dns-vetting1k.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 48:9c:c6:1b:18:28:cc:61:57:7c:1b:7f was issued on by GlobalSign nv-sa.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:9c:c6:1b:18:28:cc:61:57:7c:1b:7f
Serial Number (int): 22472448663363291253778946943
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c5:fe:8f:be:ca:e3:6a:ed:53:c0:39:fb:7f:63:90:d6:ce:6e:5f:fd
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): b1:e6:27:f5:82:ec:d5:04:80:6e:79:07:b7:44:07:08:e5:fc:34:64
Fingerprint (sha256): 4c:fc:23:42:9d:67:6c:8f:cd:f4:be:ba:b1:81:4d:3f:ba:c6:69:f8:f4:61:66:82:fb:73:6a:76:16:16:56:75

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dns-vetting1k.map.fastly.net

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dns-vetting1k.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dns-vetting1k.map.fastly.net
*.allure.com
*.architecturaldigest.com
*.backchannel.com
*.bonappetit.com
*.brides.com
*.cntraveler.com
*.condenast.com
*.condenasthealth.com
*.encoretickets.co.uk
*.epicurious.com
*.fandom-dev.pl
*.fandom-dev.us
*.glamour.com
*.gq.com
*.londontheatre.co.uk
*.money.radiotimes.com
*.newyorker.com
*.perfectinfo.com
*.pitchfork.com
*.self.com
*.sellpoint.net
*.sellpoints.com
*.teenvogue.com
*.them.us
*.tixuk.com
*.tixuk.io
*.trendhim.sk
*.walibi.nl
*.wired.com
*.wmag.com
activistmonitor.com
ads.thestudio.condenast.com
bricoman.fr
bricomart.es
informationvine.com
lvimg.jp.stg.lvs.space
magazine.custompc.co.uk
magazine.healthandfitnessonline.co.uk
prep-s1.lmcdn.fr
pro.eslgaming.com
reader.c4isrnet.com
reader.federaltimes.com
reader.fifthdomain.com
staging.vinoshipper.com
theme.gartner.com
www.directexpose.com
www.icepop.com
www.spyhappyrx.com

Other certificates including the domain name dns-vetting1k.map.fastly.net

(limited to 100 certificates)
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net

