ft.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5b:4d:9a:9b:4d:fd:b3:8e:2c:a4:1e:89 was issued on by GlobalSign nv-sa.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:4d:9a:9b:4d:fd:b3:8e:2c:a4:1e:89
Serial Number (int): 28256953291156266383994789513
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ae:d8:66:8f:8b:de:14:10:91:0e:d6:69:81:4f:dc:a5:f5:ce:ab:4c
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 51:8e:0a:2b:c8:64:ca:9d:50:94:36:5f:0c:a7:bd:a6:1b:9a:50:8a
Fingerprint (sha256): d3:f6:5d:dc:10:b8:af:57:5e:06:d1:f3:6a:68:30:19:75:5b:d3:90:ce:26:c1:50:55:91:10:d7:80:dc:c6:99

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ft.map.fastly.net

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ft.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ft.map.fastly.net
*.analyseafrica.com
*.dpn-online.com
*.fdibenchmark.com
*.fdiintelligence.com
*.fdimarkets.com
*.fdireports.com
*.ft-static.com
*.ftadviser.com
*.ftbusiness.com
*.ftconfidentialresearch.com
*.ftpropertylistings.com
*.ftspecialist.com
*.ftwordpress01.co.uk
*.ftwordpress02.co.uk
*.ftwordpress03.co.uk
*.fundawards.co.uk
*.globalriskregulator.com
*.howtorunabank.com
*.howtospendit.ft.com
*.icawards.co.uk
*.ig.ft.com
*.investorschronicle.co.uk
*.media.ft.com
*.mmawards.co.uk
*.non-execs.com
*.origami.ft.com
*.pensions-expert.com
*.privatebankingawards.com
*.pwmnet.com
*.scout.asia
*.thebanker.com
*.thebankerdatabase.com
*.thisisafricaonline.com
*.top1000worldbanks.com
*.webservices.ft.com
analyseafrica.com
click.bdp.ft.com
consent.exec-appointments.com
cookies.exec-appointments.com
dpn-online.com
fdibenchmark.com
fdiintelligence.com
fdimarkets.com
fdireports.com
ftadviser.com
ftbusiness.com
ftconfidentialresearch.com
ftpropertylistings.com
ftspecialist.com
ftwordpress01.co.uk
ftwordpress02.co.uk
ftwordpress03.co.uk
fundawards.co.uk
globalriskregulator.com
howtorunabank.com
howtospendit.ft.com
icawards.co.uk
investorschronicle.co.uk
media.ft.com
mmawards.co.uk
non-execs.com
pensions-expert.com
privatebankingawards.com
pwmnet.com
scout.asia
stage.ams.fdiintelligence.com
stage.app.fdibenchmark.com
stage.app.fdimarkets.com
stage.data.ftconfidentialresearch.com
stage.de.fdimarkets.com
stage.www.fdibenchmark.com
stage.www.fdimarkets.com
stage.www.fdireports.com
static-render-p.ft.com
thebanker.com
thebankerdatabase.com
thisisafricaonline.com
top1000worldbanks.com
webservices.ft.com

Other certificates including the domain name ft.map.fastly.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for ft.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtchRvENMN+JP/3gtc7o6
6BGnwC20nBhgpTjfv+s4U5X92V11MBZGbnvmBCXweiUOjGSFB8Kw2RXvDLsG+Dcg
emJwnwFTnhnOr0I6S04Bji74P/YqMy8ztVbN93uOCFv70oIQtd1XQ/vXVaBHyF9K
lzkT7jzRbboMDbvmfZZQ3sdr0wOYt2c1wrcUfejuto50AZpREIgw36EsgrbiEh++
44eB/q/B014OAZGhF0gfN8Rsz95u2dI71VsGQ2IbxXEOMTiG5XSxmSd4u6cDOf6+
LeA5xa4oZKtSbJRiE7IMiHlaZTzYZNrjMWHfe0qSwtLCoNNjsvHdGrhHplESFZUG
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28256953291156266383994789513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 09:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 22:58:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ft.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22947914316911595425090928105527127461057257359246043569427977257233852555571376806317496144704552320524463064087222447640338035745822746171863492666121749831791619824548107032443149134877889480236344941988247470701921225670820648357886959688186129255827972351036402619434503232238271235954065057500771673831701021119344054811026212327236969149756306591201972144925233381996104312526035015891902061978797745161942221836383952983967905698514240458855860317669986017287796569126176958477176080830552275905779442923630847061297442637504214935788970161207776087512743093974732171965488619512892903397167643151545767626299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analyseafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dpn-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdibenchmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdiintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdimarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdireports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ft-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftconfidentialresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftpropertylistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftwordpress01.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftwordpress02.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftwordpress03.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalriskregulator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtorunabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtospendit.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ig.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investorschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-execs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origami.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensions-expert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatebankingawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwmnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scout.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebanker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebankerdatabase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisisafricaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top1000worldbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webservices.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyseafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.bdp.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.exec-appointments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookies.exec-appointments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpn-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdibenchmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdiintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdimarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdireports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftconfidentialresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftpropertylistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftwordpress01.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftwordpress02.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftwordpress03.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalriskregulator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtorunabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtospendit.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-execs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensions-expert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwmnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scout.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ams.fdiintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.app.fdibenchmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.app.fdimarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.data.ftconfidentialresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.de.fdimarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.fdibenchmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.fdimarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.fdireports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-render-p.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebanker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebankerdatabase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisafricaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top1000worldbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.ft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aed8668f8bde1410910ed669814fdca5f5ceab4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dedc1c2bd0000040300483046022100e06fa8c4f292c2fb3adb25a84e94e7df7f0faa52ffb268e5caa054f9e774fd0f022100e0a1b329b77b06f5a51882a11f6b74adb9d368f31e21abfc43d6de0c932c1f09007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dedc1c2e4000004030046304402202cb66fb4cf396948ee04a5b1b833aa109617d79df32d0ede0f1c9757c1fa80d7022061360cca4ea4c8b14b4fd585a8ba1a2878a638b99af5dedea4a421f837717ecc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001325e8edf0a6f78bb07e9ea652da13b0cd90159be140585a8da512370a22d532a69bdca1b5f04b5f3fef2271ac2b29ceb26aa58708ffb4d9f85d84521755ee963cfef149b7a501d16b5d001a62299b8a11ecc2047c2d0e075a0df58d3ae76b7a8fc591d42a08248f29fd54ef8facdbfb9967fdb0f39ef9bb3c5da532c06ec44522f21f6a6b9ea977ec22e2848381dda8eb8d2a5c5263d044e9009b5be174993dc98855fbfb11360ce671ff6eb11ecc745797e530d67a55ad37d9221cc9fc41b8b0fd5d6587001bbfc0343593fa5cfc05ef58587a34b1a1165382b37aed87fc881730d5295b29ded7891e205a007f7a863e438f52f8284b9f3abaca7fb773588a