dns-vetting2a.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 7c:f9:50:3c:e3:77:9e:76:c5:f4:da:37 was issued on by GlobalSign nv-sa.
With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7c:f9:50:3c:e3:77:9e:76:c5:f4:da:37Serial Number (int): 38677542659444848782367578679
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 53:74:90:db:90:d1:73:9a:f8:f0:59:e1:59:d5:f3:dd:c4:9b:a7:c8
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): c9:4d:dd:9b:ea:c1:6b:1f:89:2e:b7:c7:f3:ce:34:60:b5:0a:b0:fc
Fingerprint (sha256): f7:15:c8:e5:9e:ef:ef:12:4b:9d:1d:b8:b0:91:ee:27:70:4f:b7:a0:90:0d:87:39:4c:80:0c:37:6d:84:45:28
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Check the revocation status for certificate dns-vetting2a.map.fastly.net
47
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dns-vetting2a.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dns-vetting2a.map.fastly.net
*.attribution.report
*.dollarshaveclub.com
*.knnlab.com
*.nfl.com
*.patch.com
*.rubygems.org
*.safaribooksonline.com
*.techinsider.io
*.totalwine.com
*.unitedway.org
*.vevo.com
*.wikihow.tech
a1.awin1.com
api.screenshotlayer.com
cache.ruby-lang.org
cdn.filestackcontent.com
cdn.mmgcache.net
fl.eat24cdn.com
fs.cdn.ustudio.com
goodeggs.com
hbx.com
help.optimizely.com
life.church
mybanktracker.com
noembed.com
offworld.com
patch.com
screenshot.click
snapshot.raintank.io
spotfront.mathtag.com
srv.adngin.com
static.vesdia.com
t.msgf-cdn.com
techinsider.io
tubemogul.com
www.blinq.com
www.dwin2.com
www.fastly-analytics.com
www.letemps.ch
www.millstreamlot46.info
www.optimizely.com
www.optimizelystaging.com
www.reiss.com
www.robertwalters-usa.com
www.robertwalters.co.uk
www.robertwalters.com
*.attribution.report
*.dollarshaveclub.com
*.knnlab.com
*.nfl.com
*.patch.com
*.rubygems.org
*.safaribooksonline.com
*.techinsider.io
*.totalwine.com
*.unitedway.org
*.vevo.com
*.wikihow.tech
a1.awin1.com
api.screenshotlayer.com
cache.ruby-lang.org
cdn.filestackcontent.com
cdn.mmgcache.net
fl.eat24cdn.com
fs.cdn.ustudio.com
goodeggs.com
hbx.com
help.optimizely.com
life.church
mybanktracker.com
noembed.com
offworld.com
patch.com
screenshot.click
snapshot.raintank.io
spotfront.mathtag.com
srv.adngin.com
static.vesdia.com
t.msgf-cdn.com
techinsider.io
tubemogul.com
www.blinq.com
www.dwin2.com
www.fastly-analytics.com
www.letemps.ch
www.millstreamlot46.info
www.optimizely.com
www.optimizelystaging.com
www.reiss.com
www.robertwalters-usa.com
www.robertwalters.co.uk
www.robertwalters.com
Other certificates including the domain name dns-vetting2a.map.fastly.net
(limited to 100 certificates)
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
dns-vetting2a.map.fastly.net
Certificate
The complete raw certificate details for dns-vetting2a.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIItTCCB52gAwIBAgIMfPlQPON3nnbF9No3MA0GCSqGSIb3DQEBCwUAMGYxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMjAwMjI1MTk1MzA1WhcNMjEwMjI1MTg1OTA2WjB4MQswCQYDVQQGEwJV UzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEV MBMGA1UEChMMRmFzdGx5LCBJbmMuMSUwIwYDVQQDExxkbnMtdmV0dGluZzJhLm1h cC5mYXN0bHkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hM V2OsZcPZ6cvnnsSKOMJzQ5SVIKBXqcFNnQXq/t3XwDeaw90j5kVNn+TIamGoZ9u3 Mb9qMY458GX+pWv1kfUIqZNf/+xNNA2y8RJqmhw1jyZmx3nJNT1XrXjnFBJj6kQK FutW7wVx7SEwUySzuv78J77ya/kjT0mv8oAsmabbAFs70mG0SOYwiQPCAN7IwOlO P0sjDpTcD+DJmigxIHfw3FfcfY1MHnQsP8W37nACIzYLlrkBjb05K3VfCcVXQ0T9 cH6GLlrKn/hHvFEMOQ7COcyjbYXBTGc82fP/GOm0ZHAEy5cOgqH98CGrIiasZhD6 eh1kyvksUFZQb27EfwIDAQABo4IFTzCCBUswDgYDVR0PAQH/BAQDAgWgMIGgBggr BgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3VyZS5nbG9iYWxz aWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJyMS5jcnQwPwYI KwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc29yZ2FuaXph dGlvbnZhbHNoYTJnMjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZn gQwBAgIwCQYDVR0TBAIwADBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyLmNybDCCA3IG A1UdEQSCA2kwggNlghxkbnMtdmV0dGluZzJhLm1hcC5mYXN0bHkubmV0ghQqLmF0 dHJpYnV0aW9uLnJlcG9ydIIVKi5kb2xsYXJzaGF2ZWNsdWIuY29tggwqLmtubmxh Yi5jb22CCSoubmZsLmNvbYILKi5wYXRjaC5jb22CDioucnVieWdlbXMub3Jnghcq LnNhZmFyaWJvb2tzb25saW5lLmNvbYIQKi50ZWNoaW5zaWRlci5pb4IPKi50b3Rh bHdpbmUuY29tgg8qLnVuaXRlZHdheS5vcmeCCioudmV2by5jb22CDioud2lraWhv dy50ZWNoggxhMS5hd2luMS5jb22CF2FwaS5zY3JlZW5zaG90bGF5ZXIuY29tghNj YWNoZS5ydWJ5LWxhbmcub3JnghhjZG4uZmlsZXN0YWNrY29udGVudC5jb22CEGNk bi5tbWdjYWNoZS5uZXSCD2ZsLmVhdDI0Y2RuLmNvbYISZnMuY2RuLnVzdHVkaW8u Y29tggxnb29kZWdncy5jb22CB2hieC5jb22CE2hlbHAub3B0aW1pemVseS5jb22C C2xpZmUuY2h1cmNoghFteWJhbmt0cmFja2VyLmNvbYILbm9lbWJlZC5jb22CDG9m ZndvcmxkLmNvbYIJcGF0Y2guY29tghBzY3JlZW5zaG90LmNsaWNrghRzbmFwc2hv dC5yYWludGFuay5pb4IVc3BvdGZyb250Lm1hdGh0YWcuY29tgg5zcnYuYWRuZ2lu LmNvbYIRc3RhdGljLnZlc2RpYS5jb22CDnQubXNnZi1jZG4uY29tgg50ZWNoaW5z