ti-media.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 46:e0:cd:ed:68:cf:b9:63:64:0e:b7:09 was issued on by GlobalSign nv-sa.
With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
Californa
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 46:e0:cd:ed:68:cf:b9:63:64:0e:b7:09Serial Number (int): 21935722535647624428956595977
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: a1:29:51:35:b4:b3:09:c4:a1:9c:3f:06:ab:78:3c:c2:59:89:5d:75
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 2d:a7:e3:85:6d:0b:b6:9f:40:34:d3:19:7d:e8:35:64:04:57:64:b9
Fingerprint (sha256): da:bf:f3:ed:49:46:a9:75:17:8a:d1:aa:d4:c2:f2:30:df:09:2a:73:6f:2d:6e:98:a8:6f:b8:45:0e:47:33:60
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate ti-media.map.fastly.net
54
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ti-media.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ti-media.map.fastly.net
*.internal.ti-media.net
*.internal.timeincuk.net
*.keystone.ti-media.net
*.wp.ti-media.net
*.wp.timeincuk.net
amateurphotographer.co.uk
anglersmail.co.uk
celebsnow.co.uk
countrylife.co.uk
cyclingweekly.co.uk
cyclingweekly.com
decanter.com
equoevents.com
golf-monthly.co.uk
goodtoknow.co.uk
horseandhound.co.uk
housetohome.co.uk
idealhome.co.uk
internal.ti-media.net
internal.timeincuk.net
ipcdigital.co.uk
keystone.ti-media.net
livingetc.com
look.co.uk
marieclaire.co.uk
mbr.co.uk
mby.com
nme.com
nowmagazine.co.uk
pbo.co.uk
rugbyworld.com
shootinguk.co.uk
superyachtworld.com
thefield.co.uk
thisispowder.co.uk
ti-media.com
ti-media.net
timeincuk.net
trustedreviews.com
uncut.co.uk
wallpaper.com
whatdigitalcamera.com
whatsontv.co.uk
womanandhome.com
womanmagazine.co.uk
womansown.co.uk
womansweekly.com
worldsoccer.com
wp.ti-media.net
wp.timeincuk.net
yachtingmonthly.com
yachtingworld.com
ybw.com
*.internal.ti-media.net
*.internal.timeincuk.net
*.keystone.ti-media.net
*.wp.ti-media.net
*.wp.timeincuk.net
amateurphotographer.co.uk
anglersmail.co.uk
celebsnow.co.uk
countrylife.co.uk
cyclingweekly.co.uk
cyclingweekly.com
decanter.com
equoevents.com
golf-monthly.co.uk
goodtoknow.co.uk
horseandhound.co.uk
housetohome.co.uk
idealhome.co.uk
internal.ti-media.net
internal.timeincuk.net
ipcdigital.co.uk
keystone.ti-media.net
livingetc.com
look.co.uk
marieclaire.co.uk
mbr.co.uk
mby.com
nme.com
nowmagazine.co.uk
pbo.co.uk
rugbyworld.com
shootinguk.co.uk
superyachtworld.com
thefield.co.uk
thisispowder.co.uk
ti-media.com
ti-media.net
timeincuk.net
trustedreviews.com
uncut.co.uk
wallpaper.com
whatdigitalcamera.com
whatsontv.co.uk
womanandhome.com
womanmagazine.co.uk
womansown.co.uk
womansweekly.com
worldsoccer.com
wp.ti-media.net
wp.timeincuk.net
yachtingmonthly.com
yachtingworld.com
ybw.com
Other certificates including the domain name ti-media.map.fastly.net
(limited to 100 certificates)
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
Certificate
The complete raw certificate details for ti-media.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIqzCCB5OgAwIBAgIMRuDN7WjPuWNkDrcJMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgxMTAyMDIx ODM2WhcNMTkxMDI0MTc1ODQyWjByMQswCQYDVQQGEwJVUzESMBAGA1UECBMJQ2Fs aWZvcm5hMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxGYXN0bHks IEluYy4xIDAeBgNVBAMTF3RpLW1lZGlhLm1hcC5mYXN0bHkubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5iXqgkhk9TgcS9ZHLG5W4V/AH6acT ViNr0qhFTfrs3o+sWFvN39eWToB/zdKhucOAaiz9aeTghGhyvBWr6cHVX/qGE9Yy PwZmAB/HJ3uJWqLofv0dhapg3Hyf4gqf46yyabs9cqwn9dDnjfz/j+DStUpwG3G0 jt/H6Ba+CaHz2/m9uomz8ZnjeJa2/NA9U9x1kFMSEBjOe1wAn+JqD9ypeFltyYpr qOaJxT7HcZZxFU7QYyvfhRMH8x7onOO01/uOrlNmlNZwEKStrYkUuUm0PJlsdPgL 8+nLQO09o0Az7xxIVhvGf5WMdXCJspJMomcfAwJQVC/sLXiZCRYB7wIDAQABo4IF WjCCBVYwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUH MAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Ns c2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u Y29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYI KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv MAgGBmeBDAECAjAJBgNVHRMEAjAAMIID3gYDVR0RBIID1TCCA9GCF3RpLW1lZGlh Lm1hcC5mYXN0bHkubmV0ghcqLmludGVybmFsLnRpLW1lZGlhLm5ldIIYKi5pbnRl cm5hbC50aW1laW5jdWsubmV0ghcqLmtleXN0b25lLnRpLW1lZGlhLm5ldIIRKi53 cC50aS1tZWRpYS5uZXSCEioud3AudGltZWluY3VrLm5ldIIZYW1hdGV1cnBob3Rv Z3JhcGhlci5jby51a4IRYW5nbGVyc21haWwuY28udWuCD2NlbGVic25vdy5jby51 a4IRY291bnRyeWxpZmUuY28udWuCE2N5Y2xpbmd3ZWVrbHkuY28udWuCEWN5Y2xp bmd3ZWVrbHkuY29tggxkZWNhbnRlci5jb22CDmVxdW9ldmVudHMuY29tghJnb2xm LW1vbnRobHkuY28udWuCEGdvb2R0b2tub3cuY28udWuCE2hvcnNlYW5kaG91bmQu Y28udWuCEWhvdXNldG9ob21lLmNvLnVrgg9pZGVhbGhvbWUuY28udWuCFWludGVy bmFsLnRpLW1lZGlhLm5ldIIWaW50ZXJuYWwudGltZWluY3VrLm5ldIIQaXBjZGln aXRhbC5jby51a4IVa2V5c3RvbmUudGktbWVkaWEubmV0gg1saXZpbmdldGMuY29t ggpsb29rLmNvLnVrghFtYXJpZWNsYWlyZS5jby51a4IJbWJyLmNvLnVrggdtYnku Y29tggdubWUuY29tghFub3dtYWdhemluZS5jby51a4IJcGJvLmNvLnVrgg5ydWdi