dns-vetting1j.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 46:41:29:9a:05:58:3d:e7:ab:c9:3b:c5 was issued on by GlobalSign nv-sa.
With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 46:41:29:9a:05:58:3d:e7:ab:c9:3b:c5Serial Number (int): 21742727323978616547184294853
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 8a:66:26:38:1f:37:89:11:7b:e1:2d:a3:ea:7d:8e:3c:51:67:1d:29
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 74:f8:5e:3b:9d:e5:b1:da:c7:be:fc:41:4c:11:20:6a:ef:45:1b:1e
Fingerprint (sha256): 4e:aa:fa:bd:a5:52:fe:36:f2:9a:5a:92:f9:aa:1c:66:4c:b2:1c:b1:3c:bf:80:94:fb:21:d0:b2:8e:5f:39:c1
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate dns-vetting1j.map.fastly.net
53
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dns-vetting1j.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dns-vetting1j.map.fastly.net
*.cosmopolitan.it
*.elle.it
*.elledecor.it
*.fragrancefinder.io
*.intelligencer.com
*.marieclaire.it
*.miracorredor.tv
*.qatixuk.io
*.verylocalpittsburgh.com
*.vl-feature.htvapps.com
*.wovenlyrugs.com
analytics.basicattentiontoken.org
appvea.revistavea.com.co
book.londontheatregift.com
boxoffice.theatre-london.org.uk
c.lvimg.jp
cdn.bunchbox.co
cosmopolitan.it
css.appcues.com
elle.it
elledecor.it
govx.com
govx.io
graphql.contentful.com
graphql.flinkly.com
images.congstar.de
img.bygghemma.se
intelligencer.com
jollyroom.de
jollyroom.dk
jollyroom.fi
jollyroom.no
jollyroom.se
marieclaire.it
media.codeweavers.com
mode.com
rassets.vsco.co
rexhomes.com
rlp.cincmedia.com
site.pfm.ebisubook.com
static.a-z.ch
tag.brainient.com
tickets.readersdigest.co.uk
topreport.news
verylocalpittsburgh.com
wovenlyrugs.com
www-stage.netcentric.biz
www.fcgives.org
www.first-tickets.co.uk
www.firstticketsforschools.co.uk
www.planetahuerto.es
www.tickets.readersdigest.co.uk
*.cosmopolitan.it
*.elle.it
*.elledecor.it
*.fragrancefinder.io
*.intelligencer.com
*.marieclaire.it
*.miracorredor.tv
*.qatixuk.io
*.verylocalpittsburgh.com
*.vl-feature.htvapps.com
*.wovenlyrugs.com
analytics.basicattentiontoken.org
appvea.revistavea.com.co
book.londontheatregift.com
boxoffice.theatre-london.org.uk
c.lvimg.jp
cdn.bunchbox.co
cosmopolitan.it
css.appcues.com
elle.it
elledecor.it
govx.com
govx.io
graphql.contentful.com
graphql.flinkly.com
images.congstar.de
img.bygghemma.se
intelligencer.com
jollyroom.de
jollyroom.dk
jollyroom.fi
jollyroom.no
jollyroom.se
marieclaire.it
media.codeweavers.com
mode.com
rassets.vsco.co
rexhomes.com
rlp.cincmedia.com
site.pfm.ebisubook.com
static.a-z.ch
tag.brainient.com
tickets.readersdigest.co.uk
topreport.news
verylocalpittsburgh.com
wovenlyrugs.com
www-stage.netcentric.biz
www.fcgives.org
www.first-tickets.co.uk
www.firstticketsforschools.co.uk
www.planetahuerto.es
www.tickets.readersdigest.co.uk
Other certificates including the domain name dns-vetting1j.map.fastly.net
(limited to 100 certificates)
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
Certificate
