turner-tls.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 40:c6:00:e8:91:3d:d8:05:e5:9b:19:f4 was issued on by GlobalSign nv-sa.
With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 40:c6:00:e8:91:3d:d8:05:e5:9b:19:f4Serial Number (int): 20046412230960164704511269364
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 12:57:e8:40:b1:b9:ab:73:77:d2:7b:dc:bc:a7:15:de:61:71:00:32
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): a6:9c:26:63:be:9b:aa:42:e9:2e:4a:0c:a1:43:d2:a7:f9:7a:22:7a
Fingerprint (sha256): 83:cc:f9:bc:3c:8e:4a:38:96:4d:94:9f:61:74:fc:3c:e8:92:a9:64:11:c3:d0:83:79:d3:e2:81:6f:ce:81:51
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate turner-tls.map.fastly.net
61
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for turner-tls.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
turner-tls.map.fastly.net
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.artemis.turner.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnarabic.com
*.cnnlabs.com
*.cnnmoneystream.com
*.cnnpolitics.com
*.config.outturner.com
*.data.api.cnn.io
*.edition.i.cdn.cnn.com
*.edition.stage2.next.cnn.com
*.edition.stage3.next.cnn.com
*.electiontracker.cnn.com
*.greatbigstory.se
*.i.cdn.cnn.com
*.markets.money.cnn.io
*.money.cnn.com
*.odm.platform.cnn.com
*.outturner.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.stage3.next.cnn.com
*.terra.next.cnn.com
*.travel.cnn.com
*.warnermedialabs.com
api.etp.cnn.com
api.platform.cnn.com
app.cnn.io
cnn.io
cnnarabic.com
cnnlabs.com
cnnmoney.com
cnnpolitics.com
cronkite.cnn.com
dev.hypatia.api.cnn.io
dev.money.cnn.com
graphql.verticals.api.cnn.io
hypatia.api.cnn.io
i.cdn.travel.cnn.com
lite.cnn.com
money.cnn.com
preview.dev.money.cnn.com
preview.money.cnn.com
preview.qa.money.cnn.com
preview.ref.money.cnn.com
preview.train.money.cnn.com
ref.money.cnn.com
ref2.money.cnn.com
stage.money.cnn.com
stage.us-m.cnn.com
stage.www-m.cnn.com
train.money.cnn.com
underscored.com
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.artemis.turner.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnarabic.com
*.cnnlabs.com
*.cnnmoneystream.com
*.cnnpolitics.com
*.config.outturner.com
*.data.api.cnn.io
*.edition.i.cdn.cnn.com
*.edition.stage2.next.cnn.com
*.edition.stage3.next.cnn.com
*.electiontracker.cnn.com
*.greatbigstory.se
*.i.cdn.cnn.com
*.markets.money.cnn.io
*.money.cnn.com
*.odm.platform.cnn.com
*.outturner.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.stage3.next.cnn.com
*.terra.next.cnn.com
*.travel.cnn.com
*.warnermedialabs.com
api.etp.cnn.com
api.platform.cnn.com
app.cnn.io
cnn.io
cnnarabic.com
cnnlabs.com
cnnmoney.com
cnnpolitics.com
cronkite.cnn.com
dev.hypatia.api.cnn.io
dev.money.cnn.com
graphql.verticals.api.cnn.io
hypatia.api.cnn.io
i.cdn.travel.cnn.com
lite.cnn.com
money.cnn.com
preview.dev.money.cnn.com
preview.money.cnn.com
preview.qa.money.cnn.com
preview.ref.money.cnn.com
preview.train.money.cnn.com
ref.money.cnn.com
ref2.money.cnn.com
stage.money.cnn.com
stage.us-m.cnn.com
stage.www-m.cnn.com
train.money.cnn.com
underscored.com
Other certificates including the domain name turner-tls.map.fastly.net
(limited to 100 certificates)
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
Certificate
