dns-vetting1.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 56:8c:c4:e5:c3:91:c5:af:92:c3:a5:e9 was issued on by GlobalSign nv-sa.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 56:8c:c4:e5:c3:91:c5:af:92:c3:a5:e9
Serial Number (int): 26785890281609021391630476777
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a7:0b:f1:61:e5:e3:6d:dc:93:04:06:6c:1c:f3:cb:ab:49:2b:43:cc
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 94:0f:0c:ac:91:d9:71:b7:84:87:03:d1:01:da:bc:c6:bd:40:42:d4
Fingerprint (sha256): f7:de:e7:06:b8:c5:49:5b:0e:bb:da:fd:2e:58:d0:79:cd:2c:c7:33:ed:08:5f:e7:1f:c1:cd:d5:bf:12:1e:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dns-vetting1.map.fastly.net

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dns-vetting1.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dns-vetting1.map.fastly.net
*.aenetworks.com
*.canisiusgivingday.com
*.ott.aetnd.com
*.springiton.org
*.svod.aetnd.com
*.voxcreative.com
aenetworks.com
aetnd.com
aetndigital.com
aetv.com
allure.com
architecturaldigest.com
bonappetit.com
brides.com
cashstar.com
cdn.cstatic.net
cntraveler.com
conde.io
condenast.io
condenastdigital.com
condenaststudio.com
condenet.com
crimeandinvestigationnetwork.com
curbed.com
details.com
devops.aetnd.com
epicurious.com
ft.com
fyi.tv
gamefuel.info
gc.nordstrom.com
giftcard.nordstrom.com
giftcards.nordstrom.com
givingisgorges.org
glamour.com
golfdigest.com
gq.com
history.com
historyvault.com
lifetimemovieclub.com
mylifetime.com
newyorker.com
pmoqa.aetnd.com
polyfill.io
polygon.com
qa.cashstar.com
racked.com
sbnation.com
self.com
semi.cashstar.com
sixnightvision.com
springiton.org
techrabbit.com
teenvogue.com
user-content.givegab-cdn.com
validation.rnd03.com
vanityfair.com
video.aetnd.com
video.aetndigital.com
vip.aetnd.com
vip.aetndigital.com
vogue.com
voxcreative.com
vts.com
watch.aetnd.com
webmonkey.com
wmagazine.com
www.cunytuesday.org
www.givingisgorges.org
www.hvgives.org
www.ilgive.com
www.nhgives.org
www.nygivesday.org
www.oregoniansgive.org
www.vermontgives.org

Other certificates including the domain name dns-vetting1.map.fastly.net

(limited to 100 certificates)
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net

Certificate

The complete raw certificate details for dns-vetting1.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGKtCl9slnkEhiaVtdhd
lJ0Wnq9otRO1+gEnQtMz15k7AjXXmlqzws8c7kavgqzExIxB2T7YwV516yQaGvZq
uFl6L7UTSHZYwe8OfVWYa+lVeUs58sn1OB/cyreUwUClf5dVhlUUpQlaIxfN60Xb
YD1KBw8KAnHWfhdqZEcocaeKwUr30SUz4qbCLlNDpwzPpUpLm3e7nxexxAznmcns
90FzI7o0ON2rv030inLmNNhEHSgpq5q4ZWlysFRF9yq5I3cEzu4GReAKNktIyeDs
eEluLAqJHo6lHfMqJPorPbLdyX8ed5cSydA2Ae/eSWCsU39QK4Pl/mOV9Uz/p+Ye
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26785890281609021391630476777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 17:17:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 16:33:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns-vetting1.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25296319912534563805034805044718475190879992262521373893186381326972866446407027413688673147224976784062047525709285249736754317919783074793869388971879397706682111604083054852516746322884063259045003807854411564552800090078419430443728578342160007298932604989069058661728573526847831522830666789955038171531931924172884232768513503280501583569845701313563630044089554784825384494347891250253805681924629097819311861346732752349020679655701702395478834423884595228178249440279772290096999688610556434051223141908674368156024641394309987017936121960727163085459745008253522900586295140241922894152356382714763149712909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns-vetting1.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ott.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svod.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voxcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecturaldigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonappetit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cstatic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conde.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenastdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenaststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimeandinvestigationnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'details.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamefuel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gc.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.nordstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyvault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimemovieclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmoqa.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyfill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polygon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'self.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semi.cashstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixnightvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techrabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenvogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validation.rnd03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanityfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.aetndigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.aetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a70bf161e5e36ddc9304066c1cf3cbab492b43cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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