The complete raw certificate details for dns-vetting1j.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII8jCCB9qgAwIBAgIMRkEpmgVYPeeryTvFMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAxMDIyMTcx MDA5WhcNMjExMTIyMjAxMTU5WjB4MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5 LCBJbmMuMSUwIwYDVQQDExxkbnMtdmV0dGluZzFqLm1hcC5mYXN0bHkubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FGxkVpHowyRrFdWI2MyvgLd AXXdwN6lxANQ6mw/VDE7esBSs1GLAM4FME0p+DAcsLLxn3dpTzaLLzcVm6qM3Vit ZVhnknqoHe5nwHUG+aHCjuVi2GKp4S713yYHhHbYqP7YrsKQ8jcjTrNaDRIjirwi c9jIoiPFE6F9FeYfKAfBlJZchSuYsDZi8XbWO76DXHaQQs4U1duIfzwTTUk+rraU tw39CVamlM84EGp07iDXZhhWnWE7WdGIEOX9h6jS5Nv/WrE1WIEqVDyrqTQANye8 5QaMHYhTevZJ2kHrGQGGlUhLOBWlu+HTjXGSl2UzYT6F90z1aC1mDqzdOufDkwID AQABo4IFmzCCBZcwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYI KwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Ns b3Vkc3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2Jh bHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEU MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIIEHwYDVR0RBIIEFjCCBBKCHGRu cy12ZXR0aW5nMWoubWFwLmZhc3RseS5uZXSCESouY29zbW9wb2xpdGFuLml0ggkq LmVsbGUuaXSCDiouZWxsZWRlY29yLml0ghQqLmZyYWdyYW5jZWZpbmRlci5pb4IT Ki5pbnRlbGxpZ2VuY2VyLmNvbYIQKi5tYXJpZWNsYWlyZS5pdIIRKi5taXJhY29y cmVkb3IudHaCDCoucWF0aXh1ay5pb4IZKi52ZXJ5bG9jYWxwaXR0c2J1cmdoLmNv bYIYKi52bC1mZWF0dXJlLmh0dmFwcHMuY29tghEqLndvdmVubHlydWdzLmNvbYIh YW5hbHl0aWNzLmJhc2ljYXR0ZW50aW9udG9rZW4ub3JnghhhcHB2ZWEucmV2aXN0 YXZlYS5jb20uY2+CGmJvb2subG9uZG9udGhlYXRyZWdpZnQuY29tgh9ib3hvZmZp Y2UudGhlYXRyZS1sb25kb24ub3JnLnVrggpjLmx2aW1nLmpwgg9jZG4uYnVuY2hi b3guY2+CD2Nvc21vcG9saXRhbi5pdIIPY3NzLmFwcGN1ZXMuY29tggdlbGxlLml0 ggxlbGxlZGVjb3IuaXSCCGdvdnguY29tggdnb3Z4LmlvghZncmFwaHFsLmNvbnRl bnRmdWwuY29tghNncmFwaHFsLmZsaW5rbHkuY29tghJpbWFnZXMuY29uZ3N0YXIu ZGWCEGltZy5ieWdnaGVtbWEuc2WCEWludGVsbGlnZW5jZXIuY29tggxqb2xseXJv b20uZGWCDGpvbGx5cm9vbS5ka4IMam9sbHlyb29tLmZpggxqb2xseXJvb20ubm+C DGpvbGx5cm9vbS5zZYIObWFyaWVjbGFpcmUuaXSCFW1lZGlhLmNvZGV3ZWF2ZXJz LmNvbYIIbW9kZS5jb22CD3Jhc3NldHMudnNjby5jb4IMcmV4aG9tZXMuY29tghFy bHAuY2luY21lZGlhLmNvbYIWc2l0ZS5wZm0uZWJpc3Vib29rLmNvbYINc3RhdGlj LmEtei5jaIIRdGFnLmJyYWluaWVudC5jb22CG3RpY2tldHMucmVhZGVyc2RpZ2Vz dC5jby51a4IOdG9wcmVwb3J0Lm5ld3OCF3Zlcnlsb2NhbHBpdHRzYnVyZ2guY29t gg93b3Zlbmx5cnVncy5jb22CGHd3dy1zdGFnZS5uZXRjZW50cmljLmJpeoIPd3d3 LmZjZ2l2ZXMub3Jnghd3d3cuZmlyc3QtdGlja2V0cy5jby51a4Igd3d3LmZpcnN0 dGlja2V0c2ZvcnNjaG9vbHMuY28udWuCFHd3dy5wbGFuZXRhaHVlcnRvLmVzgh93 d3cudGlja2V0cy5yZWFkZXJzZGlnZXN0LmNvLnVrMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3AlWdDZRY5jAd BgNVHQ4EFgQUimYmOB83iRF74S2j6n2OPFFnHSkwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAAWvIbIoXPKDGt4g94TID8vMcaDvWBV7xURe YS6ptoCAUOGBIU89aF6kUpPHAMIHj5vXLYfBdi2dLDpOFpdaUd3064Fx2QGnqSB+ 1FdWN8QUnTZB4ARRp7gLz2Q8PzYQfYqg61Iy15orMj67seUyrwQIn8NiX92+kBWE 436qMk3EgAtvhCyVyKnsTpAyTdeU843aWEVgo8Qvj3HZO8a1pMmTKhWYtZcQ33BB sjZKaYvd84+bv/A1VFS7B6Ecev3FcoYEye9GW8ywCp5Iw2raAfuiVvWI42/OZO+/ IPiyFbCkW2GfMIkN0eTl/y/4N0xaVyVrX2vqubzq+PY8ujKNiKg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FGxkVpHowyRrFdWI2My vgLdAXXdwN6lxANQ6mw/VDE7esBSs1GLAM4FME0p+DAcsLLxn3dpTzaLLzcVm6qM 3VitZVhnknqoHe5nwHUG+aHCjuVi2GKp4S713yYHhHbYqP7YrsKQ8jcjTrNaDRIj irwic9jIoiPFE6F9FeYfKAfBlJZchSuYsDZi8XbWO76DXHaQQs4U1duIfzwTTUk+ rraUtw39CVamlM84EGp07iDXZhhWnWE7WdGIEOX9h6jS5Nv/WrE1WIEqVDyrqTQA Nye85QaMHYhTevZJ2kHrGQGGlUhLOBWlu+HTjXGSl2UzYT6F90z1aC1mDqzdOufD kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21742727323978616547184294853 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 17:10:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 20:11:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1j.