dns-vetting2a.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 34:e7:eb:a9:b8:db:ac:42:5c:c5:a2:b0 was issued on by GlobalSign nv-sa.
With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 34:e7:eb:a9:b8:db:ac:42:5c:c5:a2:b0Serial Number (int): 16373595261984575460487832240
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 53:74:90:db:90:d1:73:9a:f8:f0:59:e1:59:d5:f3:dd:c4:9b:a7:c8
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): 75:19:a4:eb:1c:ea:db:73:31:94:36:2d:85:14:54:28:02:67:88:fb
Fingerprint (sha256): de:35:45:08:14:47:c4:fa:fe:c9:61:9d:20:47:32:0f:8b:46:00:16:ae:d3:6a:98:9a:3e:90:35:b5:21:5e:40
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Check the revocation status for certificate dns-vetting2a.map.fastly.net
87
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dns-vetting2a.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dns-vetting2a.map.fastly.net
*.attribution.report
*.dollarshaveclub.com
*.funnyordie.com
*.giftcards.delta.com
*.knnlab.com
*.nfl.com
*.patch.com
*.rubygems.org
*.safaribooksonline.com
*.semi.giftcards.delta.com
*.techinsider.io
*.totalwine.com
*.unitedway.org
*.upbolt.com
*.vevo.com
*.wiki.how
*.wikihow.tech
a.1stdibscdn.com
a1.awin1.com
api.nymag.com
api.screenshotlayer.com
app.betterimpactcdn.com
attribution.report
bliyoo.bruna.nl
cache.ruby-lang.org
cdn.filestackcontent.com
cdn.mmgcache.net
coolmath-games.com
drupal.org
email.optimizely.com
embed.optimizeplayer.com
famous.co
fl.eat24cdn.com
forms.aweber.com
fs.cdn.ustudio.com
geonet.org.nz
goodeggs.com
hackster.io
hbx.com
help.optimizely.com
huevosbuenos.com
learn.optimizely.com
life.church
media.barfoot.co.nz
media.rightmove.co.uk
mybanktracker.com
noembed.com
nymag.com
offworld.com
optimizely.com
patch.com
pixel.nymag.com
quizlife.com
rubygems.org
safaribooksonline.com
screenshot.click
seekingalpha.com
snapshot.raintank.io
spongepowered.org
spotfront.mathtag.com
srv.adngin.com
static.vesdia.com
t.msgf-cdn.com
techinsider.io
tubemogul.com
uk.businessinsider.com
upbolt.com
usa.rwlivecms.com
user-content.givegab-cdn.com
www.alarmgrid.com
www.blinq.com
www.bulq.com
www.coolmath4kids.com
www.dwin2.com
www.fastly-analytics.com
www.laptopsdirect.co.uk
www.letemps.ch
www.millstreamlot46.info
www.optimizely.com
www.optimizelystaging.com
www.reiss.com
www.robertwalters-usa.com
www.robertwalters.co.uk
www.robertwalters.com
www.trainoregon.org
xkcd.com
*.attribution.report
*.dollarshaveclub.com
*.funnyordie.com
*.giftcards.delta.com
*.knnlab.com
*.nfl.com
*.patch.com
*.rubygems.org
*.safaribooksonline.com
*.semi.giftcards.delta.com
*.techinsider.io
*.totalwine.com
*.unitedway.org
*.upbolt.com
*.vevo.com
*.wiki.how
*.wikihow.tech
a.1stdibscdn.com
a1.awin1.com
api.nymag.com
api.screenshotlayer.com
app.betterimpactcdn.com
attribution.report
bliyoo.bruna.nl
cache.ruby-lang.org
cdn.filestackcontent.com
cdn.mmgcache.net
coolmath-games.com
drupal.org
email.optimizely.com
embed.optimizeplayer.com
famous.co
fl.eat24cdn.com
forms.aweber.com
fs.cdn.ustudio.com
geonet.org.nz
goodeggs.com
hackster.io
hbx.com
help.optimizely.com
huevosbuenos.com
learn.optimizely.com
life.church
media.barfoot.co.nz
media.rightmove.co.uk
mybanktracker.com
noembed.com
nymag.com
offworld.com
optimizely.com
patch.com
pixel.nymag.com
quizlife.com
rubygems.org
safaribooksonline.com
screenshot.click
seekingalpha.com
snapshot.raintank.io
spongepowered.org
spotfront.mathtag.com
srv.adngin.com
static.vesdia.com
