The Guardian uses Fastly CDN as a result the TLS certificate is Fastly's SAN certificate, which also has over 150+ DNS entries to cover. Just thought it's interesting to point out.

$ openssl s_client -connect theguardian.com:443 | openssl x509 -noout -text | grep 'DNS:' | tr ', ' '\n'
depth=1 /C=BE/O=GlobalSign nv-sa/CN=GlobalSign Organization Validation CA - SHA256 - G2
verify error:num=20:unable to get local issuer certificate
verify return:0
DNS:i.ssl.fastly.net
DNS:.am-autoparts.com
DNS:.am-autopartsqa.com
DNS:.i.ssl.fastly.net
DNS:.s.tmol.io
DNS:4ormat.com
DNS:.4ormat.com
DNS:500px.net
DNS:.500px.net
DNS:500px.org
DNS:.500px.org
DNS:abtasty.com
DNS:.abtasty.com
DNS:api.yerdle.com
DNS:biomedcentral.com
DNS:.biomedcentral.com
DNS:bliyoo.bruna.nl
DNS:cdn.mmgcache.net
DNS:cleverbot.io
DNS:.cleverbot.io
DNS:collective-media.net
DNS:.collective-media.net
DNS:decalgirl.com
DNS:.decalgirl.com
DNS:engagesciences.com
DNS:.engagesciences.com
DNS:famous.co
DNS:.famous.co
DNS:fitbit.com
DNS:.fitbit.com
DNS:format.com
DNS:.format.com
DNS:github.app.secretcdn.net
DNS:.github.app.secretcdn.net
DNS:global-pop.tumblr.com
DNS:.global-pop.tumblr.com
DNS:goodeggs.com
DNS:.goodeggs.com
DNS:grindr.com
DNS:.grindr.com
DNS:guim.co.uk
DNS:.guim.co.uk
DNS:hackster.io
DNS:.hackster.io
DNS:harveynichols.com
DNS:.harveynichols.com
DNS:help.optimizely.com
DNS:huevosbuenos.com
DNS:.huevosbuenos.com
DNS:img.society6.com
DNS:.img.society6.com
DNS:inverse.com
DNS:.inverse.com
DNS:kilmer.io
DNS:.kilmer.io
DNS:kindsnacks.com
DNS:.kindsnacks.com
DNS:learn.optimizely.com
DNS:live.cf.public.springer.com
DNS:.live.cf.public.springer.com
DNS:logoscdn.com
DNS:.logoscdn.com
DNS:m.au.vjukebox.com
DNS:m.ca.vjukebox.com
DNS:m.uk.vjukebox.com
DNS:m.us.vjukebox.com
DNS:maps.tmol.co
DNS:mapsapi.tmol.co
DNS:mapsapi.tmol.io
DNS:mapsint.tmol.co
DNS:mapsintqa.tmol.co
DNS:mapsqa.tmol.co
DNS:meerkatapp.co
DNS:.meerkatapp.co
DNS:modafinilcat.com
DNS:my.ticketmaster.ca
DNS:offerpop.com
DNS:.offerpop.com
DNS:ogol.io
DNS:.ogol.io
DNS:optimizely.com
DNS:performance.service.gov.uk
DNS:.performance.service.gov.uk
DNS:preview.performance.service.gov.uk
DNS:.preview.performance.service.gov.uk
DNS:production.performance.service.gov.uk
DNS:.production.performance.service.gov.uk
DNS:q-static.com
DNS:.q-static.com
DNS:qa.cashstar.com
DNS:.qa.cashstar.com
DNS:reissdev.com
DNS:.reissdev.com
DNS:s.sellocdn.com
DNS:.s.sellocdn.com
DNS:s2.tmol.co
DNS:s2.tmol.io
DNS:scanscout2.com
DNS:.scanscout2.com
DNS:screenshot.click
DNS:.screenshot.click
DNS:skedge.me
DNS:.skedge.me
DNS:snapshot.raintank.io
DNS:spotfront.mathtag.com
DNS:springer.com
DNS:.springer.com
DNS:squarecdn.com
DNS:.squarecdn.com
DNS:staging.performance.service.gov.uk
DNS:.staging.performance.service.gov.uk
DNS:static.awesomeom.com
DNS:subscribe.theguardian.com
DNS:teamtreehouse.com
DNS:.teamtreehouse.com
DNS:theguardian.com
DNS:.theguardian.com
DNS:timeout.cat
DNS:.timeout.cat
DNS:timeout.com
DNS:.timeout.com
DNS:timeout.es
DNS:.timeout.es
DNS:timeout.fr
DNS:.timeout.fr
DNS:timeoutkorea.kr
DNS:.timeoutkorea.kr
DNS:timeoutmexico.mx
DNS:.timeoutmexico.mx
DNS:u.sellocdn.com
DNS:.u.sellocdn.com
DNS:venue.tmol.co
DNS:venue.tmol.io
DNS:venueint.tmol.co
DNS:venueqa.tmol.co
DNS:vjukebox.com
DNS:.vjukebox.com
DNS:www.alarmgrid.com
DNS:www.edgee.com
DNS:www.freshbooks.com
DNS:www.graspwise.com
DNS:www.modafinilcat.com
DNS:www.msdayofgiving.org
DNS:www.neste.com
DNS:www.optimizely.com
DNS:www.optimizelystaging.com
DNS:www.reiss.com
DNS:www1.ticketmaster.ca
DNS:www1.ticketmaster.com
DNS:xkcd.com
DNS:*.xkcd.com
^C