dns-vetting1.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 41:95:e2:52:60:8e:b1:b0:87:a1:c6:8e was issued on by GlobalSign nv-sa.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 41:95:e2:52:60:8e:b1:b0:87:a1:c6:8e
Serial Number (int): 20297724359925845644225398414
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a7:0b:f1:61:e5:e3:6d:dc:93:04:06:6c:1c:f3:cb:ab:49:2b:43:cc
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c8:0a:92:89:46:04:a0:95:b0:7e:1c:7a:19:8b:b3:2d:6f:ac:e6:83
Fingerprint (sha256): 20:fe:29:69:09:21:d3:4e:0d:e7:37:d6:a1:d1:69:1f:4e:ed:74:2b:ad:b8:db:b0:a3:3a:61:88:a4:03:04:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dns-vetting1.map.fastly.net

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dns-vetting1.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dns-vetting1.map.fastly.net
*.aenetworks.com
*.ott.aetnd.com
*.svod.aetnd.com
aenetworks.com
aetnd.com
aetndigital.com
aetv.com
allure.com
architecturaldigest.com
bonappetit.com
brides.com
cashstar.com
cntraveler.com
conde.io
condenast.io
condenastdigital.com
condenaststudio.com
condenet.com
crimeandinvestigationnetwork.com
details.com
devops.aetnd.com
epicurious.com
ft.com
fyi.tv
gamefuel.info
gc.nordstrom.com
giftcard.nordstrom.com
giftcards.nordstrom.com
givingisgorges.org
glamour.com
golfdigest.com
gq.com
history.com
historyvault.com
lifetimemovieclub.com
mylifetime.com
newyorker.com
pmoqa.aetnd.com
polyfill.io
qa.cashstar.com
self.com
semi.cashstar.com
sixnightvision.com
techrabbit.com
teenvogue.com
user-content.givegab-cdn.com
validation.rnd03.com
vanityfair.com
video.aetnd.com
video.aetndigital.com
vip.aetnd.com
vip.aetndigital.com
vogue.com
vts.com
watch.aetnd.com
webmonkey.com
wmagazine.com

Other certificates including the domain name dns-vetting1.map.fastly.net

(limited to 100 certificates)
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net

Certificate

The complete raw certificate details for dns-vetting1.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGKtCl9slnkEhiaVtdhd
lJ0Wnq9otRO1+gEnQtMz15k7AjXXmlqzws8c7kavgqzExIxB2T7YwV516yQaGvZq
uFl6L7UTSHZYwe8OfVWYa+lVeUs58sn1OB/cyreUwUClf5dVhlUUpQlaIxfN60Xb
YD1KBw8KAnHWfhdqZEcocaeKwUr30SUz4qbCLlNDpwzPpUpLm3e7nxexxAznmcns
90FzI7o0ON2rv030inLmNNhEHSgpq5q4ZWlysFRF9yq5I3cEzu4GReAKNktIyeDs
eEluLAqJHo6lHfMqJPorPbLdyX8ed5cSydA2Ae/eSWCsU39QK4Pl/mOV9Uz/p+Ye
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20297724359925845644225398414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 21:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 19:35:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25296319912534563805034805044718475190879992262521373893186381326972866446407027413688673147224976784062047525709285249736754317919783074793869388971879397706682111604083054852516746322884063259045003807854411564552800090078419430443728578342160007298932604989069058661728573526847831522830666789955038171531931924172884232768513503280501583569845701313563630044089554784825384494347891250253805681924629097819311861346732752349020679655701702395478834423884595228178249440279772290096999688610556434051223141908674368156024641394309987017936121960727163085459745008253522900586295140241922894152356382714763149712909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ott.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svod.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecturaldigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonappetit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conde.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenastdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenaststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimeandinvestigationnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'details.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamefuel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gc.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyvault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimemovieclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmoqa.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyfill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'self.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semi.cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixnightvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techrabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenvogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validation.rnd03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanityfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a70bf161e5e36ddc9304066c1cf3cbab492b43cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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