dns-vetting1j.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 7c:bb:be:d9:2d:50:0d:a9:7c:63:6c:e5 was issued on by GlobalSign nv-sa.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7c:bb:be:d9:2d:50:0d:a9:7c:63:6c:e5Serial Number (int): 38603111601955058156537343205
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 8a:66:26:38:1f:37:89:11:7b:e1:2d:a3:ea:7d:8e:3c:51:67:1d:29
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): d2:bd:28:90:23:77:07:63:7b:05:29:8b:98:67:69:99:3b:0c:02:7f
Fingerprint (sha256): 36:35:0b:ca:19:5a:ba:16:e1:61:37:5e:41:7e:e4:54:e9:5e:8b:b0:ca:54:29:97:ad:9c:34:0c:fa:dc:7f:99
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate dns-vetting1j.map.fastly.net
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dns-vetting1j.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dns-vetting1j.map.fastly.net
*.cosmopolitan.it
*.elle.it
*.elledecor.it
*.fragrancefinder.io
*.intelligencer.com
*.marieclaire.it
*.verylocalpittsburgh.com
*.vl-feature.htvapps.com
*.wovenlyrugs.com
analytics.basicattentiontoken.org
appvea.revistavea.com.co
book.londontheatregift.com
boxoffice.theatre-london.org.uk
c.lvimg.jp
cdn.bunchbox.co
cosmopolitan.it
css.appcues.com
elle.it
elledecor.it
govx.com
govx.io
graphql.contentful.com
graphql.flinkly.com
images.congstar.de
img.bygghemma.se
intelligencer.com
jollyroom.de
jollyroom.dk
jollyroom.fi
jollyroom.no
jollyroom.se
marieclaire.it
media.codeweavers.com
mode.com
rassets.vsco.co
rexhomes.com
rlp.cincmedia.com
site.pfm.ebisubook.com
tickets.readersdigest.co.uk
topreport.news
verylocalpittsburgh.com
wovenlyrugs.com
www-stage.netcentric.biz
www.fcgives.org
www.first-tickets.co.uk
www.firstticketsforschools.co.uk
www.planetahuerto.es
www.tickets.readersdigest.co.uk
*.cosmopolitan.it
*.elle.it
*.elledecor.it
*.fragrancefinder.io
*.intelligencer.com
*.marieclaire.it
*.verylocalpittsburgh.com
*.vl-feature.htvapps.com
*.wovenlyrugs.com
analytics.basicattentiontoken.org
appvea.revistavea.com.co
book.londontheatregift.com
boxoffice.theatre-london.org.uk
c.lvimg.jp
cdn.bunchbox.co
cosmopolitan.it
css.appcues.com
elle.it
elledecor.it
govx.com
govx.io
graphql.contentful.com
graphql.flinkly.com
images.congstar.de
img.bygghemma.se
intelligencer.com
jollyroom.de
jollyroom.dk
jollyroom.fi
jollyroom.no
jollyroom.se
marieclaire.it
media.codeweavers.com
mode.com
rassets.vsco.co
rexhomes.com
rlp.cincmedia.com
site.pfm.ebisubook.com
tickets.readersdigest.co.uk
topreport.news
verylocalpittsburgh.com
wovenlyrugs.com
www-stage.netcentric.biz
www.fcgives.org
www.first-tickets.co.uk
www.firstticketsforschools.co.uk
www.planetahuerto.es
www.tickets.readersdigest.co.uk
Other certificates including the domain name dns-vetting1j.map.fastly.net
(limited to 100 certificates)
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
Certificate
The complete raw certificate details for dns-vetting1j.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIrzCCB5egAwIBAgIMfLu+2S1QDal8Y2zlMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAxMDIyMTcw OTEzWhcNMjExMTIyMjAxMTU5WjB4MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5 LCBJbmMuMSUwIwYDVQQDExxkbnMtdmV0dGluZzFqLm1hcC5mYXN0bHkubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FGxkVpHowyRrFdWI2MyvgLd AXXdwN6lxANQ6mw/VDE7esBSs1GLAM4FME0p+DAcsLLxn3dpTzaLLzcVm6qM3Vit ZVhnknqoHe5nwHUG+aHCjuVi2GKp4S713yYHhHbYqP7YrsKQ8jcjTrNaDRIjirwi c9jIoiPFE6F9FeYfKAfBlJZchSuYsDZi8XbWO76DXHaQQs4U1duIfzwTTUk+rraU tw39CVamlM84EGp07iDXZhhWnWE7WdGIEOX9h6jS5Nv/WrE1WIEqVDyrqTQANye8 5QaMHYhTevZJ2kHrGQGGlUhLOBWlu+HTjXGSl2UzYT6F90z1aC1mDqzdOufDkwID AQABo4IFWDCCBVQwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYI KwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Ns b3Vkc3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2Jh bHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEU MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIID3AYDVR0RBIID0zCCA8+CHGRu cy12ZXR0aW5nMWoubWFwLmZhc3RseS5uZXSCESouY29zbW9wb2xpdGFuLml0ggkq LmVsbGUuaXSCDiouZWxsZWRlY29yLml0ghQqLmZyYWdyYW5jZWZpbmRlci5pb4IT Ki5pbnRlbGxpZ2VuY2VyLmNvbYIQKi5tYXJpZWNsYWlyZS5pdIIZKi52ZXJ5bG9j YWxwaXR0c2J1cmdoLmNvbYIYKi52bC1mZWF0dXJlLmh0dmFwcHMuY29tghEqLndv dmVubHlydWdzLmNvbYIhYW5hbHl0aWNzLmJhc2ljYXR0ZW50aW9udG9rZW4ub3Jn ghhhcHB2ZWEucmV2aXN0YXZlYS5jb20uY2+CGmJvb2subG9uZG9udGhlYXRyZWdp ZnQuY29tgh9ib3hvZmZpY2UudGhlYXRyZS1sb25kb24ub3JnLnVrggpjLmx2aW1n Lmpwgg9jZG4uYnVuY2hib3guY2+CD2Nvc21vcG9saXRhbi5pdIIPY3NzLmFwcGN1 ZXMuY29tggdlbGxlLml0ggxlbGxlZGVjb3IuaXSCCGdvdnguY29tggdnb3Z4Lmlv ghZncmFwaHFsLmNvbnRlbnRmdWwuY29tghNncmFwaHFsLmZsaW5rbHkuY29tghJp bWFnZXMuY29uZ3N0YXIuZGWCEGltZy5ieWdnaGVtbWEuc2WCEWludGVsbGlnZW5j ZXIuY29tggxqb2xseXJvb20uZGWCDGpvbGx5cm9vbS5ka4IMam9sbHlyb29tLmZp ggxqb2xseXJvb20ubm+CDGpvbGx5cm9vbS5zZYIObWFyaWVjbGFpcmUuaXSCFW1l