Certificate

The complete raw certificate details for dns-vetting1k.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIgDCCB2igAwIBAgIMSJzGGxgozGFXfBt/MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAxMDIyMTc1
OTA5WhcNMjExMTIyMjAxMjIzWjB4MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMSUwIwYDVQQDExxkbnMtdmV0dGluZzFrLm1hcC5mYXN0bHkubmV0MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsUW3tqk9yo/nRj2xYy8uI6c
gPeZKAl65Z2TqHvY9XdnTFA6g2VZq0ieUksCccW+j/EnSaGhIIjt6dMDUUdrCWWX
hjKv7RSn+hO74UpniB2aH//oelxGPLtp/VqH1j8eVQRv7wvZKE6nn8/AN5g3rnUd
TkOrW+Bn8WSUOf7ILAS1RcByLleFmAlrjN+HmihxkD/06LS0/2S7DGkuDIDEGzn9
PfaZHB822mYZLkemC+Yh8fNYEuQJVeM4UngWsB/LOFUe7ozKtDjXMyMImEOIMWok
00YDi60+G8dBhaVDH6seR1LNoh0MsR+M7tXpJlcTJbiQQmEfTpRMh+RHCZFfGQID
AQABo4IFKTCCBSUwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYI
KwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Ns
b3Vkc3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2Jh
bHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEU
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIIDrQYDVR0RBIIDpDCCA6CCHGRu
cy12ZXR0aW5nMWsubWFwLmZhc3RseS5uZXSCDCouYWxsdXJlLmNvbYIZKi5hcmNo
aXRlY3R1cmFsZGlnZXN0LmNvbYIRKi5iYWNrY2hhbm5lbC5jb22CECouYm9uYXBw
ZXRpdC5jb22CDCouYnJpZGVzLmNvbYIQKi5jbnRyYXZlbGVyLmNvbYIPKi5jb25k
ZW5hc3QuY29tghUqLmNvbmRlbmFzdGhlYWx0aC5jb22CFSouZW5jb3JldGlja2V0
cy5jby51a4IQKi5lcGljdXJpb3VzLmNvbYIPKi5mYW5kb20tZGV2LnBsgg8qLmZh
bmRvbS1kZXYudXOCDSouZ2xhbW91ci5jb22CCCouZ3EuY29tghUqLmxvbmRvbnRo
ZWF0cmUuY28udWuCFioubW9uZXkucmFkaW90aW1lcy5jb22CDyoubmV3eW9ya2Vy
LmNvbYIRKi5wZXJmZWN0aW5mby5jb22CDyoucGl0Y2hmb3JrLmNvbYIKKi5zZWxm
LmNvbYIPKi5zZWxscG9pbnQubmV0ghAqLnNlbGxwb2ludHMuY29tgg8qLnRlZW52
b2d1ZS5jb22CCSoudGhlbS51c4ILKi50aXh1ay5jb22CCioudGl4dWsuaW+CDSou
dHJlbmRoaW0uc2uCCyoud2FsaWJpLm5sggsqLndpcmVkLmNvbYIKKi53bWFnLmNv
bYITYWN0aXZpc3Rtb25pdG9yLmNvbYIbYWRzLnRoZXN0dWRpby5jb25kZW5hc3Qu
Y29tggticmljb21hbi5mcoIMYnJpY29tYXJ0LmVzghNpbmZvcm1hdGlvbnZpbmUu
Y29tghZsdmltZy5qcC5zdGcubHZzLnNwYWNlghdtYWdhemluZS5jdXN0b21wYy5j
by51a4IlbWFnYXppbmUuaGVhbHRoYW5kZml0bmVzc29ubGluZS5jby51a4IQcHJl
cC1zMS5sbWNkbi5mcoIRcHJvLmVzbGdhbWluZy5jb22CE3JlYWRlci5jNGlzcm5l
dC5jb22CF3JlYWRlci5mZWRlcmFsdGltZXMuY29tghZyZWFkZXIuZmlmdGhkb21h
aW4uY29tghdzdGFnaW5nLnZpbm9zaGlwcGVyLmNvbYIRdGhlbWUuZ2FydG5lci5j
b22CFHd3dy5kaXJlY3RleHBvc2UuY29tgg53d3cuaWNlcG9wLmNvbYISd3d3LnNw
eWhhcHB5cnguY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNV
HSMEGDAWgBSpK4fhziRHOxu/z4U3AlWdDZRY5jAdBgNVHQ4EFgQUxf6Pvsrjau1T
wDn7f2OQ1s5uX/0wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFx34dPe6yeYu7jAuyRo0IdrADl1APGCZvEpZOofGbXbERGF5RtpZay6k2wB
gC5/3CKs/4tf8l8KNAMrjWR9ULoSoFTsUJev5yuN6yz+HtNR70EJE0DfjyQH05Hw
IYLgPwfqXBi4fRYOzVybpUR/vcXt/tsz9F9cOwU6F1wU92S1Ti5zDnwp8NnCqSjN
OJ9bAeAW4EZlFjFEUoSlPI5ZabUp3bkx63wSXsNKVswB2qzgm+6swbhUT917vPgG
qwv9xUAdTzevtSzKqRE3AyYA4lWOp9eKc3fFxTOzyZUqGYoVkOunOlqphPwe9zXP
vqWe+KFkd5/BNJXvJdATbJH5kjg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsUW3tqk9yo/nRj2xYy8
uI6cgPeZKAl65Z2TqHvY9XdnTFA6g2VZq0ieUksCccW+j/EnSaGhIIjt6dMDUUdr
CWWXhjKv7RSn+hO74UpniB2aH//oelxGPLtp/VqH1j8eVQRv7wvZKE6nn8/AN5g3
rnUdTkOrW+Bn8WSUOf7ILAS1RcByLleFmAlrjN+HmihxkD/06LS0/2S7DGkuDIDE
Gzn9PfaZHB822mYZLkemC+Yh8fNYEuQJVeM4UngWsB/LOFUe7ozKtDjXMyMImEOI
MWok00YDi60+G8dBhaVDH6seR1LNoh0MsR+M7tXpJlcTJbiQQmEfTpRMh+RHCZFf
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22472448663363291253778946943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 17:59:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 20:12:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1k.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26102279197828022376659541568313029808373641902011513475028580802936974954956167956736838686146949961450079094185387017583831987919360096542670186743819149490139949155555157121562779240028120164149017553695079280213622924981826424493902410530351190779643407217419858166182872940533773810290858379360177357059808793028031869765234038152115850251483045243873934771948108215882270727237387543799337105242677148915044129688126725537186008405977505784833283644643803664676373965529737004090269945971836003581686579950055048138679142584492692935304859755788206276149209944330817195653775054506596575198109404739195211177753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1k.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.architecturaldigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonappetit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cntraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condenast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condenasthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encoretickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epicurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fandom-dev.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fandom-dev.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londontheatre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitchfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.self.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellpoint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenvogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.them.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tixuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tixuk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendhim.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activistmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.thestudio.condenast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricoman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricomart.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvimg.jp.stg.lvs.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep-s1.lmcdn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.eslgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.c4isrnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.federaltimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.fifthdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vinoshipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.gartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directexpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icepop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spyhappyrx.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5fe8fbecae36aed53c039fb7f6390d6ce6e5ffd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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