The Guardian uses Fastly CDN as a result the TLS certificate is Fastly's SAN certificate, which also has over 150+ DNS entries to cover. Just thought it's interesting to point out.

$ openssl s_client -connect theguardian.com:443 | openssl x509 -noout -text | grep 'DNS:' | tr ', ' '\n' depth=1 /C=BE/O=GlobalSign nv-sa/CN=GlobalSign Organization Validation CA - SHA256 - G2 verify error:num=20:unable to get local issuer certificate verify return:0 DNS:i.ssl.fastly.net DNS:.am-autoparts.com DNS:.am-autopartsqa.com DNS:.i.ssl.fastly.net DNS:.s.tmol.io DNS:4ormat.com DNS:.4ormat.com DNS:500px.net DNS:.500px.net DNS:500px.org DNS:.500px.org DNS:abtasty.com DNS:.abtasty.com DNS:api.yerdle.com DNS:biomedcentral.com DNS:.biomedcentral.com DNS:bliyoo.bruna.nl DNS:cdn.mmgcache.net DNS:cleverbot.io DNS:.cleverbot.io DNS:collective-media.net DNS:.collective-media.net DNS:decalgirl.com DNS:.decalgirl.com DNS:engagesciences.com DNS:.engagesciences.com DNS:famous.co DNS:.famous.co DNS:fitbit.com DNS:.fitbit.com DNS:format.com DNS:.format.com DNS:github.app.secretcdn.net DNS:.github.app.secretcdn.net DNS:global-pop.tumblr.com DNS:.global-pop.tumblr.com DNS:goodeggs.com DNS:.goodeggs.com DNS:grindr.com DNS:.grindr.com DNS:guim.co.uk DNS:.guim.co.uk DNS:hackster.io DNS:.hackster.io DNS:harveynichols.com DNS:.harveynichols.com DNS:help.optimizely.com DNS:huevosbuenos.com DNS:.huevosbuenos.com DNS:img.society6.com DNS:.img.society6.com DNS:inverse.com DNS:.inverse.com DNS:kilmer.io DNS:.kilmer.io DNS:kindsnacks.com DNS:.kindsnacks.com DNS:learn.optimizely.com DNS:live.cf.public.springer.com DNS:.live.cf.public.springer.com DNS:logoscdn.com DNS:.logoscdn.com DNS:m.au.vjukebox.com DNS:m.ca.vjukebox.com DNS:m.uk.vjukebox.com DNS:m.us.vjukebox.com DNS:maps.tmol.co DNS:mapsapi.tmol.co DNS:mapsapi.tmol.io DNS:mapsint.tmol.co DNS:mapsintqa.tmol.co DNS:mapsqa.tmol.co DNS:meerkatapp.co DNS:.meerkatapp.co DNS:modafinilcat.com DNS:my.ticketmaster.ca DNS:offerpop.com DNS:.offerpop.com DNS:ogol.io DNS:.ogol.io DNS:optimizely.com DNS:performance.service.gov.uk DNS:.performance.service.gov.uk DNS:preview.performance.service.gov.uk DNS:.preview.performance.service.gov.uk DNS:production.performance.service.gov.uk DNS:.production.performance.service.gov.uk DNS:q-static.com DNS:.q-static.com DNS:qa.cashstar.com DNS:.qa.cashstar.com DNS:reissdev.com DNS:.reissdev.com DNS:s.sellocdn.com DNS:.s.sellocdn.com DNS:s2.tmol.co DNS:s2.tmol.io DNS:scanscout2.com DNS:.scanscout2.com DNS:screenshot.click DNS:.screenshot.click DNS:skedge.me DNS:.skedge.me DNS:snapshot.raintank.io DNS:spotfront.mathtag.com DNS:springer.com DNS:.springer.com DNS:squarecdn.com DNS:.squarecdn.com DNS:staging.performance.service.gov.uk DNS:.staging.performance.service.gov.uk DNS:static.awesomeom.com DNS:subscribe.theguardian.com DNS:teamtreehouse.com DNS:.teamtreehouse.com DNS:theguardian.com DNS:.theguardian.com DNS:timeout.cat DNS:.timeout.cat DNS:timeout.com DNS:.timeout.com DNS:timeout.es DNS:.timeout.es DNS:timeout.fr DNS:.timeout.fr DNS:timeoutkorea.kr DNS:.timeoutkorea.kr DNS:timeoutmexico.mx DNS:.timeoutmexico.mx DNS:u.sellocdn.com DNS:.u.sellocdn.com DNS:venue.tmol.co DNS:venue.tmol.io DNS:venueint.tmol.co DNS:venueqa.tmol.co DNS:vjukebox.com DNS:.vjukebox.com DNS:www.alarmgrid.com DNS:www.edgee.com DNS:www.freshbooks.com DNS:www.graspwise.com DNS:www.modafinilcat.com DNS:www.msdayofgiving.org DNS:www.neste.com DNS:www.optimizely.com DNS:www.optimizelystaging.com DNS:www.reiss.com DNS:www1.ticketmaster.ca DNS:www1.ticketmaster.com DNS:xkcd.com DNS:*.xkcd.com ^C