turner-tls.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 60:05:f1:66:bf:2b:4c:cb:9c:ed:c1:a0 was issued on by GlobalSign nv-sa.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:05:f1:66:bf:2b:4c:cb:9c:ed:c1:a0
Serial Number (int): 29717745557612655168960971168
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 12:57:e8:40:b1:b9:ab:73:77:d2:7b:dc:bc:a7:15:de:61:71:00:32
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 24:db:35:c2:e2:f8:c5:77:43:a4:b0:62:ab:3a:ac:1a:29:53:4a:de
Fingerprint (sha256): da:1b:c2:2f:5c:a8:dd:03:71:96:af:f7:71:41:a7:2e:15:fa:eb:04:f5:d0:2b:0f:1d:cd:ec:5e:e5:f4:56:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate turner-tls.map.fastly.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner-tls.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner-tls.map.fastly.net
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.api.platform.cnn.com
*.arabic.cnn.com
*.artemis.turner.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnarabic.com
*.cnnlabs.com
*.cnnmoney.com
*.cnnmoneystream.com
*.cnnpolitics.com
*.config.outturner.com
*.corporatemobile.outturner.com
*.cronkite.cnn.com
*.data.api.cnn.io
*.edition.cnn.com
*.edition.i.cdn.cnn.com
*.edition.stage.next.cnn.com
*.edition.stage2.next.cnn.com
*.elections.cnn.com
*.electiontracker.cnn.com
*.go.cnn.com
*.greatbig.com
*.greatbigstory.com
*.greatbigstory.se
*.i.cdn.cnn.com
*.markets.money.cnn.io
*.money.cnn.com
*.moneystream.cnn.com
*.next.cnn.com
*.odm.platform.cnn.com
*.outturner.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.stage2.next.cnn.com
*.stage3.next.cnn.com
*.terra.next.cnn.com
*.travel.cnn.com
*.www.i.cdn.cnn.com
admin.cnnmoney.ch
api.electiontracker.cnn.com
api.etp.cnn.com
api.platform.cnn.com
app.cnn.io
arabic.cnn.com
client.appletv.cnn.com
cnn.com
cnn.io
cnnarabic.com
cnnlabs.com
cnnmoney.ch
cnnmoney.com
cnnpolitics.com
compositor.api.cnn.com
content.cnnmoney.ch
cronkite.cnn.com
dev.admin.cnnmoney.ch
dev.client.appletv.cnn.com
dev.cnnmoney.ch
dev.content.cnnmoney.ch
dev.hypatia.api.cnn.io
dev.money.cnn.com
edition-m.cnn.com
eightiesyourself.cnn.com
graphql.verticals.api.cnn.io
hypatia.api.cnn.io
i.cdn.travel.cnn.com
lite.cnn.com
markets.money.cnn.io
money.cnn.com
preview.dev.money.cnn.com
preview.money.cnn.com
preview.qa.money.cnn.com
preview.ref.money.cnn.com
preview.train.money.cnn.com
preview2.ref.money.cnn.com
qa.money.cnn.com
ref.admin.cnnmoney.ch
ref.cnnmoney.ch
ref.content.cnnmoney.ch
ref.hypatia.api.cnn.io
ref.money.cnn.com
ref2.money.cnn.com
stage.cnnmoney.ch
stage.content.cnnmoney.ch
stage.edition-m.cnn.com
stage.money.cnn.com
stage.us-m.cnn.com
stage.www-m.cnn.com
train.money.cnn.com
us-m.cnn.com
www-m.cnn.com
www.cnnmoney.ch

Other certificates including the domain name turner-tls.map.fastly.net

(limited to 100 certificates)
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net

Certificate

The complete raw certificate details for turner-tls.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoyBJPZeGNIgjQzYeN1
VPN1mzV+fEyJIeFVSnfgHN4VTtSgkrrYOi08UxMkNNpVuOofm8OQknfSzzLBk1Oq
rxWS2JfXcyQXVGhXdUjLjdunsc0kOZBCHmHcyATkAbYWy+nV6pKskaHZNwwaF+Yh
3iVAY540p81sDRY17NbZ6MOcuPH1qgeZl7V2kDRsm/i1nIk8T3UBzyPsedFricIu
KJ+qXb4xHhQkk+OFuQmMAzymdUB+DwPeBvS9P+dMVnAIbA5l/m6x2giiBcslMw7l
pxgUMzJlO49xXgHlwgrhzqPb/54lUwlANr/bIDIL8714RBsOVK3AhrAa/pynF7xM
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29717745557612655168960971168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 21:25:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 04:34:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turner-tls.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23777278334335176361893110373290642034059551978510721398342673152171257357442654048501478073402357373611240685799095435834842383973044184028762975584107948928757742988691568091381998284132971913983982977799087370937502060066441446671664376199755367773846812214229754673228543835055980425537385714606414120615634465884730269551923436580917628311869194746380272848567133862461590062357120482952060326861946427407264389664015771037867088326764467058768889447492882694627283337293181348968925362637284737943298617089920113828363837826995410980969642092885602210945813079099385269857426730178340335898103420681848281124071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner-tls.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artemis.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoneystream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporatemobile.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cronkite.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.stage2.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elections.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markets.money.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneystream.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odm.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.section-content.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage2.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage3.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terra.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.etp.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compositor.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronkite.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightiesyourself.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.verticals.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cdn.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.money.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dev.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.qa.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.train.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview2.ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref2.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.edition-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.us-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnnmoney.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1257e840b1b9ab7377d27bdcbca715de61710032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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