gistfile1.txt

$ openssl x509 -noout -text -in a.ssl.fastly.net
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e8:7d:87:da:d5:21:f0:05:72:28:ee:85:7a:0a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA
        Validity
            Not Before: Dec  8 00:00:00 2014 GMT
            Not After : Feb  6 12:00:00 2018 GMT
        Subject: C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=a.ssl.fastly.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:48:90:b1:a5:4f:fe:f0:b8:31:bd:da:25:
                    49:80:f4:a9:cc:41:ae:c4:25:f8:d8:2e:c1:38:17:
                    45:5e:86:b3:a9:f2:39:52:49:79:90:2c:42:e5:50:
                    0c:0f:a7:61:76:3c:dc:81:df:60:c3:38:50:47:64:
                    86:30:16:b0:29:14:4c:ec:25:d4:ca:41:46:24:eb:
                    11:cf:64:e7:58:a0:88:a3:a6:67:db:e7:14:4c:75:
                    38:ea:c5:38:46:92:4f:a4:85:4d:3e:8a:93:d6:88:
                    4a:c9:35:19:1a:a4:b8:0f:c0:f0:f8:72:d7:79:5f:
                    ca:e7:28:5f:25:30:72:31:c7:95:e1:76:0e:8f:a9:
                    90:b7:17:bc:b8:e4:dc:a6:d9:ad:cc:f3:12:0a:22:
                    40:7b:ee:8d:5b:92:e0:e9:1a:75:7d:64:44:82:fd:
                    87:fd:31:ce:0d:99:6a:d0:8e:a4:1c:fb:cc:88:69:
                    b8:ab:fa:7e:ff:61:c3:39:51:d5:23:64:f3:52:86:
                    02:f8:8c:b6:15:27:e2:83:45:97:23:21:3f:dd:5d:
                    16:68:3e:92:60:44:52:fd:34:87:a9:fd:e4:80:cd:
                    06:b7:83:ae:7d:b9:6e:ed:8c:de:ad:83:98:90:9b:
                    88:70:92:c6:96:a7:ec:df:4c:02:5c:e0:85:cd:b6:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:51:68:FF:90:AF:02:07:75:3C:CC:D9:65:64:62:A2:12:B8:59:72:3B