The complete raw certificate details for turner-tls.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJxDCCCKygAwIBAgIMQMYA6JE92AXlmxn0MA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjEwNTI1MTg0 NjIxWhcNMjIwNDE3MTM1ODEzWjB1MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMSIwIAYDVQQDDBl0dXJuZXItdGxzLm1hcC5mYXN0bHkubmV0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoyBJPZeGNIgjQzYeN1VPN1mzV+ fEyJIeFVSnfgHN4VTtSgkrrYOi08UxMkNNpVuOofm8OQknfSzzLBk1OqrxWS2JfX cyQXVGhXdUjLjdunsc0kOZBCHmHcyATkAbYWy+nV6pKskaHZNwwaF+Yh3iVAY540 p81sDRY17NbZ6MOcuPH1qgeZl7V2kDRsm/i1nIk8T3UBzyPsedFricIuKJ+qXb4x HhQkk+OFuQmMAzymdUB+DwPeBvS9P+dMVnAIbA5l/m6x2giiBcslMw7lpxgUMzJl O49xXgHlwgrhzqPb/54lUwlANr/bIDIL8714RBsOVK3AhrAa/pynF7xM5wIDAQAB o4IGcDCCBmwwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYB BQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vk c3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNp Z24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQw MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRv cnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIIE9AYDVR0RBIIE6zCCBOeCGXR1cm5l ci10bHMubWFwLmZhc3RseS5uZXSCDSouYXBpLmNubi5jb22CDCouYXBpLmNubi5p b4IdKi5hcGkuZWxlY3Rpb250cmFja2VyLmNubi5jb22CFCouYXJ0ZW1pcy50dXJu ZXIuY29tghMqLmJldGEubmV4dC5jbm4uY29tgg8qLmJsb2dzLmNubi5jb22CGCou Y2xpZW50LmFwcGxldHYuY25uLmNvbYIJKi5jbm4uY29tgggqLmNubi5pb4IPKi5j bm5hcmFiaWMuY29tgg0qLmNubmxhYnMuY29tghQqLmNubm1vbmV5c3RyZWFtLmNv bYIRKi5jbm5wb2xpdGljcy5jb22CFiouY29uZmlnLm91dHR1cm5lci5jb22CESou ZGF0YS5hcGkuY25uLmlvghcqLmVkaXRpb24uaS5jZG4uY25uLmNvbYIdKi5lZGl0 aW9uLnN0YWdlMi5uZXh0LmNubi5jb22CHSouZWRpdGlvbi5zdGFnZTMubmV4dC5j bm4uY29tghkqLmVsZWN0aW9udHJhY2tlci5jbm4uY29tghIqLmdyZWF0Ymlnc3Rv cnkuc2WCDyouaS5jZG4uY25uLmNvbYIWKi5tYXJrZXRzLm1vbmV5LmNubi5pb4IP Ki5tb25leS5jbm4uY29tghYqLm9kbS5wbGF0Zm9ybS5jbm4uY29tgg8qLm91dHR1 cm5lci5jb22CEioucGxhdGZvcm0uY25uLmNvbYIfKi5zZWN0aW9uLWNvbnRlbnQu bW9uZXkuY25uLmNvbYIUKi5zdGFnZS5uZXh0LmNubi5jb22CFSouc3RhZ2UzLm5l eHQuY25uLmNvbYIUKi50ZXJyYS5uZXh0LmNubi5jb22CECoudHJhdmVsLmNubi5j b22CFSoud2FybmVybWVkaWFsYWJzLmNvbYIPYXBpLmV0cC5jbm4uY29tghRhcGku cGxhdGZvcm0uY25uLmNvbYIKYXBwLmNubi5pb4IGY25uLmlvgg1jbm5hcmFiaWMu Y29tggtjbm5sYWJzLmNvbYIMY25ubW9uZXkuY29tgg9jbm5wb2xpdGljcy5jb22C EGNyb25raXRlLmNubi5jb22CFmRldi5oeXBhdGlhLmFwaS5jbm4uaW+CEWRldi5t b25leS5jbm4uY29tghxncmFwaHFsLnZlcnRpY2Fscy5hcGkuY25uLmlvghJoeXBh dGlhLmFwaS5jbm4uaW+CFGkuY2RuLnRyYXZlbC5jbm4uY29tggxsaXRlLmNubi5j b22CDW1vbmV5LmNubi5jb22CGXByZXZpZXcuZGV2Lm1vbmV5LmNubi5jb22CFXBy ZXZpZXcubW9uZXkuY25uLmNvbYIYcHJldmlldy5xYS5tb25leS5jbm4uY29tghlw cmV2aWV3LnJlZi5tb25leS5jbm4uY29tghtwcmV2aWV3LnRyYWluLm1vbmV5LmNu bi5jb22CEXJlZi5tb25leS5jbm4uY29tghJyZWYyLm1vbmV5LmNubi5jb22CE3N0 YWdlLm1vbmV5LmNubi5jb22CEnN0YWdlLnVzLW0uY25uLmNvbYITc3RhZ2Uud3d3 LW0uY25uLmNvbYITdHJhaW4ubW9uZXkuY25uLmNvbYIPdW5kZXJzY29yZWQuY29t MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSpK4fh ziRHOxu/z4U3AlWdDZRY5jAdBgNVHQ4EFgQUElfoQLG5q3N30nvcvKcV3mFxADIw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC2FJu5Odg3b MzGIIwN4+RcoCiSP9obRo2yV8iLu06tjD4WpGJx6g4e18U0tfn/Jyy4JO+DM6HZ4 VXDY8rpjG6S9ePMz0RrAts6Wxcsy0qpBV1e0mDRawvGQiCvLwSTPXTrPxz0HFNiD lwNPNJfYg6qB0HHRR4zLkGnhIbPxQT5E2CRiuxV9MwrYDY4knStBPxI1IRUYMEF8 RcfxhtXtsA+wb158jQSh51BZcSMk61HVBEETNt4YOmnsnVbrjs0SKSiAJARE6W79 wkjYm/zCHp1yz6RM0lEz8z6/rj3AZcp0ro3n9E0s4nCSZTMb5KOCctYN6tsSEMZ2 AHP/wuiA9Tc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoyBJPZeGNIgjQzYeN1 VPN1mzV+fEyJIeFVSnfgHN4VTtSgkrrYOi08UxMkNNpVuOofm8OQknfSzzLBk1Oq rxWS2JfXcyQXVGhXdUjLjdunsc0kOZBCHmHcyATkAbYWy+nV6pKskaHZNwwaF+Yh 3iVAY540p81sDRY17NbZ6MOcuPH1qgeZl7V2kDRsm/i1nIk8T3UBzyPsedFricIu KJ+qXb4xHhQkk+OFuQmMAzymdUB+DwPeBvS9P+dMVnAIbA5l/m6x2giiBcslMw7l pxgUMzJlO49xXgHlwgrhzqPb/54lUwlANr/bIDIL8714RBsOVK3AhrAa/pynF7xM 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20046412230960164704511269364 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 18:46:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 13:58:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turner-tls.