dfm2.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 29:6a:12:9e:a0:80:3c:21:1f:fe:04:6b was issued on by GlobalSign nv-sa.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:6a:12:9e:a0:80:3c:21:1f:fe:04:6b
Serial Number (int): 12817119468301863766013641835
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: d2:72:96:54:0a:51:2b:9b:5f:8e:c4:59:a1:94:3d:43:c2:59:bd:2c
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a5:6a:fc:fc:8b:07:ed:2b:8c:be:2d:cd:d0:cd:65:d4:59:a9:d0:7f
Fingerprint (sha256): 4b:8d:ac:92:70:d9:fe:18:8f:45:6d:a7:95:c3:58:69:16:61:cc:58:f6:30:be:6b:47:70:08:5d:2d:0f:81:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dfm2.map.fastly.net

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfm2.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dfm2.map.fastly.net
blogs.denverpost.com
crime.denverpost.com
elections.denverpost.com
extras.denverpost.com
mngli.bostonherald.com
mngli.chicoer.com
mngli.dailybreeze.com
mngli.dailybulletin.com
mngli.dailycamera.com
mngli.dailydemocrat.com
mngli.dailyfreeman.com
mngli.dailylocal.com
mngli.dailynews.com
mngli.dailytribune.com
mngli.delcotimes.com
mngli.denverpost.com
mngli.eastbaytimes.com
mngli.lowellsun.com
mngli.macombdaily.com
mngli.marinij.com
mngli.mercurynews.com
mngli.montereyherald.com
mngli.morningjournal.com
mngli.news-herald.com
mngli.ocregister.com
mngli.oneidadispatch.com
mngli.orovillemr.com
mngli.pasadenastarnews.com
mngli.pe.com
mngli.pottsmerc.com
mngli.presstelegram.com
mngli.readingeagle.com
mngli.record-bee.com
mngli.redbluffdailynews.com
mngli.redlandsdailyfacts.com
mngli.reporterherald.com
mngli.santacruzsentinel.com
mngli.saratogian.com
mngli.sbsun.com
mngli.sentinelandenterprise.com
mngli.sgvtribune.com
mngli.themorningsun.com
mngli.theoaklandpress.com
mngli.thereporter.com
mngli.thereporteronline.com
mngli.times-standard.com
mngli.timescall.com
mngli.timesherald.com
mngli.timesheraldonline.com
mngli.trentonian.com
mngli.troyrecord.com
mngli.twincities.com
mngli.ukiahdailyjournal.com
mngli.whittierdailynews.com
mobile-dashboard.digitalfirstmedia.com
www.bayareanewsgroup.com
yourhub.denverpost.com

Other certificates including the domain name dfm2.map.fastly.net

(limited to 100 certificates)
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net

Certificate

The complete raw certificate details for dfm2.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoseGOsA+AO3okCkOVKK3
B7FEtARSUlNZmETocf+H9tfqwtMet7n+mdnoiXMPSDXzLCxdvwsCGqwyqwvKNxDO
zJcuii5HJTU7MY7CXc7Jm6Nd+OSgQg7sU78JrEime3YTFkQnTMj4Ou0FLY1kYI/3
RUri+hfUkwLSBZuwJ9320ymoQYRYbvydzb/MROUT7gsOG7cuAq3goqIkPYukLQeR
I0fmc0K9tR0Nwu+boAuUuXH8Wu5S+n9w0nPOTDL0wOOvo7d36hSixt24x/NpOdqo
VrULdsG6N7474SmglY6zeoAgnGrPsWVCYoG3/5gu9BE3pHVfdF+M0bYFX1Hm1k1y
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12817119468301863766013641835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 16:45:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 18:46:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dfm2.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20548994520593837425071739350284976953269409229361971320442771941746798114265935233374994074414243156609873454131252949446981093446546868826307898492409214446240085490252482506592068539622062529227468696029673464303277172542893271293047563170845093454208992840499681707483791899192925790621918577165170124481740516243229220816487526065900320649868109025859749949439620060561656619101794816977368411275945250889946125679589414486397413125172397334390063052753074291143861177658467687597984638242396042811665033751441808172270243244651837197387892356571899589340651006101438279726877869976910968326560845296910293889613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfm2.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crime.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elections.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extras.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.bostonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.chicoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailybreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailybulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailydemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailyfreeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailylocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.dailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.delcotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.eastbaytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.lowellsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.macombdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.marinij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.mercurynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.montereyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.morningjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.news-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.oneidadispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.orovillemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.pasadenastarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.pe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.pottsmerc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.presstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.readingeagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.record-bee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.redbluffdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.redlandsdailyfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.reporterherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.santacruzsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.saratogian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.sbsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.sentinelandenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.sgvtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.themorningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.theoaklandpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.thereporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.thereporteronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.times-standard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.timescall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.timesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.timesheraldonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.trentonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.troyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.twincities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.ukiahdailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngli.whittierdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-dashboard.digitalfirstmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayareanewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourhub.denverpost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d27296540a512b9b5f8ec459a1943d43c259bd2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000176fca325180000040300473045022100b6eb8340a5a1435848c1d6cb28d53dc036c6e3021708b6d59b7d443a42f8a5ac02205b7cd46a86b5c56e96cad5c896ef2240f7b1ce1e297c58aafd236431be11c00a0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000176fca324f60000040300463044022046031f0099db33eab79834756367a80dd512ecf4bc295a662790845a14a1226b02200b11d52933069cff7a444d5f9c9e4eb302b6d511b2bcfc6f39e9b468fe5831e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ee2e372355a1fdb0230b15817908e4e4e65e1f72a7d69c13ba32ed0efc98df8209a08cce5a891553bd9adda039f21a8ff77b1de6df6653d858e4bea0b2f32a392936d22a214ef53a56ebace2b2cf96c91815937ef28e8f36764969dbec208426893767dd268a6596a2d112de57238e6b6a75e90ce804a164135c6d5cfa32db6a90d1fc27592361778a683bf5349932246a1ff8763c933df983cd61807dc5c4599677b464d989e6fb41362997e6fa3c9635f2b7cdc87a52ede44042f032606f0df90136ebcf99ef7ddf896bf5057b8d84c56e23cb36e7ff728922e3ba041e3260210d05cf33978308bb7332eb323d9553b29319fc3dae679ed7ab07191dc0929