ticketmaster5.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2a:13:5c:d7:6c:1b:0e:db:cb:64:6f:02 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:13:5c:d7:6c:1b:0e:db:cb:64:6f:02
Serial Number (int): 13021778434625407013313867522
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 59:4b:33:14:1f:a1:d3:a7:74:c7:3e:7f:f4:9a:e7:98:0a:c4:f7:12
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 91:ca:fd:ac:e5:66:ad:4c:f0:26:2e:09:86:53:94:07:89:41:63:fa
Fingerprint (sha256): 4a:df:fb:d8:9d:60:f6:d1:9b:8c:47:1f:ed:36:66:4e:76:8f:f3:45:fd:7c:68:8d:4b:8f:a5:60:9c:96:bf:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster5.map.fastly.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster5.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster5.map.fastly.net
offers-preprod.ticketmaster.net
tmdev.co
www.tmdev.co

Other certificates including the domain name ticketmaster5.map.fastly.net

(limited to 100 certificates)
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster5.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+RjM0ld55zDpQYmGTy
Tgi7SJFS71wMrE+VKcVzQ7zQAtYCAw1SOmpiE/B7Jd7XI5lErHTXfpkrKO/eNn/l
aMPLTfMf7uQZBLUYbyC8ZII2uRJqHGiXQWPZNp/QgX0SbqjGjcby3mFeN2k5AYqI
SBPMkpeKiIfKdDBXYVBcXDkIvM0hhHtBp0hiuiH974xbq4NGMEdOBuwBeSO35LEU
HpYT4NznxEihbg5D9/z6jy/Toj75HJbWpSnp3/wRxokC3or4+VgqKs4EqGUTMtOO
BVqNauT26CLEkFzdaEps+foHHwXoQ/YWGr/vVCSAIJayanzVFTGEn0jHA4Adt5CB
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13021778434625407013313867522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 22:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 14:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketmaster5.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26470381818967568019460862420579362911074022209255498608359260606387459735070618870551044733724550981157397474483503257787793218228385952540832245527934612360341887053019938186527506257501011301610929465799529890327814821592301550403428957581871741065510760410186387161118720339298328938519814951678109182778566277208639141931597190336558456067272439050640119055807826591440946571111565122810129036117619344024146449460677375047940620438974381768556080844759100851223270151095648900971847633841287812503877085381645651571272485546234141038835725367539562683272551780748702687790952128800083883876394641256753885381011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster5.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers-preprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmdev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmdev.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							594b33141fa1d3a774c73e7ff49ae7980ac4f712
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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