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23777278334335176361893110373290642034059551978510721398342673152171257357442654048501478073402357373611240685799095435834842383973044184028762975584107948928757742988691568091381998284132971913983982977799087370937502060066441446671664376199755367773846812214229754673228543835055980425537385714606414120615634465884730269551923436580917628311869194746380272848567133862461590062357120482952060326861946427407264389664015771037867088326764467058768889447492882694627283337293181348968925362637284737943298617089920113828363837826995410980969642092885602210945813079099385269857426730178340335898103420681848281124071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1259 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner-tls.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.electiontracker.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artemis.turner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.client.appletv.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnarabic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoneystream.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnpolitics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.outturner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.api.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.i.cdn.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage2.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage3.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electiontracker.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markets.money.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odm.platform.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outturner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.section-content.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage3.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terra.next.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedialabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.etp.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.platform.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnarabic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnmoney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnpolitics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronkite.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hypatia.api.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.verticals.api.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypatia.api.cnn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cdn.travel.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dev.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.qa.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.ref.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.train.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref2.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.us-m.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www-m.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.money.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underscored.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1257e840b1b9ab7377d27bdcbca715de61710032 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002d8526ee4e760ddb333188230378f917280a248ff686d1a36c95f222eed3ab630f85a9189c7a8387b5f14d2d7e7fc9cb2e093be0cce876785570d8f2ba631ba4bd78f333d11ac0b6ce96c5cb32d2aa415757b498345ac2f190882bcbc124cf5d3acfc73d0714d88397034f3497d883aa81d071d1478ccb9069e121b3f1413e44d82462bb157d330ad80d8e249d2b413f123521151830417c45c7f186d5edb00fb06f5e7c8d04a1e75059712324eb51d504411336de183a69ec9d56eb8ecd12292880240444e96efdc248d89bfcc21e9d72cfa44cd25133f33ebfae3dc065ca74ae8de7f44d2ce2709265331be4a38272d60deadb1210c6760073ffc2e880f537