p.ssl.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 6e:fb:d5:07:88:7b:15:f4:49:fd:64:ab was issued on by GlobalSign nv-sa.
With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 6e:fb:d5:07:88:7b:15:f4:49:fd:64:abSerial Number (int): 34347797464093767583225701547
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: be:dd:09:c5:17:8b:00:b0:b1:8b:6c:bd:9b:d7:5b:12:b2:02:81:0e
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 2c:fd:b2:6a:9a:ef:d2:a5:13:a2:bb:d7:bd:75:e2:42:56:4c:2f:4d
Fingerprint (sha256): 23:a1:d4:6b:7f:19:28:87:25:6c:8c:cd:48:d8:f3:63:1e:68:a1:60:ed:49:dc:4f:6b:cf:c1:37:c9:4a:80:a0
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate p.ssl.fastly.net
72
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for p.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
p.ssl.fastly.net
*.brave.com
*.buzzfeed.com
*.buzzfeednews.com
*.cmcdn.net
*.contagiousmedia.com
*.corebine.com
*.corednacdn.com
*.experiencepoint.com
*.foxtons.co.uk
*.freitag.ch
*.fs.pastbook.com
*.gadventures.ch
*.gadventures.de
*.ggcircuit.com
*.i.thechive.com
*.knect365.com
*.lulus.com
*.mediavine.com
*.mos.org
*.netzwelt.de
*.onceit.co.nz
*.racingpost.com
*.rex.is
*.shave.io
*.sonar.digitalocean.com
*.unsplash.com
*.velpic.com
*.vidyard.com
1stdibs.com
ad.tagdelivery.com
amp.cnn.com
api.pdflayer.com
app.hiresuccess.com
bestpractices.coreinfrastructure.org
brave.com
bundler.io
buzzfeed.com
buzzfeednews.com
cdn.jauntvr.com
cdn.spaces.hightail.com
contagiousmedia.com
corebine.com
data.ripple.com
eightiesyourself.cnn.com
ggcircuit.com
hypebeast.com
knect365.com
live.amano.io
makefastlywork.solutionsbywaters.com
master.bestpractices.coreinfrastructure.org
mediavine.com
mos.org
onceit.co.nz
rex.is
schoologynext.com
seoghoer-fastly-production.shape.dk
staging.bestpractices.coreinfrastructure.org
staging.lightingdirect.com
static.dyn.com
static.parastorage.com
unsplash.com
widget.perfectmarket.com
www.bundler.io
www.jurists.co.jp
www.msgsafe.io
www.onceit.com.au
www.pinalove.com
www.schoologynext.com
www.thaifriendly.com
www.wada-ama.org
zensaskincare.com
*.brave.com
*.buzzfeed.com
*.buzzfeednews.com
*.cmcdn.net
*.contagiousmedia.com
*.corebine.com
*.corednacdn.com
*.experiencepoint.com
*.foxtons.co.uk
*.freitag.ch
*.fs.pastbook.com
*.gadventures.ch
*.gadventures.de
*.ggcircuit.com
*.i.thechive.com
*.knect365.com
*.lulus.com
*.mediavine.com
*.mos.org
*.netzwelt.de
*.onceit.co.nz
*.racingpost.com
*.rex.is
*.shave.io
*.sonar.digitalocean.com
*.unsplash.com
*.velpic.com
*.vidyard.com
1stdibs.com
ad.tagdelivery.com
amp.cnn.com
api.pdflayer.com
app.hiresuccess.com
bestpractices.coreinfrastructure.org
brave.com
bundler.io
buzzfeed.com
buzzfeednews.com
cdn.jauntvr.com
cdn.spaces.hightail.com
contagiousmedia.com
corebine.com
data.ripple.com
eightiesyourself.cnn.com
ggcircuit.com
hypebeast.com
knect365.com
live.amano.io
makefastlywork.solutionsbywaters.com
master.bestpractices.coreinfrastructure.org
mediavine.com
mos.org
onceit.co.nz
rex.is
schoologynext.com
seoghoer-fastly-production.shape.dk
staging.bestpractices.coreinfrastructure.org
staging.lightingdirect.com
static.dyn.com
static.parastorage.com
unsplash.com
widget.perfectmarket.com
www.bundler.io
www.jurists.co.jp
www.msgsafe.io
www.onceit.com.au
www.pinalove.com
www.schoologynext.com
www.thaifriendly.com
www.wada-ama.org
zensaskincare.com
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
Certificate
The complete raw certificate details for p.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILgTCCCmmgAwIBAgIMbvvVB4h7FfRJ/WSrMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwMjA4MTIx OTI3WhcNMjEwMjIyMTcxNDI3WjBsMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMRkwFwYDVQQDDBBwLnNzbC5mYXN0bHkubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxnYBUvHyFnQfIuEo5T6vC7nHH1dMJuX8DYts+VLN YHYxZ0WC6vvb4PujuB2i7H0N1KlD/ocNkGDY3goVXb94Lk9kRdzdTNQh4TmljQcX 9VtdbzcKd5d+9lGQYnRypmLRmyv0QVC/XuQ2J4PfYzKenRLTLlP0BMOkEPH0Gq5T XVL7tAHvJMS41HxDKEwNskw3xpYQ8mrs36EvRt24djCb+taiW2g4Y3ayaKj0OV7n FarcJ+AM942y9vOqZfUYcMzMXU8oQO0m9dmPzJHByz6rFJ6DVA7v+tMdAkkwj7KS L6KKaGa375f5ZSZLB5K64jQWvIAmyBa7J/XM57FtX9m5rwIDAQABo4IINjCCCDIw DgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0 dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmcz LmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Ns b3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUH AgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeB DAECAjAJBgNVHRMEAjAAMIIFTwYDVR0RBIIFRjCCBUKCEHAuc3NsLmZhc3RseS5u ZXSCCyouYnJhdmUuY29tgg4qLmJ1enpmZWVkLmNvbYISKi5idXp6ZmVlZG5ld3Mu Y29tggsqLmNtY2RuLm5ldIIVKi5jb250YWdpb3VzbWVkaWEuY29tgg4qLmNvcmVi aW5lLmNvbYIQKi5jb3JlZG5hY2RuLmNvbYIVKi5leHBlcmllbmNlcG9pbnQuY29t gg8qLmZveHRvbnMuY28udWuCDCouZnJlaXRhZy5jaIIRKi5mcy5wYXN0Ym9vay5j b22CECouZ2FkdmVudHVyZXMuY2iCECouZ2FkdmVudHVyZXMuZGWCDyouZ2djaXJj dWl0LmNvbYIQKi5pLnRoZWNoaXZlLmNvbYIOKi5rbmVjdDM2NS5jb22CCyoubHVs dXMuY29tgg8qLm1lZGlhdmluZS5jb22CCSoubW9zLm9yZ4INKi5uZXR6d2VsdC5k ZYIOKi5vbmNlaXQuY28ubnqCECoucmFjaW5ncG9zdC5jb22CCCoucmV4Lmlzggoq LnNoYXZlLmlvghgqLnNvbmFyLmRpZ2l0YWxvY2Vhbi5jb22CDioudW5zcGxhc2gu Y29tggwqLnZlbHBpYy5jb22CDSoudmlkeWFyZC5jb22CCzFzdGRpYnMuY29tghJh ZC50YWdkZWxpdmVyeS5jb22CC2FtcC5jbm4uY29tghBhcGkucGRmbGF5ZXIuY29t ghNhcHAuaGlyZXN1Y2Nlc3MuY29tgiRiZXN0cHJhY3RpY2VzLmNvcmVpbmZyYXN0 cnVjdHVyZS5vcmeCCWJyYXZlLmNvbYIKYnVuZGxlci5pb4IMYnV6emZlZWQuY29t ghBidXp6ZmVlZG5ld3MuY29tgg9jZG4uamF1bnR2ci5jb22CF2Nkbi5zcGFjZXMu aGlnaHRhaWwuY29tghNjb250YWdpb3VzbWVkaWEuY29tggxjb3JlYmluZS5jb22C D2RhdGEucmlwcGxlLmNvbYIYZWlnaHRpZXN5b3Vyc2VsZi5jbm4uY29tgg1nZ2Np cmN1aXQuY29tgg1oeXBlYmVhc3QuY29tggxrbmVjdDM2NS5jb22CDWxpdmUuYW1h bm8uaW+CJG1ha2VmYXN0bHl3b3JrLnNvbHV0aW9uc2J5d2F0ZXJzLmNvbYIrbWFz dGVyLmJlc3RwcmFjdGljZXMuY29yZWluZnJhc3RydWN0dXJlLm9yZ4INbWVkaWF2 aW5lLmNvbYIHbW9zLm9yZ4IMb25jZWl0LmNvLm56ggZyZXguaXOCEXNjaG9vbG9n eW5leHQuY29tgiNzZW9naG9lci1mYXN0bHktcHJvZHVjdGlvbi5zaGFwZS5ka4Is c3RhZ2luZy5iZXN0cHJhY3RpY2VzLmNvcmVpbmZyYXN0cnVjdHVyZS5vcmeCGnN0 YWdpbmcubGlnaHRpbmdkaXJlY3QuY29tgg5zdGF0aWMuZHluLmNvbYIWc3RhdGlj LnBhcmFzdG9yYWdlLmNvbYIMdW5zcGxhc2guY29tghh3aWRnZXQucGVyZmVjdG1h cmtldC5jb22CDnd3dy5idW5kbGVyLmlvghF3d3cuanVyaXN0cy5jby5qcIIOd3d3 Lm1zZ3NhZmUuaW+CEXd3dy5vbmNlaXQuY29tLmF1ghB3d3cucGluYWxvdmUuY29t ghV3d3cuc2Nob29sb2d5bmV4dC5jb22CFHd3dy50aGFpZnJpZW5kbHkuY29tghB3 d3cud2FkYS1hbWEub3JnghF6ZW5zYXNraW5jYXJlLmNvbTAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFL7dCcUXiwCwsYtsvZvXWxKyAoEO MB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMIIBfAYKKwYBBAHWeQIE AgSCAWwEggFoAWYAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAA AWjNDGo4AAAEAwBGMEQCIBIe5ZPegbkuNy8TymH6SPur5KRp/SkIDTnH4nE+tDRD AiBYXOcwB58jK8Vs25SNKx97eG7SQzEyqVsc10xHDxKjkQB1AO5Lvbd1zmC64UJp H6vhnmajD35fsHLYgwDEe4l6qP3LAAABaM0MZvYAAAQDAEYwRAIgfhGPGyzERRSM oQpUW1+wCfl2jVpHWe9tMLQdCqPOdHICIAh9fjviRucSGaTeIUnV+BNYeaUPiCoU YT4rME67wp45AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFo zQxnKQAABAMARzBFAiEA3/ubfSyeo7unGVQpYTa1qaN9v6j+2RBaMXP2Y85ZghsC IGtvTSZ/PNe6+4eYMJVC5qqDRIOtJhLIwosPhhik8m2HMA0GCSqGSIb3DQEBCwUA A4IBAQAqJvJvCeJ+K4G5681UTXXBowBiyDiTfRtmsW+vOobP8+iAOHIg7jSaw44K SBoFOTkdpT0mPSuQ5fFM1t3iTANeg1eN5bTGObgrna0vC0PScMUgwYzNBO3Rwe1I 8BhDrEbkVC8IibC/stFB4LwlG0MTqIHb2wvFj6T73NCZHu938YgTilF1jJ5HgD97 JaXbZaEh0w3KSJcGU5zv5zgQ/a+ZYdKhbpTJXutxSJDPnt0iS28jmJrv+81hzXGy 1Pyn3XTSqr2mm2Mw9Ajr2tI/WBWf0ukqsuC3MfG7LwICmSwRAdf1Lvh7qjeHgvIe N8n7AHLIiYiCSbElDnOoMoVd85H5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnYBUvHyFnQfIuEo5T6v C7nHH1dMJuX8DYts+VLNYHYxZ0WC6vvb4PujuB2i7H0N1KlD/ocNkGDY3goVXb94 Lk9kRdzdTNQh4TmljQcX9VtdbzcKd5d+9lGQYnRypmLRmyv0QVC/XuQ2J4PfYzKe nRLTLlP0BMOkEPH0Gq5TXVL7tAHvJMS41HxDKEwNskw3xpYQ8mrs36EvRt24djCb +taiW2g4Y3ayaKj0OV7nFarcJ+AM942y9vOqZfUYcMzMXU8oQO0m9dmPzJHByz6r FJ6DVA7v+tMdAkkwj7KSL6KKaGa375f5ZSZLB5K64jQWvIAmyBa7J/XM57FtX9m5 rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 34347797464093767583225701547 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 12:19:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 17:14:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'p.