eXdvcmxkLmNvbYIQc2hvb3Rpbmd1ay5jby51a4ITc3VwZXJ5YWNodHdvcmxkLmNv bYIOdGhlZmllbGQuY28udWuCEnRoaXNpc3Bvd2Rlci5jby51a4IMdGktbWVkaWEu Y29tggx0aS1tZWRpYS5uZXSCDXRpbWVpbmN1ay5uZXSCEnRydXN0ZWRyZXZpZXdz LmNvbYILdW5jdXQuY28udWuCDXdhbGxwYXBlci5jb22CFXdoYXRkaWdpdGFsY2Ft ZXJhLmNvbYIPd2hhdHNvbnR2LmNvLnVrghB3b21hbmFuZGhvbWUuY29tghN3b21h bm1hZ2F6aW5lLmNvLnVrgg93b21hbnNvd24uY28udWuCEHdvbWFuc3dlZWtseS5j b22CD3dvcmxkc29jY2VyLmNvbYIPd3AudGktbWVkaWEubmV0ghB3cC50aW1laW5j dWsubmV0ghN5YWNodGluZ21vbnRobHkuY29tghF5YWNodGluZ3dvcmxkLmNvbYIH eWJ3LmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYE FKEpUTW0swnEoZw/Bqt4PMJZiV11MB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcC VZ0NlFjmMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAd B5E6ZX4uwu9mS5PGzRW94ask5LvAUX5k80YCR/d6rzW9K7WOeus96tFB54vRp4yz vwv7tfzVpKWoL2OeLAwI+QkhUl6O1PFoWZP2YcjMPC/DsjhnRfxQUTH4+r1hItiz ETBM9hqWe3QJ5//1V4Nzb6n0KKQ+7YQmj33rb5FleZNkApvpTfAFYp3KtLCoaL71 xClNUn5jKlGEAV/WVhSow/GeNvCD5QnG5MadLOm5PRG+H0iECwyvEFTqwrZaE9NV wswIBop1VqXGc5rbxf9h14Df8rzhCpS8Dupd61pkgfXwZzHoRfOI8DN8gqRMG55F dMMQmp6PeFUqy0hCKMW9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5iXqgkhk9TgcS9ZHL G5W4V/AH6acTViNr0qhFTfrs3o+sWFvN39eWToB/zdKhucOAaiz9aeTghGhyvBWr 6cHVX/qGE9YyPwZmAB/HJ3uJWqLofv0dhapg3Hyf4gqf46yyabs9cqwn9dDnjfz/ j+DStUpwG3G0jt/H6Ba+CaHz2/m9uomz8ZnjeJa2/NA9U9x1kFMSEBjOe1wAn+Jq D9ypeFltyYprqOaJxT7HcZZxFU7QYyvfhRMH8x7onOO01/uOrlNmlNZwEKStrYkU uUm0PJlsdPgL8+nLQO09o0Az7xxIVhvGf5WMdXCJspJMomcfAwJQVC/sLXiZCRYB 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21935722535647624428956595977 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 02:18:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 17:58:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Californa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ti-media.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20493370974600057648741139299310622431716495829187890664824620915123161064869420448640860853576328254802637842750889367266793878824792860810104468571856056757820637061267895108455882622111805109137081944929146986163230911761131017600448954953167551239732784868181752243970760149190876310486843684434905211299070674244584336724820265310127064648333922490127489202119641638389946461657545679657423684624352851203730415604337930233885541141645460427721799434041379700050430698452847604822150747233696576859812846532440406332365737348700605475694127502298699790360401731391680822538234679124909722380157305454930464997871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (981 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keystone.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amateurphotographer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglersmail.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebsnow.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylife.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingweekly.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingweekly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decanter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equoevents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golf-monthly.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodtoknow.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horseandhound.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housetohome.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealhome.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipcdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingetc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'look.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbr.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mby.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootinguk.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superyachtworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefield.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisispowder.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedreviews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncut.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallpaper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdigitalcamera.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsontv.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanandhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansown.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansweekly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldsoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingmonthly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybw.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1295135b4b309c4a19c3f06ab783cc259895d75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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