J3BXaT
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20428928208398093471374443915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 16:21:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 17:23:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'marfeel.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23707874337394926031798157888888252373506234616014884573500955170606351367496134887020086652469608455675364091450838168755592868535028741930005044060524903518420269094141952466076784929535560981546798525678292334069476009455092338517224032776708111979773525882163265768363117401416768592641959458205436510094417439136109909368996038190819439436897829470161281530252707745133143192642250778910420214827671231417924168260626241623228374308031228803561400367213626216691578512657120828263350013583034943288856910099317193623673521418613635463351143976480409444376404271344124593397345423020093958893096338688729542988737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marfeel.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albawaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davidemaggio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gestacaobebe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheninmanila.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5741bfbc385c8b58b4ea38276c204fb2e374cec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cfd14a24c0000040300463044022100d6f95e7a3e63475b4ac4a2edee359ad8e37a32a6b907b4d6e703e3be7fc7bdac021f42cc52da51896f8a634a25996b8cfc62d87161b7a270d71db1a1708663b390007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cfd14a4ba000004030046304402201d654a68cdc733f130fc9c7a28da0fbeded200aff1422182dacc9a49fbf8eea302202f4b4bb7c5a379ed7d0c4e19172b3b04b40495e1e8df5601294549d08370d310
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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