ZGlhLmNvZGV3ZWF2ZXJzLmNvbYIIbW9kZS5jb22CD3Jhc3NldHMudnNjby5jb4IM cmV4aG9tZXMuY29tghFybHAuY2luY21lZGlhLmNvbYIWc2l0ZS5wZm0uZWJpc3Vi b29rLmNvbYIbdGlja2V0cy5yZWFkZXJzZGlnZXN0LmNvLnVrgg50b3ByZXBvcnQu bmV3c4IXdmVyeWxvY2FscGl0dHNidXJnaC5jb22CD3dvdmVubHlydWdzLmNvbYIY d3d3LXN0YWdlLm5ldGNlbnRyaWMuYml6gg93d3cuZmNnaXZlcy5vcmeCF3d3dy5m aXJzdC10aWNrZXRzLmNvLnVrgiB3d3cuZmlyc3R0aWNrZXRzZm9yc2Nob29scy5j by51a4IUd3d3LnBsYW5ldGFodWVydG8uZXOCH3d3dy50aWNrZXRzLnJlYWRlcnNk aWdlc3QuY28udWswHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud IwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMB0GA1UdDgQWBBSKZiY4HzeJEXvh LaPqfY48UWcdKTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAom46WY6tROc+QCCMvVotgsw9ILIRjAH7J5ZqlfKQtj7t4E+PRB+bnF1NlBDc DaHRbtf4Zlqy5a/D+MP6jwlhebsqUK8XSCQIctdfoDrSdDe2PBTPkMtfeCH63sI+ /LcVBVhVCA22XLNmR+OCT9BXt38VoB4ZI2nB0kQjFUg+f9DKq6PwHWI2QJoHV/pN 4wCrxg2MDieUjCVinLU8ay6MIoFaV4rzKx4y+07GGLsGyJRp4XUl4FI5np5Oi7aV 4FNYSWnZVuXe0kZwGbjjhvAEC6tK8rHlcO474cnDszduMja/KLu8sqMXHXNRw/5R gIqCx6AL5/fbwKQTo3GopfSQTw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FGxkVpHowyRrFdWI2My vgLdAXXdwN6lxANQ6mw/VDE7esBSs1GLAM4FME0p+DAcsLLxn3dpTzaLLzcVm6qM 3VitZVhnknqoHe5nwHUG+aHCjuVi2GKp4S713yYHhHbYqP7YrsKQ8jcjTrNaDRIj irwic9jIoiPFE6F9FeYfKAfBlJZchSuYsDZi8XbWO76DXHaQQs4U1duIfzwTTUk+ rraUtw39CVamlM84EGp07iDXZhhWnWE7WdGIEOX9h6jS5Nv/WrE1WIEqVDyrqTQA Nye85QaMHYhTevZJ2kHrGQGGlUhLOBWlu+HTjXGSl2UzYT6F90z1aC1mDqzdOufD kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38603111601955058156537343205 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 17:09:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 20:11:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1j.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30842431039218014834953460130733685821231734175389048172404109616509813683504886766883588032948839201594642063043872286273916307017185916282972818994271027925459851018392628214910187513017235648528975013268981510347536239307635400136817711083382201873650642244829374945784314330325413686068957973091631644315487201425053143606162697706077524477291658498581625339078833053738686127679826914213114856325986606106638182179374574334797857212762861320040455270019585814348256936935967215758373874579639020858577753693396679477704768973161092939555298995738363537901375970044378172825151331567157056127845900511761368859539 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (979 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1j.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragrancefinder.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligencer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verylocalpittsburgh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vl-feature.htvapps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wovenlyrugs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.basicattentiontoken.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appvea.revistavea.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.londontheatregift.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.theatre-london.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lvimg.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bunchbox.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.appcues.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.contentful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.flinkly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.congstar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.bygghemma.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligencer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.codeweavers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rassets.vsco.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexhomes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlp.cincmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.pfm.ebisubook.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.readersdigest.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreport.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verylocalpittsburgh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wovenlyrugs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.netcentric.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.first-tickets.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstticketsforschools.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetahuerto.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickets.readersdigest.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a6626381f3789117be12da3ea7d8e3c51671d29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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