turner-tls.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 0f:22:46:cf:b8:5b:92:66:f7:d7:82:e7 was issued on by GlobalSign nv-sa.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:22:46:cf:b8:5b:92:66:f7:d7:82:e7
Serial Number (int): 4683713022601270052655694567
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 12:57:e8:40:b1:b9:ab:73:77:d2:7b:dc:bc:a7:15:de:61:71:00:32
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e0:e4:ef:0c:0d:39:64:55:a1:6b:3c:65:83:e4:cd:2a:15:da:9f:8d
Fingerprint (sha256): 93:09:8e:15:d0:87:ec:2c:2e:53:0a:b5:04:e7:81:28:49:9a:60:2f:12:fd:a0:51:a1:e1:5f:93:11:cd:bf:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate turner-tls.map.fastly.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner-tls.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner-tls.map.fastly.net
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.artemis.turner.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnarabic.com
*.cnnmoneystream.com
*.config.outturner.com
*.edition.i.cdn.cnn.com
*.edition.stage2.next.cnn.com
*.edition.stage3.next.cnn.com
*.electiontracker.cnn.com
*.greatbigstory.se
*.i.cdn.cnn.com
*.money.cnn.com
*.odm.platform.cnn.com
*.outturner.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.stage3.next.cnn.com
*.terra.next.cnn.com
*.travel.cnn.com
app.cnn.io
cnn.io
cnnlabs.com
cnnpolitics.com
cronkite.cnn.com
graphql.verticals.api.cnn.io
hypatia.api.cnn.io
i.cdn.travel.cnn.com
money.cnn.com
preview.dev.money.cnn.com
preview.money.cnn.com
ref.money.cnn.com
ref2.money.cnn.com
stage.money.cnn.com
train.money.cnn.com

Other certificates including the domain name turner-tls.map.fastly.net

(limited to 100 certificates)
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net

Certificate

The complete raw certificate details for turner-tls.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoyBJPZeGNIgjQzYeN1
VPN1mzV+fEyJIeFVSnfgHN4VTtSgkrrYOi08UxMkNNpVuOofm8OQknfSzzLBk1Oq
rxWS2JfXcyQXVGhXdUjLjdunsc0kOZBCHmHcyATkAbYWy+nV6pKskaHZNwwaF+Yh
3iVAY540p81sDRY17NbZ6MOcuPH1qgeZl7V2kDRsm/i1nIk8T3UBzyPsedFricIu
KJ+qXb4xHhQkk+OFuQmMAzymdUB+DwPeBvS9P+dMVnAIbA5l/m6x2giiBcslMw7l
pxgUMzJlO49xXgHlwgrhzqPb/54lUwlANr/bIDIL8714RBsOVK3AhrAa/pynF7xM
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4683713022601270052655694567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 18:50:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 13:58:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turner-tls.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23777278334335176361893110373290642034059551978510721398342673152171257357442654048501478073402357373611240685799095435834842383973044184028762975584107948928757742988691568091381998284132971913983982977799087370937502060066441446671664376199755367773846812214229754673228543835055980425537385714606414120615634465884730269551923436580917628311869194746380272848567133862461590062357120482952060326861946427407264389664015771037867088326764467058768889447492882694627283337293181348968925362637284737943298617089920113828363837826995410980969642092885602210945813079099385269857426730178340335898103420681848281124071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner-tls.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artemis.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoneystream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage2.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage3.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odm.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.section-content.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage3.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terra.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronkite.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.verticals.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cdn.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dev.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref2.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.money.cnn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1257e840b1b9ab7377d27bdcbca715de61710032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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