aWRlci5pb4INdHViZW1vZ3VsLmNvbYINd3d3LmJsaW5xLmNvbYINd3d3LmR3aW4y LmNvbYIYd3d3LmZhc3RseS1hbmFseXRpY3MuY29tgg53d3cubGV0ZW1wcy5jaIIY d3d3Lm1pbGxzdHJlYW1sb3Q0Ni5pbmZvghJ3d3cub3B0aW1pemVseS5jb22CGXd3 dy5vcHRpbWl6ZWx5c3RhZ2luZy5jb22CDXd3dy5yZWlzcy5jb22CGXd3dy5yb2Jl cnR3YWx0ZXJzLXVzYS5jb22CF3d3dy5yb2JlcnR3YWx0ZXJzLmNvLnVrghV3d3cu cm9iZXJ0d2FsdGVycy5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB8GA1UdIwQYMBaAFJbeYfG9HBYpUxzAzH07gwBA5hp8MB0GA1UdDgQWBBRTdJDb kNFzmvjwWeFZ1fPdxJunyDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAQIew+vcX5Ik42twM9ieVV1X8HKLllIHzmFHxlqLlSPwvr8l7lq8q z3VApySL3g9iLWwdpOYBUIAKHQQdKIe5lxzyeLVXDmE6d7vRSfTRnEOfcCQ6GGyh 87VHjJzWZ0HOek1yxUH1ypnOhHEXUZFmaD7U5YOBz98nz0v29oknbNWlJ5HVGYw5 QLloLHgeOpPeZLiQNarb8mZUYkjIwgtUX96Zi1Dm5NxnhhzEQ6V8jKysL8rFXv21 JON4OZmh6VRIMTZ8tl30c97/F91vO2BXL5mIkh5eksRsgUYFxkvx2EkOQ0Q3fqBi 6D/kKD6ckJuwRpn3IfaCi+dpuxYNYlSjVg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hMV2OsZcPZ6cvnnsSK OMJzQ5SVIKBXqcFNnQXq/t3XwDeaw90j5kVNn+TIamGoZ9u3Mb9qMY458GX+pWv1 kfUIqZNf/+xNNA2y8RJqmhw1jyZmx3nJNT1XrXjnFBJj6kQKFutW7wVx7SEwUySz uv78J77ya/kjT0mv8oAsmabbAFs70mG0SOYwiQPCAN7IwOlOP0sjDpTcD+DJmigx IHfw3FfcfY1MHnQsP8W37nACIzYLlrkBjb05K3VfCcVXQ0T9cH6GLlrKn/hHvFEM OQ7COcyjbYXBTGc82fP/GOm0ZHAEy5cOgqH98CGrIiasZhD6eh1kyvksUFZQb27E fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38677542659444848782367578679 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 19:53:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-25 18:59:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting2a.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21646071406719049977640758232432172865565213138443463354877105189629262653290718831326150659019862331212882739235212396984381295194224627463057869937103898277835243330986762933260309614946721982228865646932080323677333421311053870624255546028392590672720170122563025817139222175157630585034883535591682319232788375837353381097496004954129552592717977790192541234874553133382879231766249064089913989033559690701285650038895686481372574147761699912527938100222436899583476176053158353851762171666244205904437769334366990009589848046928033075971362104652095491944598173232831792587682474149849019563413926345930225665151 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (873 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting2a.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attribution.report' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knnlab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubygems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safaribooksonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techinsider.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalwine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedway.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vevo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikihow.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.awin1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.screenshotlayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.ruby-lang.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.filestackcontent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mmgcache.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl.eat24cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.cdn.ustudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodeggs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybanktracker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noembed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenshot.click' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshot.raintank.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotfront.mathtag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv.adngin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.vesdia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.msgf-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techinsider.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blinq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwin2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastly-analytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letemps.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millstreamlot46.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimizely.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimizelystaging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiss.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwalters.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 537490db90d1739af8f059e159d5f3ddc49ba7c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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