s2-cloudinary-pin.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 71:e9:e4:1c:51:17:f3:a8:b8:d5:4a:0f was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:e9:e4:1c:51:17:f3:a8:b8:d5:4a:0f
Serial Number (int): 35254563047692536654100515343
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f6:81:5b:28:e8:4a:ca:be:88:73:87:f7:47:f6:ac:d1:c5:dd:83:99
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 1f:8f:48:d8:80:fc:7d:06:fd:5f:28:5e:80:06:05:58:b2:df:13:52
Fingerprint (sha256): 4e:7c:26:fb:01:f2:f1:2c:f3:8e:f8:2c:40:19:7e:1f:c8:ab:e5:bc:64:cb:20:da:2f:e3:a8:c4:4b:9f:19:01

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate s2-cloudinary-pin.map.fastly.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2-cloudinary-pin.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2-cloudinary-pin.map.fastly.net

Other certificates including the domain name s2-cloudinary-pin.map.fastly.net

(limited to 100 certificates)
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net

Certificate

The complete raw certificate details for s2-cloudinary-pin.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Wc1GNPEdj/+eIkJaGB
n1LVZe+E9kxCDGopHT4tB79x/8qrlPDXMzeubM05jaqo1MkfTqopbywxKhXiLhg3
1ZaIxEFwVMhU1iEAIZ6OkwhWgFJcLJ3P92U8dRlzxHjs48657/qnUrx71ww9RTt5
hTV+Vp5XmsyGjAh5MG7ckuMRgHRSJdTzi4GTX8QIWr2cijLooP+ahk+xb3h/37Aq
0hoLzFEJhnzv17jANub3WnANHepuSPP7emJlFwjC6ubY3jnKkX7TfbX9YCDZY6gz
2DiEvX4xmIOYAON5KDLUBqQapq8c8m9g7p9neZFhJd2lH4+dfCSN6ZxaFabeDASo
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35254563047692536654100515343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 12:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:59:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's2-cloudinary-pin.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22654653531342515044302898900131411218086863233269810094252401299509649368515245966725757734192333480696106725149575578273025135960345967863018748403542814083691772765682625220680181986475347480878643341889485202598172993064316981106109728664608308966638753484539297844510294634862335219445913121894898065279556631991821925592905367765600275946308921146988801299850708510677155698206825030504625910766186537457840931601004558631839355894487077957492111259636380941731344496536008944206080468405305924194297278061417498012776953991994694214907995176992630987730317911660132700464969224969203764585354159213484785838117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2-cloudinary-pin.map.fastly.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6815b28e84acabe887387f747f6acd1c5dd8399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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