*.b.ssl.fastly.net
- Fastly, Inc. -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 9f:3f:c5:58:09:d6:bf:a3:63:d4:32 was issued on by GlobalSign nv-sa.
With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 9f:3f:c5:58:09:d6:bf:a3:63:d4:32Serial Number (int): 192520354759567015904793650
Serial Number lenght: 88 bits, 11 octets
SubjectKeyId: f7:57:c7:78:d3:aa:8c:81:e0:a6:75:2a:ed:66:24:34:3d:c1:6c:52
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): fb:7c:44:2b:06:14:32:e8:03:ec:5e:dd:67:d9:df:be:71:63:a7:2a
Fingerprint (sha256): 5c:42:6a:9c:61:c5:37:69:11:28:2c:89:a0:e4:96:69:53:61:00:0a:cc:24:a6:8f:08:73:28:82:3f:dc:c1:bf
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Check the revocation status for certificate *.b.ssl.fastly.net
61
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.b.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.b.ssl.fastly.net
*.ahalogy.com
*.altmetric.com
*.bandpagecdn.net
*.club-house.io
*.data-cdn.linz.govt.nz
*.datadoghq.com
*.edge.fastly-streams.com
*.evbstatic.com
*.eventbrite.com
*.ftcdn.net
*.getpebble.com
*.hipmunkstaging.com
*.impdesk.com
*.inkling.com
*.lonelyplanet.com
*.massrel.io
*.n3twork.com
*.nr-assets.net
*.o0bc.com
*.o0bg.com
*.pressly.com
*.pubnub.com
*.reversinglabs.com
*.salon.com
*.shopifycdn.com
*.staticlp.com
*.uberguide.com
*.vimeocdn.com
altmetric.com
api.demo.hoteltonight-test.com
awas.aweber-static.com
campus.tekla.com
cdn.crate.io
cdn.ravenjs.com
cdn.shopify.com
cdn.vhx.tv
cdn1.sharperimage.com
crate.io
edge01.chartbeat.net
forms.aweber.com
getpebble.com
i.goldstar.com
i.gse.io
mapbox.com
metacpan.org
mobile-collector.newrelic.com
odeon-fastly.krankikom.de
pasteup.guim.co.uk
pressly.com
s.swiftypecdn.com
t.sellpoints.com
tiles.mapbox.com
www.everplans.com
www.mapbox.com
www.myswitzerland.com
www.pubnub.com
www.qa.safariflow.com
www.upworthy.com
www.wayfair.co.uk
b.ssl.fastly.net
*.ahalogy.com
*.altmetric.com
*.bandpagecdn.net
*.club-house.io
*.data-cdn.linz.govt.nz
*.datadoghq.com
*.edge.fastly-streams.com
*.evbstatic.com
*.eventbrite.com
*.ftcdn.net
*.getpebble.com
*.hipmunkstaging.com
*.impdesk.com
*.inkling.com
*.lonelyplanet.com
*.massrel.io
*.n3twork.com
*.nr-assets.net
*.o0bc.com
*.o0bg.com
*.pressly.com
*.pubnub.com
*.reversinglabs.com
*.salon.com
*.shopifycdn.com
*.staticlp.com
*.uberguide.com
*.vimeocdn.com
altmetric.com
api.demo.hoteltonight-test.com
awas.aweber-static.com
campus.tekla.com
cdn.crate.io
cdn.ravenjs.com
cdn.shopify.com
cdn.vhx.tv
cdn1.sharperimage.com
crate.io
edge01.chartbeat.net
forms.aweber.com
getpebble.com
i.goldstar.com
i.gse.io
mapbox.com
metacpan.org
mobile-collector.newrelic.com
odeon-fastly.krankikom.de
pasteup.guim.co.uk
pressly.com
s.swiftypecdn.com
t.sellpoints.com
tiles.mapbox.com
www.everplans.com
www.mapbox.com
www.myswitzerland.com
www.pubnub.com
www.qa.safariflow.com
www.upworthy.com
www.wayfair.co.uk
b.ssl.fastly.net
Certificate
The complete raw certificate details for *.b.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJajCCCFKgAwIBAgIMAJ8/xVgJ1r+jY9QyMA0GCSqGSIb3DQEBCwUAMGYxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMTYxMTEwMTk1NjA1WhcNMTgwODE5MTg1MzQwWjBuMQswCQYDVQQGEwJV UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEV MBMGA1UECgwMRmFzdGx5LCBJbmMuMRswGQYDVQQDDBIqLmIuc3NsLmZhc3RseS5u ZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCml8DvbVHNhuA1303B UVCEYk4Le7ukOUQC2rLWBL0u2lKl1V5OYNNNXcq0NXbZ1KVYHYV0lGhuWUgl1zso rJCAwl5TdzWnRXpnO+CvQSOyGngcRq9GhfAOKfksD4vqpfjd3lrxkOwsAmDmBCqj u0STyMQFGXRKNga9Mn5erZDGS1wadhY0C87o2IwU5SBiJdtjetJizO/aMVXCQ29b BI2P0IPSIqV/WDxpeoa9vY08G5go1Hp9pcKZtK/t2IoAj7UD9qYEfw/ayCZs57tf 32yV7BcHzS7ZHzLY6IbTzj3w0iHLWxKnd96mHKexFMO0ggqR+Aq6FB7wrQVKdhZA q5z7AgMBAAGjggYOMIIGCjAOBgNVHQ8BAf8EBAMCBaAwgaAGCCsGAQUFBwEBBIGT