dns-vetting1.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 2b:a6:79:67:76:bc:d8:d4:1a:af:c8:b0 was issued on by GlobalSign nv-sa.
With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 2b:a6:79:67:76:bc:d8:d4:1a:af:c8:b0Serial Number (int): 13509110423288885014910978224
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: a7:0b:f1:61:e5:e3:6d:dc:93:04:06:6c:1c:f3:cb:ab:49:2b:43:cc
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): e2:26:1f:d7:93:3c:ef:52:e0:20:43:a7:20:71:03:74:20:25:78:67
Fingerprint (sha256): 29:72:de:21:15:46:b8:f8:32:81:91:c9:9f:8a:2a:0e:dc:74:ed:7c:c9:4d:05:fa:e3:29:2f:73:0b:fd:0a:c4
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate dns-vetting1.map.fastly.net
56
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dns-vetting1.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dns-vetting1.map.fastly.net
*.ott.aetnd.com
*.svod.aetnd.com
aenetworks.com
aetnd.com
aetndigital.com
aetv.com
allure.com
architecturaldigest.com
bonappetit.com
brides.com
cashstar.com
cntraveler.com
conde.io
condenast.io
condenastdigital.com
condenaststudio.com
condenet.com
crimeandinvestigationnetwork.com
details.com
devops.aetnd.com
epicurious.com
ft.com
fyi.tv
gamefuel.info
gc.nordstrom.com
giftcard.nordstrom.com
giftcards.nordstrom.com
givingisgorges.org
glamour.com
golfdigest.com
gq.com
history.com
historyvault.com
lifetimemovieclub.com
mylifetime.com
newyorker.com
pmoqa.aetnd.com
polyfill.io
qa.cashstar.com
self.com
semi.cashstar.com
sixnightvision.com
techrabbit.com
teenvogue.com
user-content.givegab-cdn.com
vanityfair.com
video.aetnd.com
video.aetndigital.com
vip.aetnd.com
vip.aetndigital.com
vogue.com
vts.com
watch.aetnd.com
webmonkey.com
wmagazine.com
*.ott.aetnd.com
*.svod.aetnd.com
aenetworks.com
aetnd.com
aetndigital.com
aetv.com
allure.com
architecturaldigest.com
bonappetit.com
brides.com
cashstar.com
cntraveler.com
conde.io
condenast.io
condenastdigital.com
condenaststudio.com
condenet.com
crimeandinvestigationnetwork.com
details.com
devops.aetnd.com
epicurious.com
ft.com
fyi.tv
gamefuel.info
gc.nordstrom.com
giftcard.nordstrom.com
giftcards.nordstrom.com
givingisgorges.org
glamour.com
golfdigest.com
gq.com
history.com
historyvault.com
lifetimemovieclub.com
mylifetime.com
newyorker.com
pmoqa.aetnd.com
polyfill.io
qa.cashstar.com
self.com
semi.cashstar.com
sixnightvision.com
techrabbit.com
teenvogue.com
user-content.givegab-cdn.com
vanityfair.com
video.aetnd.com
video.aetndigital.com
vip.aetnd.com
vip.aetndigital.com
vogue.com
vts.com
watch.aetnd.com
webmonkey.com
wmagazine.com
Other certificates including the domain name dns-vetting1.map.fastly.net
(limited to 100 certificates)
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
Certificate
The complete raw certificate details for dns-vetting1.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIejCCB2KgAwIBAgIMK6Z5Z3a82NQar8iwMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwMzE5MTcx NjA0WhcNMTgwNTIzMTkzNTU4WjBvMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex FjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xFTATBgNVBAoTDEZhc3RseSwgSW5jLjEk MCIGA1UEAxMbZG5zLXZldHRpbmcxLm1hcC5mYXN0bHkubmV0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGKtCl9slnkEhiaVtdhdlJ0Wnq9otRO1+gEn QtMz15k7AjXXmlqzws8c7kavgqzExIxB2T7YwV516yQaGvZquFl6L7UTSHZYwe8O fVWYa+lVeUs58sn1OB/cyreUwUClf5dVhlUUpQlaIxfN60XbYD1KBw8KAnHWfhdq ZEcocaeKwUr30SUz4qbCLlNDpwzPpUpLm3e7nxexxAznmcns90FzI7o0ON2rv030 inLmNNhEHSgpq5q4ZWlysFRF9yq5I3cEzu4GReAKNktIyeDseEluLAqJHo6lHfMq JPorPbLdyX8ed5cSydA2Ae/eSWCsU39QK4Pl/mOV9Uz/p+YeDQIDAQABo4IFLDCC BSgwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKG Nmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hh MmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29t L2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYB BQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgG BmeBDAECAjAJBgNVHRMEAjAAMIIDsAYDVR0RBIIDpzCCA6OCG2Rucy12ZXR0aW5n MS5tYXAuZmFzdGx5Lm5ldIIPKi5vdHQuYWV0bmQuY29tghAqLnN2b2QuYWV0bmQu Y29tgg5hZW5ldHdvcmtzLmNvbYIJYWV0bmQuY29tgg9hZXRuZGlnaXRhbC5jb22C CGFldHYuY29tggphbGx1cmUuY29tghdhcmNoaXRlY3R1cmFsZGlnZXN0LmNvbYIO Ym9uYXBwZXRpdC5jb22CCmJyaWRlcy5jb22CDGNhc2hzdGFyLmNvbYIOY250cmF2 ZWxlci5jb22CCGNvbmRlLmlvggxjb25kZW5hc3QuaW+CFGNvbmRlbmFzdGRpZ2l0 YWwuY29tghNjb25kZW5hc3RzdHVkaW8uY29tggxjb25kZW5ldC5jb22CIGNyaW1l YW5kaW52ZXN0aWdhdGlvbm5ldHdvcmsuY29tggtkZXRhaWxzLmNvbYIQZGV2b3Bz LmFldG5kLmNvbYIOZXBpY3VyaW91cy5jb22CBmZ0LmNvbYIGZnlpLnR2gg1nYW1l ZnVlbC5pbmZvghBnYy5ub3Jkc3Ryb20uY29tghZnaWZ0Y2FyZC5ub3Jkc3Ryb20u Y29tghdnaWZ0Y2FyZHMubm9yZHN0cm9tLmNvbYISZ2l2aW5naXNnb3JnZXMub3Jn ggtnbGFtb3VyLmNvbYIOZ29sZmRpZ2VzdC5jb22CBmdxLmNvbYILaGlzdG9yeS5j b22CEGhpc3Rvcnl2YXVsdC5jb22CFWxpZmV0aW1lbW92aWVjbHViLmNvbYIObXls