            X509v3 Subject Key Identifier:
                C0:88:F4:63:4D:E4:6B:54:36:F1:12:C2:B4:A5:B2:E2:73:7B:14:88
            X509v3 Subject Alternative Name:
                DNS:a.ssl.fastly.net, DNS:*.a.ssl.fastly.net, DNS:fast.wistia.com, DNS:purge.fastly.net, DNS:mirrors.fastly.net, DNS:*.imgix.net, DNS:*.parsecdn.com, DNS:*.fastssl.net, DNS:voxer.com, DNS:www.voxer.com, DNS:*.firebase.com, DNS:sites.yammer.com, DNS:sites.staging.yammer.com, DNS:*.skimlinks.com, DNS:*.skimresources.com, DNS:cdn.thinglink.me, DNS:*.fitbit.com, DNS:*.hosts.fastly.net, DNS:control.fastly.net, DNS:*.wikia-inc.com, DNS:*.perfectaudience.com, DNS:*.wikia.com, DNS:f.cloud.github.com, DNS:*.digitalscirocco.net, DNS:*.etsy.com, DNS:*.etsystatic.com, DNS:*.addthis.com, DNS:*.addthiscdn.com, DNS:fast.wistia.net, DNS:raw.github.com, DNS:www.userfox.com, DNS:*.assets-yammer.com, DNS:*.staging.assets-yammer.com, DNS:assets.huggies-cdn.net, DNS:api.kinja.com, DNS:orbit.shazamid.com, DNS:about.jstor.org, DNS:*.global.ssl.fastly.net, DNS:web.voxer.com, DNS:pypi.python.org, DNS:*.12wbt.com, DNS:www.holderdeord.no, DNS:secured.indn.infolinks.com, DNS:play.vidyard.com, DNS:play-staging.vidyard.com, DNS:secure.img.wfrcdn.com, DNS:secure.img.josscdn.com, DNS:*.gocardless.com, DNS:widgets.pinterest.com, DNS:*.7digital.com, DNS:*.7static.com, DNS:p.datadoghq.com, DNS:*.plan3.se, DNS:new.mulberry.com, DNS:www.safariflow.com, DNS:cdn.contentful.com, DNS:tools.fastly.net, DNS:*.huevosbuenos.com, DNS:*.goodeggs.com, DNS:*.fastly.picmonkey.com, DNS:*.cdn.whipplehill.net, DNS:*.whipplehill.net, DNS:cdn.media34.whipplehill.net, DNS:cdn.media56.whipplehill.net, DNS:cdn.media78.whipplehill.net, DNS:cdn.media910.whipplehill.net, DNS:*.modcloth.com, DNS:*.disquscdn.com, DNS:*.jstor.org, DNS:*.dreamhost.com, DNS:www.flinto.com, DNS:*.chartbeat.com, DNS:*.hipmunk.com, DNS:content.beaverbrooks.co.uk, DNS:secure.common.csnstores.com, DNS:*.vsco.co, DNS:www.joinos.com, DNS:staging-mobile-collector.newrelic.com, DNS:*.modcloth.net, DNS:*.foursquare.com, DNS:*.shazam.com, DNS:*.4sqi.net, DNS:*.metacpan.org, DNS:*.fastly.com, DNS:wikia.com, DNS:fastly.com, DNS:kinja.com, DNS:*.gadventures.com, DNS:www.gadventures.com.au, DNS:www.gadventures.co.uk, DNS:kredo.com, DNS:cdn-tags.brainient.com, DNS:my.billspringapp.com, DNS:rvm.io
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://crl3.digicert.com/sha2-ha-server-g3.crl

                Full Name:
                  URI:http://crl4.digicert.com/sha2-ha-server-g3.crl

            X509v3 Certificate Policies:
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS

            Authority Information Access:
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:24:f7:20:06:54:48:59:d9:53:1c:84:7e:7e:6b:e8:fa:
         2c:f4:80:60:ef:1c:d6:d2:2a:50:4c:2d:ad:9d:7f:0d:31:37:
         56:64:65:fe:1f:35:93:37:87:77:4a:6b:6a:dc:16:86:60:28:
         91:97:6e:fb:d7:42:f0:cf:2b:fb:0d:e8:2f:c7:8b:49:7a:da:
         e4:6a:9b:f2:bc:d9:c6:6f:90:52:3e:e2:e1:b3:6e:8a:4d:74:
         bd:eb:ad:aa:58:83:bb:ca:54:79:86:b5:be:e0:24:b3:68:cc:
         7e:47:86:1c:df:3a:7c:df:78:e7:6b:60:ce:42:7f:eb:3c:c3:
         b3:ff:be:c2:45:28:35:10:ff:21:7a:e8:5f:ea:34:0e:b7:dc:
         10:05:76:ce:84:03:e3:0c:39:13:54:c1:7e:60:0c:f9:c5:73:
         38:14:19:ed:09:51:94:1d:64:8a:f9:6d:91:6c:64:ac:fe:40:
         9c:2f:b7:55:66:5f:95:3a:55:e7:94:91:c3:46:a7:7d:a2:0c:
         09:ae:51:05:56:d5:f5:2a:c2:d0:93:ca:16:06:ae:e0:9c:5e:
         7d:e4:89:b8:83:23:01:9e:1f:1e:c7:79:13:a4:b2:c5:d7:c6:
         28:b7:50:71:c9:33:19:a0:92:74:e9:17:2e:e3:a0:e0:89:2e:
         bd:af:57:7e