t.msgf-cdn.com
techinsider.io
tubemogul.com
uk.businessinsider.com
upbolt.com
usa.rwlivecms.com
user-content.givegab-cdn.com
www.alarmgrid.com
www.blinq.com
www.bulq.com
www.coolmath4kids.com
www.dwin2.com
www.fastly-analytics.com
www.laptopsdirect.co.uk
www.letemps.ch
www.millstreamlot46.info
www.optimizely.com
www.optimizelystaging.com
www.reiss.com
www.robertwalters-usa.com
www.robertwalters.co.uk
www.robertwalters.com
www.trainoregon.org
xkcd.com
Other certificates including the domain name dns-vetting2a.map.fastly.net
(limited to 100 certificates)
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
Certificate
The complete raw certificate details for dns-vetting2a.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILmTCCCoGgAwIBAgIMNOfrqbjbrEJcxaKwMA0GCSqGSIb3DQEBCwUAMGYxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMjAwMjI3MTk0MTEwWhcNMjEwMjI1MTg1OTA2WjB4MQswCQYDVQQGEwJV UzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEV MBMGA1UEChMMRmFzdGx5LCBJbmMuMSUwIwYDVQQDExxkbnMtdmV0dGluZzJhLm1h cC5mYXN0bHkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hM V2OsZcPZ6cvnnsSKOMJzQ5SVIKBXqcFNnQXq/t3XwDeaw90j5kVNn+TIamGoZ9u3 Mb9qMY458GX+pWv1kfUIqZNf/+xNNA2y8RJqmhw1jyZmx3nJNT1XrXjnFBJj6kQK FutW7wVx7SEwUySzuv78J77ya/kjT0mv8oAsmabbAFs70mG0SOYwiQPCAN7IwOlO P0sjDpTcD+DJmigxIHfw3FfcfY1MHnQsP8W37nACIzYLlrkBjb05K3VfCcVXQ0T9 cH6GLlrKn/hHvFEMOQ7COcyjbYXBTGc82fP/GOm0ZHAEy5cOgqH98CGrIiasZhD6 eh1kyvksUFZQb27EfwIDAQABo4IIMzCCCC8wDgYDVR0PAQH/BAQDAgWgMIGgBggr BgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3VyZS5nbG9iYWxz aWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJyMS5jcnQwPwYI KwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc29yZ2FuaXph dGlvbnZhbHNoYTJnMjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZn gQwBAgIwCQYDVR0TBAIwADBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyLmNybDCCBlYG A1UdEQSCBk0wggZJghxkbnMtdmV0dGluZzJhLm1hcC5mYXN0bHkubmV0ghQqLmF0 dHJpYnV0aW9uLnJlcG9ydIIVKi5kb2xsYXJzaGF2ZWNsdWIuY29tghAqLmZ1bm55 b3JkaWUuY29tghUqLmdpZnRjYXJkcy5kZWx0YS5jb22CDCoua25ubGFiLmNvbYIJ Ki5uZmwuY29tggsqLnBhdGNoLmNvbYIOKi5ydWJ5Z2Vtcy5vcmeCFyouc2FmYXJp Ym9va3NvbmxpbmUuY29tghoqLnNlbWkuZ2lmdGNhcmRzLmRlbHRhLmNvbYIQKi50 ZWNoaW5zaWRlci5pb4IPKi50b3RhbHdpbmUuY29tgg8qLnVuaXRlZHdheS5vcmeC DCoudXBib2x0LmNvbYIKKi52ZXZvLmNvbYIKKi53aWtpLmhvd4IOKi53aWtpaG93 LnRlY2iCEGEuMXN0ZGlic2Nkbi5jb22CDGExLmF3aW4xLmNvbYINYXBpLm55bWFn LmNvbYIXYXBpLnNjcmVlbnNob3RsYXllci5jb22CF2FwcC5iZXR0ZXJpbXBhY3Rj ZG4uY29tghJhdHRyaWJ1dGlvbi5yZXBvcnSCD2JsaXlvby5icnVuYS5ubIITY2Fj aGUucnVieS1sYW5nLm9yZ4IYY2RuLmZpbGVzdGFja2NvbnRlbnQuY29tghBjZG4u bW1nY2FjaGUubmV0ghJjb29sbWF0aC1nYW1lcy5jb22CCmRydXBhbC5vcmeCFGVt YWlsLm9wdGltaXplbHkuY29tghhlbWJlZC5vcHRpbWl6ZXBsYXllci5jb22CCWZh bW91cy5jb4IPZmwuZWF0MjRjZG4uY29tghBmb3Jtcy5hd2ViZXIuY29tghJmcy5j ZG4udXN0dWRpby5jb22CDWdlb25ldC5vcmcubnqCDGdvb2RlZ2dzLmNvbYILaGFj a3N0ZXIuaW+CB2hieC5jb22CE2hlbHAub3B0aW1pemVseS5jb22CEGh1ZXZvc2J1 ZW5vcy5jb22CFGxlYXJuLm9wdGltaXplbHkuY29tggtsaWZlLmNodXJjaIITbWVk aWEuYmFyZm9vdC5jby5ueoIVbWVkaWEucmlnaHRtb3ZlLmNvLnVrghFteWJhbmt0 cmFja2VyLmNvbYILbm9lbWJlZC5jb22CCW55bWFnLmNvbYIMb2Zmd29ybGQuY29t gg5vcHRpbWl6ZWx5LmNvbYIJcGF0Y2guY29tgg9waXhlbC5ueW1hZy5jb22CDHF1 aXpsaWZlLmNvbYIMcnVieWdlbXMub3JnghVzYWZhcmlib29rc29ubGluZS5jb22C EHNjcmVlbnNob3QuY2xpY2uCEHNlZWtpbmdhbHBoYS5jb22CFHNuYXBzaG90LnJh aW50YW5rLmlvghFzcG9uZ2Vwb3dlcmVkLm9yZ4IVc3BvdGZyb250Lm1hdGh0YWcu Y29tgg5zcnYuYWRuZ2luLmNvbYIRc3RhdGljLnZlc2RpYS5jb22CDnQubXNnZi1j