turner-tls.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7d:ee:ad:74:6c:c4:35:41:07:14:c4:a0 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:ee:ad:74:6c:c4:35:41:07:14:c4:a0
Serial Number (int): 38974169689797712138047112352
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 12:57:e8:40:b1:b9:ab:73:77:d2:7b:dc:bc:a7:15:de:61:71:00:32
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 37:8a:a9:13:bb:8f:49:25:96:15:10:d1:e4:81:d2:f5:8d:06:33:17
Fingerprint (sha256): e9:87:dc:82:65:ad:a3:d6:d7:7f:6f:b2:25:5c:56:bd:a5:c6:91:90:2a:6a:7d:1b:b5:40:c3:7e:b9:03:e5:ca

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate turner-tls.map.fastly.net

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner-tls.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner-tls.map.fastly.net
*.api.cnn.com
*.api.cnn.io
*.api.electiontracker.cnn.com
*.api.platform.cnn.com
*.arabic.cnn.com
*.artemis.turner.com
*.beta.next.cnn.com
*.blogs.cnn.com
*.client.appletv.cnn.com
*.cnn.com
*.cnn.io
*.cnnlabs.com
*.cnnmoney.com
*.cnnmoneystream.com
*.cnnpolitics.com
*.cnnv2.com
*.config.outturner.com
*.corporatemobile.outturner.com
*.data.api.cnn.io
*.edition.cnn.com
*.edition.i.cdn.cnn.com
*.electiontracker.cnn.com
*.go.cnn.com
*.greatbig.com
*.greatbigstory.com
*.greatbigstory.se
*.i.cdn.cnn.com
*.markets.money.cnn.io
*.money.cnn.com
*.moneystream.cnn.com
*.next.cnn.com
*.odm.platform.cnn.com
*.outturner.com
*.platform.cnn.com
*.section-content.money.cnn.com
*.stage.next.cnn.com
*.travel.cnn.com
*.turner.com
*.www.i.cdn.cnn.com
admin.cnnmoney.ch
api.electiontracker.cnn.com
api.etp.cnn.com
api.platform.cnn.com
app.cnn.io
arabic.cnn.com
client.appletv.cnn.com
cnn.com
cnn.io
cnnlabs.com
cnnmoney.ch
cnnmoney.com
cnnpolitics.com
compositor.api.cnn.com
content.cnnmoney.ch
dev.admin.cnnmoney.ch
dev.client.appletv.cnn.com
dev.cnnmoney.ch
dev.content.cnnmoney.ch
dev.hypatia.api.cnn.io
dev.money.cnn.com
edition-m.cnn.com
eightiesyourself.cnn.com
graphql.verticals.api.cnn.io
hypatia.api.cnn.io
i.cdn.travel.cnn.com
lite.cnn.com
markets.money.cnn.io
money.cnn.com
preview.dev.money.cnn.com
preview.money.cnn.com
preview.qa.money.cnn.com
preview.ref.money.cnn.com
preview.train.money.cnn.com
preview2.ref.money.cnn.com
qa.money.cnn.com
ref.admin.cnnmoney.ch
ref.cnnmoney.ch
ref.content.cnnmoney.ch
ref.hypatia.api.cnn.io
ref.money.cnn.com
ref2.money.cnn.com
stage.cnnmoney.ch
stage.content.cnnmoney.ch
stage.edition-m.cnn.com
stage.money.cnn.com
stage.us-m.cnn.com
stage.www-m.cnn.com
train.money.cnn.com
us-m.cnn.com
www-m.cnn.com
www.cnnmoney.ch

Other certificates including the domain name turner-tls.map.fastly.net

(limited to 100 certificates)
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net
turner-tls.map.fastly.net

Certificate

The complete raw certificate details for turner-tls.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoyBJPZeGNIgjQzYeN1
VPN1mzV+fEyJIeFVSnfgHN4VTtSgkrrYOi08UxMkNNpVuOofm8OQknfSzzLBk1Oq
rxWS2JfXcyQXVGhXdUjLjdunsc0kOZBCHmHcyATkAbYWy+nV6pKskaHZNwwaF+Yh
3iVAY540p81sDRY17NbZ6MOcuPH1qgeZl7V2kDRsm/i1nIk8T3UBzyPsedFricIu
KJ+qXb4xHhQkk+OFuQmMAzymdUB+DwPeBvS9P+dMVnAIbA5l/m6x2giiBcslMw7l
pxgUMzJlO49xXgHlwgrhzqPb/54lUwlANr/bIDIL8714RBsOVK3AhrAa/pynF7xM
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38974169689797712138047112352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 19:20:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 16:30:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turner-tls.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23777278334335176361893110373290642034059551978510721398342673152171257357442654048501478073402357373611240685799095435834842383973044184028762975584107948928757742988691568091381998284132971913983982977799087370937502060066441446671664376199755367773846812214229754673228543835055980425537385714606414120615634465884730269551923436580917628311869194746380272848567133862461590062357120482952060326861946427407264389664015771037867088326764467058768889447492882694627283337293181348968925362637284737943298617089920113828363837826995410980969642092885602210945813079099385269857426730178340335898103420681848281124071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1877 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner-tls.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artemis.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoneystream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnv2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporatemobile.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markets.money.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneystream.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odm.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.section-content.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.next.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.i.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.electiontracker.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.etp.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compositor.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.client.appletv.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightiesyourself.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.verticals.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cdn.travel.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.money.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dev.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.qa.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.train.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview2.ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.admin.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.hypatia.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref2.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.edition-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.us-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-m.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnnmoney.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1257e840b1b9ab7377d27bdcbca715de61710032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164d808bfc80000040300483046022100b121df25f9d0f81c44812cdcf468bf51d12db05566760627f09ecef2b690263a022100ed4cbcda010d654461195024b46ce807737473888b50ceb753d532c3caf7abd3007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164d808c1b400000403004630440220733d224007902135a9b319d155633535ffaf48548b26d4c1bc33d2e47858171a0220764f93877b2af3ca8d5fc9e60b29b01caa7cf9c3014ec2f608fcffd27c8bff10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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