MIGQME0GCCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2Nh Y2VydC9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEFBQcwAYYz aHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hh MmcyMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBz Oi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNV HRMEAjAAMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5j b20vZ3MvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIuY3JsMIIERgYDVR0RBIIEPTCC BDmCEiouYi5zc2wuZmFzdGx5Lm5ldIINKi5haGFsb2d5LmNvbYIPKi5hbHRtZXRy aWMuY29tghEqLmJhbmRwYWdlY2RuLm5ldIIPKi5jbHViLWhvdXNlLmlvghcqLmRh dGEtY2RuLmxpbnouZ292dC5ueoIPKi5kYXRhZG9naHEuY29tghkqLmVkZ2UuZmFz dGx5LXN0cmVhbXMuY29tgg8qLmV2YnN0YXRpYy5jb22CECouZXZlbnRicml0ZS5j b22CCyouZnRjZG4ubmV0gg8qLmdldHBlYmJsZS5jb22CFCouaGlwbXVua3N0YWdp bmcuY29tgg0qLmltcGRlc2suY29tgg0qLmlua2xpbmcuY29tghIqLmxvbmVseXBs YW5ldC5jb22CDCoubWFzc3JlbC5pb4INKi5uM3R3b3JrLmNvbYIPKi5uci1hc3Nl dHMubmV0ggoqLm8wYmMuY29tggoqLm8wYmcuY29tgg0qLnByZXNzbHkuY29tggwq LnB1Ym51Yi5jb22CEyoucmV2ZXJzaW5nbGFicy5jb22CCyouc2Fsb24uY29tghAq LnNob3BpZnljZG4uY29tgg4qLnN0YXRpY2xwLmNvbYIPKi51YmVyZ3VpZGUuY29t gg4qLnZpbWVvY2RuLmNvbYINYWx0bWV0cmljLmNvbYIeYXBpLmRlbW8uaG90ZWx0 b25pZ2h0LXRlc3QuY29tghZhd2FzLmF3ZWJlci1zdGF0aWMuY29tghBjYW1wdXMu dGVrbGEuY29tggxjZG4uY3JhdGUuaW+CD2Nkbi5yYXZlbmpzLmNvbYIPY2RuLnNo b3BpZnkuY29tggpjZG4udmh4LnR2ghVjZG4xLnNoYXJwZXJpbWFnZS5jb22CCGNy YXRlLmlvghRlZGdlMDEuY2hhcnRiZWF0Lm5ldIIQZm9ybXMuYXdlYmVyLmNvbYIN Z2V0cGViYmxlLmNvbYIOaS5nb2xkc3Rhci5jb22CCGkuZ3NlLmlvggptYXBib3gu Y29tggxtZXRhY3Bhbi5vcmeCHW1vYmlsZS1jb2xsZWN0b3IubmV3cmVsaWMuY29t ghlvZGVvbi1mYXN0bHkua3Jhbmtpa29tLmRlghJwYXN0ZXVwLmd1aW0uY28udWuC C3ByZXNzbHkuY29tghFzLnN3aWZ0eXBlY2RuLmNvbYIQdC5zZWxscG9pbnRzLmNv bYIQdGlsZXMubWFwYm94LmNvbYIRd3d3LmV2ZXJwbGFucy5jb22CDnd3dy5tYXBi b3guY29tghV3d3cubXlzd2l0emVybGFuZC5jb22CDnd3dy5wdWJudWIuY29tghV3 d3cucWEuc2FmYXJpZmxvdy5jb22CEHd3dy51cHdvcnRoeS5jb22CEXd3dy53YXlm YWlyLmNvLnVrghBiLnNzbC5mYXN0bHkubmV0MB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAdBgNVHQ4EFgQU91fHeNOqjIHgpnUq7WYkND3BbFIwHwYDVR0j BBgwFoAUlt5h8b0cFilTHMDMfTuDAEDmGnwwDQYJKoZIhvcNAQELBQADggEBAJmD zdUXpjidcGi3tpMHthQwQWlnVEYsfHU5KFZXe++EiarM+rwFWC3lNFu+xGf3Ba/Q n/KQVEEev4eZ1Ntcbk9679crofJ9SIoMLUUK+HRsUMGgy7xJHDacFIfOKM2yU6jk mhww0LJVKh/2Z+YcEE/vtYA13MEsAcMrL2lzQRGLbECf2U0ejjduHAh9JHKkFder H9yACTi1m9eKna3XM4s9D8jd75Gsi2jITnoueN+dxmGNgFDaEgb6FR/lCFfj6Nhz cc1LQ+0GPyLGCUo5nCPTxastog7Hh06S/cXKdSPfw19EEmVsFdgnfCLX6BT5RNWi 2cxqyBQUmwliO5uqueM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppfA721RzYbgNd9NwVFQ hGJOC3u7pDlEAtqy1gS9LtpSpdVeTmDTTV3KtDV22dSlWB2FdJRobllIJdc7KKyQ gMJeU3c1p0V6Zzvgr0Ejshp4HEavRoXwDin5LA+L6qX43d5a8ZDsLAJg5gQqo7tE k8jEBRl0SjYGvTJ+Xq2QxktcGnYWNAvO6NiMFOUgYiXbY3rSYszv2jFVwkNvWwSN j9CD0iKlf1g8aXqGvb2NPBuYKNR6faXCmbSv7diKAI+1A/amBH8P2sgmbOe7X99s lewXB80u2R8y2OiG08498NIhy1sSp3fephynsRTDtIIKkfgKuhQe8K0FSnYWQKuc +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 192520354759567015904793650 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 19:56:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 18:53:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.b.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21030391139886819681370000932131647774349036589417817581969953498355299380221609296878845389265525462954837142512414215024627856156052684489796453123585452104722666590822756047550125129198454920783705601113672601676518130443203235173514199597486696752597801386701829432458895573318775893699261557734841973526108818952960263740075463591618004219447000906614684774112440953109469330129105936364713028297764188220909292532715769268765802425317109564414375255500273126494587979288239809845568417637251074430610229904385949567319699359149942464294576241845952597490231283949640715050153610971358844890133684368302356012283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1085 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahalogy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altmetric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandpagecdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.club-house.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data-cdn.linz.govt.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datadoghq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edge.fastly-streams.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evbstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventbrite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftcdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpebble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipmunkstaging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impdesk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonelyplanet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massrel.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n3twork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nr-assets.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o0bc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o0bg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pressly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pubnub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reversinglabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopifycdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staticlp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uberguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeocdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altmetric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.demo.hoteltonight-test.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awas.aweber-static.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.tekla.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.crate.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ravenjs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shopify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vhx.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.sharperimage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crate.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge01.chartbeat.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.aweber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpebble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.goldstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.gse.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacpan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-collector.newrelic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odeon-fastly.krankikom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasteup.guim.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.swiftypecdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sellpoints.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiles.mapbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everplans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myswitzerland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pubnub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.safariflow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upworthy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wayfair.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.ssl.fastly.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f757c778d3aa8c81e0a6752aed6624343dc16c52 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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