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30842431039218014834953460130733685821231734175389048172404109616509813683504886766883588032948839201594642063043872286273916307017185916282972818994271027925459851018392628214910187513017235648528975013268981510347536239307635400136817711083382201873650642244829374945784314330325413686068957973091631644315487201425053143606162697706077524477291658498581625339078833053738686127679826914213114856325986606106638182179374574334797857212762861320040455270019585814348256936935967215758373874579639020858577753693396679477704768973161092939555298995738363537901375970044378172825151331567157056127845900511761368859539 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1046 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1j.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragrancefinder.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligencer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miracorredor.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qatixuk.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verylocalpittsburgh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vl-feature.htvapps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wovenlyrugs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.basicattentiontoken.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appvea.revistavea.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.londontheatregift.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.theatre-london.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lvimg.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bunchbox.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.appcues.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.contentful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.flinkly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.congstar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.bygghemma.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligencer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jollyroom.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.codeweavers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rassets.vsco.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexhomes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlp.cincmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.pfm.ebisubook.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.a-z.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.brainient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.readersdigest.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreport.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verylocalpittsburgh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wovenlyrugs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.netcentric.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.first-tickets.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstticketsforschools.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetahuerto.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickets.readersdigest.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a6626381f3789117be12da3ea7d8e3c51671d29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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