ZG4uY29tgg50ZWNoaW5zaWRlci5pb4INdHViZW1vZ3VsLmNvbYIWdWsuYnVzaW5l c3NpbnNpZGVyLmNvbYIKdXBib2x0LmNvbYIRdXNhLnJ3bGl2ZWNtcy5jb22CHHVz ZXItY29udGVudC5naXZlZ2FiLWNkbi5jb22CEXd3dy5hbGFybWdyaWQuY29tgg13 d3cuYmxpbnEuY29tggx3d3cuYnVscS5jb22CFXd3dy5jb29sbWF0aDRraWRzLmNv bYINd3d3LmR3aW4yLmNvbYIYd3d3LmZhc3RseS1hbmFseXRpY3MuY29tghd3d3cu bGFwdG9wc2RpcmVjdC5jby51a4IOd3d3LmxldGVtcHMuY2iCGHd3dy5taWxsc3Ry ZWFtbG90NDYuaW5mb4ISd3d3Lm9wdGltaXplbHkuY29tghl3d3cub3B0aW1pemVs eXN0YWdpbmcuY29tgg13d3cucmVpc3MuY29tghl3d3cucm9iZXJ0d2FsdGVycy11 c2EuY29tghd3d3cucm9iZXJ0d2FsdGVycy5jby51a4IVd3d3LnJvYmVydHdhbHRl cnMuY29tghN3d3cudHJhaW5vcmVnb24ub3Jnggh4a2NkLmNvbTAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUlt5h8b0cFilTHMDMfTuD AEDmGnwwHQYDVR0OBBYEFFN0kNuQ0XOa+PBZ4VnV893Em6fIMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP43cevrrEKWuj2fZIBLh/nG4j RjDwW3rOFsLbHRqYjz07pLfrjud0PBzpZ44pATz3YB6EoLYDQNzMUeofBeV4DhbB +Tl9NbYBYKGgT4xe3AFb2Vd4yyf2ci8VfKXmR7/36hrHCYXHnF/5RZI/yLrMHKtx wFh9YE1N+q3EOBLP9fUa8Gsz5LOGv99qSrGL8FDvFPK+RUQbtbbgyvcoczPg2civ wQTNVyxGcTcj+V4+XHZLAhZHDGP4FzSjCc3mRyh7UYb/vWsmnR6xQVpkXA8O8iw7 dcLSaG8ZFG1KcaNWFdeAh+KsaaiNYk8RwErD6VWDCrvHEa9MbY1PzMY5EFji -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hMV2OsZcPZ6cvnnsSK OMJzQ5SVIKBXqcFNnQXq/t3XwDeaw90j5kVNn+TIamGoZ9u3Mb9qMY458GX+pWv1 kfUIqZNf/+xNNA2y8RJqmhw1jyZmx3nJNT1XrXjnFBJj6kQKFutW7wVx7SEwUySz uv78J77ya/kjT0mv8oAsmabbAFs70mG0SOYwiQPCAN7IwOlOP0sjDpTcD+DJmigx IHfw3FfcfY1MHnQsP8W37nACIzYLlrkBjb05K3VfCcVXQ0T9cH6GLlrKn/hHvFEM OQ7COcyjbYXBTGc82fP/GOm0ZHAEy5cOgqH98CGrIiasZhD6eh1kyvksUFZQb27E fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16373595261984575460487832240 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 19:41:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-25 18:59:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting2a.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21646071406719049977640758232432172865565213138443463354877105189629262653290718831326150659019862331212882739235212396984381295194224627463057869937103898277835243330986762933260309614946721982228865646932080323677333421311053870624255546028392590672720170122563025817139222175157630585034883535591682319232788375837353381097496004954129552592717977790192541234874553133382879231766249064089913989033559690701285650038895686481372574147761699912527938100222436899583476176053158353851762171666244205904437769334366990009589848046928033075971362104652095491944598173232831792587682474149849019563413926345930225665151 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1613 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting2a.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attribution.report' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funnyordie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftcards.delta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knnlab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubygems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safaribooksonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semi.giftcards.delta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techinsider.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalwine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedway.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upbolt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vevo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiki.how' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikihow.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.1stdibscdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.awin1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.screenshotlayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.betterimpactcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.report' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bliyoo.bruna.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.ruby-lang.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.filestackcontent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mmgcache.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolmath-games.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.optimizeplayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famous.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl.eat24cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.aweber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.cdn.ustudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geonet.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodeggs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackster.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huevosbuenos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.barfoot.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.rightmove.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybanktracker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noembed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixel.nymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizlife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubygems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safaribooksonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenshot.click' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekingalpha.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshot.raintank.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spongepowered.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotfront.mathtag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv.adngin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.vesdia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.msgf-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techinsider.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.businessinsider.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upbolt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.rwlivecms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alarmgrid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blinq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coolmath4kids.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwin2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastly-analytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laptopsdirect.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letemps.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millstreamlot46.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimizelystaging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiss.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trainoregon.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkcd.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 537490db90d1739af8f059e159d5f3ddc49ba7c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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