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25053374902329793523602608478719647064088127608229975079408807916661418991996335434871488511718280667553341599406004160866172848848158006534815655594571105573669082603149775866186554277964141377287645803307022486351133666389096975744713847017126368642095870053173588806265535980066090089619851647777893796513536751807713865205466829790108165560699312523218295615246201821554445910459488572379645286681850015277714292965256763938764675938126176091623070030259429147136769092259592587459941330429235994081258929462384174269473250114307245556264450673039190936924238118114393257726079145332476674140216194359966637341103 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1350 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeednews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmcdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contagiousmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corebine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corednacdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experiencepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxtons.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freitag.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pastbook.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadventures.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggcircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.thechive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knect365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lulus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediavine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netzwelt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onceit.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racingpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rex.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shave.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonar.digitalocean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unsplash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velpic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidyard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.tagdelivery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pdflayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.hiresuccess.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.coreinfrastructure.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundler.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeednews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.jauntvr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.spaces.hightail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contagiousmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corebine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.ripple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightiesyourself.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggcircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypebeast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knect365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.amano.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makefastlywork.solutionsbywaters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.bestpractices.coreinfrastructure.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediavine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceit.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rex.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoologynext.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoghoer-fastly-production.shape.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bestpractices.coreinfrastructure.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lightingdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dyn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.parastorage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsplash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.perfectmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundler.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurists.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msgsafe.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceit.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinalove.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoologynext.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaifriendly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wada-ama.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zensaskincare.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bedd09c5178b00b0b18b6cbd9bd75b12b202810e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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