aWZldGltZS5jb22CDW5ld3lvcmtlci5jb22CD3Btb3FhLmFldG5kLmNvbYILcG9s eWZpbGwuaW+CD3FhLmNhc2hzdGFyLmNvbYIIc2VsZi5jb22CEXNlbWkuY2FzaHN0 YXIuY29tghJzaXhuaWdodHZpc2lvbi5jb22CDnRlY2hyYWJiaXQuY29tgg10ZWVu dm9ndWUuY29tghx1c2VyLWNvbnRlbnQuZ2l2ZWdhYi1jZG4uY29tgg52YW5pdHlm YWlyLmNvbYIPdmlkZW8uYWV0bmQuY29tghV2aWRlby5hZXRuZGlnaXRhbC5jb22C DXZpcC5hZXRuZC5jb22CE3ZpcC5hZXRuZGlnaXRhbC5jb22CCXZvZ3VlLmNvbYIH dnRzLmNvbYIPd2F0Y2guYWV0bmQuY29tgg13ZWJtb25rZXkuY29tgg13bWFnYXpp bmUuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU pwvxYeXjbdyTBAZsHPPLq0krQ8wwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJV nQ2UWOYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGtc gBUBPXJ1RkLbsG8aCB+tm1wirLWGEafcIusYBg9ETF+olCEBPJGI7Z3eFKJHiOy6 rEszCdLWjJKJtVoFXkdULbdIpxVWIpd6SUOMk3qKvVpSvoRREeS+d/6xqftCE9o7 TsmmajrhUN+MufkIGIdIXiLLbN0H5wK7Hf2O0Z/9rh9jJwd4YLsfzAl8XFtjFnaW H/2PDr/NwOY6Gp59/p35zuVvevmuYI3zkDboeNx4H3XCVcidJGtWxIL/elf6EL7Y n/GT90BY20yeqdqPua18sA7k71knir6YdpjqA5hhCzn/78EczrL7J0/SSsWo5iPX g/rJxvTgxHM6aq9eFM0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGKtCl9slnkEhiaVtdhd lJ0Wnq9otRO1+gEnQtMz15k7AjXXmlqzws8c7kavgqzExIxB2T7YwV516yQaGvZq uFl6L7UTSHZYwe8OfVWYa+lVeUs58sn1OB/cyreUwUClf5dVhlUUpQlaIxfN60Xb YD1KBw8KAnHWfhdqZEcocaeKwUr30SUz4qbCLlNDpwzPpUpLm3e7nxexxAznmcns 90FzI7o0ON2rv030inLmNNhEHSgpq5q4ZWlysFRF9yq5I3cEzu4GReAKNktIyeDs eEluLAqJHo6lHfMqJPorPbLdyX8ed5cSydA2Ae/eSWCsU39QK4Pl/mOV9Uz/p+Ye DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13509110423288885014910978224 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 17:16:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 19:35:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25296319912534563805034805044718475190879992262521373893186381326972866446407027413688673147224976784062047525709285249736754317919783074793869388971879397706682111604083054852516746322884063259045003807854411564552800090078419430443728578342160007298932604989069058661728573526847831522830666789955038171531931924172884232768513503280501583569845701313563630044089554784825384494347891250253805681924629097819311861346732752349020679655701702395478834423884595228178249440279772290096999688610556434051223141908674368156024641394309987017936121960727163085459745008253522900586295140241922894152356382714763149712909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (935 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ott.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svod.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aenetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetndigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecturaldigest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonappetit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntraveler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conde.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenastdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenaststudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimeandinvestigationnetwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'details.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurious.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyi.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamefuel.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gc.nordstrom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.nordstrom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.nordstrom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfdigest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyvault.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimemovieclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylifetime.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmoqa.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyfill.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.cashstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'self.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semi.cashstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixnightvision.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techrabbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenvogue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanityfair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetndigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetndigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.aetnd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmonkey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmagazine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a70bf161e5e36ddc9304066c1cf3cbab492b43cc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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