turner-tls.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3c:4d:18:61:21:08:5e:c4:c1:c9:b9:63 was issued on by GlobalSign nv-sa.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:4d:18:61:21:08:5e:c4:c1:c9:b9:63
Serial Number (int): 18662303005901051193474005347
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 7b:1e:42:60:36:b6:e2:6c:56:01:f8:2a:9a:69:01:86:7b:cb:59:95
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): a1:d7:70:0f:53:f7:89:20:53:ba:ae:3c:59:0b:80:4a:59:dd:1e:df
Fingerprint (sha256): c8:44:c2:4d:18:75:96:f3:29:bb:86:71:eb:51:7c:00:6d:2e:1a:5b:f7:ff:4b:cd:25:39:2e:01:90:70:b2:ad

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate turner-tls.map.fastly.net

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner-tls.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner-tls.map.fastly.net
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.api.platform.cnn.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnlabs.com
*.cnnmoneystream.com
*.cnnv2.com
*.config.outturner.com
*.corporatemobile.outturner.com
*.edition.cnn.com
*.edition.i.cdn.cnn.com
*.electiontracker.cnn.com
*.go.cnn.com
*.greatbigstory.com
*.i.cdn.cnn.com
*.moneystream.cnn.com
*.next.cnn.com
*.odm.platform.cnn.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.travel.cnn.com
*.turner.com
api.electiontracker.cnn.com
api.etp.cnn.com
api.platform.cnn.com
app.cnn.io
client.appletv.cnn.com
cnn.com
cnn.io
cnnlabs.com
compositor.api.cnn.com
dev.client.appletv.cnn.com
eightiesyourself.cnn.com
i.cdn.travel.cnn.com

Other certificates including the domain name turner-tls.map.fastly.net

(limited to 100 certificates)
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net

Certificate

The complete raw certificate details for turner-tls.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue8LtiZHxXKaJziI6JU6
18YHbNdimPYWypHEEheLyd/eG1SJkbLFluqdjShfx5zEyrZtEgB+HpFK5mr5ysIM
G0SmOLRR6aVWaXuEhPglcoea1QT1M+lRi9V4alGX8+S5v1pi1oaIFqhWMz3pUUbe
w7dBm3oyVll/s+esFdGrLh4pjoSu0Iq/B0mAXLTAdf6Yhr+mEuZYWwjGgipnWfaz
CHOxmuypbdYYTBAcZNjFS/Mf4T2RdHXFEAZLYOB9pj4DAPSEpNgl2aAY/73/dR2v
mj/sWs9sLxPiRzrcJINwKXoyGG5ybDC/8Ekf20TO6SVG3HabMECYK5BxTtcmS6/s
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18662303005901051193474005347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-12 15:11:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 16:39:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turner-tls.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23471964270492088231821922958486509954556779203057923582499975806224095023569548903368747568766297718683625954511837701111280589254401605019241917917490591185187799769595810104994180447140229090774712763560578720286675074251302157552336864335387338924750681165708891644799740528149137302512481880415672837876676814181309289617766427438431995128705202186794474165148491799314974873367085573180863304038782641817306967187800547315233827821245697397078203531180701307079293444217181233722707878170329447629066057353703786979630831792980412805251607333279909740040162770630737463965377280970089949804458926227103396392089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner-tls.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoneystream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnv2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporatemobile.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneystream.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odm.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.section-content.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.etp.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compositor.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightiesyourself.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cdn.travel.cnn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1e426036b6e26c5601f82a9a6901867bcb5995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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