magentocloud16.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3c:d6:a2:c8:b2:23:f8:6c:86:d3:04:39 was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:d6:a2:c8:b2:23:f8:6c:86:d3:04:39
Serial Number (int): 18828579440233650899247105081
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: d0:d6:f0:6c:a5:2f:5b:b8:32:05:e6:87:1d:21:31:97:43:e9:63:c9
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 83:59:fa:29:54:8c:43:54:ea:ee:6e:bf:b4:ca:8b:13:5e:5f:8e:aa
Fingerprint (sha256): 56:6f:ce:83:8d:16:41:dd:ec:0a:79:c3:78:c3:2a:d6:da:94:d9:4f:b3:bc:fe:97:69:4f:19:ad:2b:2a:22:00

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate magentocloud16.map.fastly.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magentocloud16.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magentocloud16.map.fastly.net
*.rbsellars.com.au
*.ukecigstore.com
*.ver2us.com
ukecigstore.com
ver2us.com

Other certificates including the domain name magentocloud16.map.fastly.net

(limited to 100 certificates)
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net
magentocloud16.map.fastly.net

Certificate

The complete raw certificate details for magentocloud16.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDf4KMi6/fyUg+fc440u
WSzNnBf14pdChICD2hvz/MJX567pI/6vWGqljsdJN59aYXX3ZS6ccWyO+Ns8MlK7
vLoFVfj5RMUP24F1uisKL2ko8Qyno4EqRvI7vYxFLhXcsYUG+f0AiE0QxtAl7UBa
hTVWqEADWsR/NcrmAkt9oBUGnrmyeDwBfBRzegtDRs7jaONUFntIjbrKyvRHHE7P
xaYD2cpJ1y7RB7XCQQIi8hTCi+KbOwAteGpia0EfuMBsFl6f6WZibQ7ssI4RU/SJ
rzK9fZ7NJ3snNu3n9i08oH9UzzK9+DXAc6b8m5Ae+dLaTDFahvJlorCxD29hyHep
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18828579440233650899247105081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 17:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 12:42:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'magentocloud16.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21740587980299542959522709031254008960832618975409075344860932141873804694373210975655470798529257947631809692692416013041897906869639715441544198867282394538165286831912935121712627649906299263549172267743313012916864478699492018547251449693850116726886581663817042597769285437120526718185153565624730087482923682419687213805797916845511205299092052829429065609100845005765838358531125094905818180837171703730252601070359716822055911617607161616162246084797654292248816683376024705830533533387668065713871704847204714756225879626496450794379075956610344190243380854123172001602820674155665066356356252405540702365993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentocloud16.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbsellars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukecigstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ver2us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukecigstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ver2us.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0d6f06ca52f5bb83205e6871d21319743e963c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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