ticketmaster5.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 25:3d:42:ef:d8:10:4a:a1:aa:60:9d:79 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:3d:42:ef:d8:10:4a:a1:aa:60:9d:79
Serial Number (int): 11525005938914988905669369209
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 59:4b:33:14:1f:a1:d3:a7:74:c7:3e:7f:f4:9a:e7:98:0a:c4:f7:12
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 83:81:4c:95:c1:41:85:f4:e1:e7:2f:b4:52:7c:23:74:78:00:3e:1c
Fingerprint (sha256): 7d:fe:36:44:f7:7a:bd:eb:42:1e:b0:de:96:a8:88:ae:e9:29:ac:3a:fb:97:da:ff:6d:b9:5b:3a:a8:dd:ed:26

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster5.map.fastly.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster5.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster5.map.fastly.net
tmdev.co

Other certificates including the domain name ticketmaster5.map.fastly.net

(limited to 100 certificates)
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster5.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+RjM0ld55zDpQYmGTy
Tgi7SJFS71wMrE+VKcVzQ7zQAtYCAw1SOmpiE/B7Jd7XI5lErHTXfpkrKO/eNn/l
aMPLTfMf7uQZBLUYbyC8ZII2uRJqHGiXQWPZNp/QgX0SbqjGjcby3mFeN2k5AYqI
SBPMkpeKiIfKdDBXYVBcXDkIvM0hhHtBp0hiuiH974xbq4NGMEdOBuwBeSO35LEU
HpYT4NznxEihbg5D9/z6jy/Toj75HJbWpSnp3/wRxokC3or4+VgqKs4EqGUTMtOO
BVqNauT26CLEkFzdaEps+foHHwXoQ/YWGr/vVCSAIJayanzVFTGEn0jHA4Adt5CB
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11525005938914988905669369209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 22:03:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 14:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketmaster5.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26470381818967568019460862420579362911074022209255498608359260606387459735070618870551044733724550981157397474483503257787793218228385952540832245527934612360341887053019938186527506257501011301610929465799529890327814821592301550403428957581871741065510760410186387161118720339298328938519814951678109182778566277208639141931597190336558456067272439050640119055807826591440946571111565122810129036117619344024146449460677375047940620438974381768556080844759100851223270151095648900971847633841287812503877085381645651571272485546234141038835725367539562683272551780748702687790952128800083883876394641256753885381011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster5.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmdev.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							594b33141fa1d3a774c73e7ff49ae7980ac4f712
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bdfd56c8c9edd2dd24cf237befcd9e40ae1f00f40081978d0311e80a89acc5d9caf6608b1267abb428086b4fb821e3fb7ab74a6280511da409e3f5075d99f8ad356f9758d5d69deb9bbc1a9af76273decd45cb1b50f19e81a2164b0c4d67a4a504efe584a4380993a957ab2659b78ed79d30125993f1b929d94d18ef8f3b8974afad82e93dedd5ca761d8de7cee28c372873cf46df539fc65c820d8fc6224e5be605aba9b3485d2a0324917db26d02dd8ef4b910afc588b005af506a406a46310b6ea1ec9fbb5d6064bf83e5aad08988b7e00c8cbd18b6395631e76526044806f40307bcacc5abfc82ac12cddaf8ccd3db22075b8cbf6a5bc5dfc78cc3afd36