ssl2531.cloudflare.com

- CloudFlare, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:2b:c7:b7:6d:ae:c4:7b:68:96:80:e6:08:15:b0:4b:d4 was issued on by GlobalSign nv-sa.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:2b:c7:b7:6d:ae:c4:7b:68:96:80:e6:08:15:b0:4b:d4
Serial Number (int): 1492196372739579677206391037447442067901396
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 96:42:80:ca:fd:72:e9:f4:84:72:42:25:67:33:2e:ed:ce:56:f7:8e
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): ca:18:80:42:73:15:b9:84:0f:17:a3:7f:e4:02:76:a7:24:f1:fb:9d
Fingerprint (sha256): 00:17:c7:66:4b:0c:ee:c4:5f:16:e5:fd:44:07:74:c0:60:e2:5f:eb:6d:91:34:9a:6d:c5:eb:c1:f5:de:60:36

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate ssl2531.cloudflare.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2531.cloudflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2531.cloudflare.com
pdoffduty.com
precharge.com
topito.com
*.customersbilling.biz
*.doorsys.com
*.topito.com
ustelecom.org
*.pdoffduty.com
*.precharge.com
*.ustelecom.org
customersbilling.biz
doorsys.com
dsidoorservices.com
*.dsidoorservices.com
*.houdinisoft.com
houdinisoft.com

Other certificates including the domain name cloudflare.com

(limited to 100 certificates)
ssl6628.cloudflare.com
ssl2831.cloudflare.com
ssl4246.cloudflare.com
ssl84317.cloudflare.com
ssl2262.cloudflare.com
ssl2812.cloudflare.com
ssl7337.cloudflare.com
ssl7575.cloudflare.com
ssl6377.cloudflare.com
ssl6480.cloudflare.com
ssl2778.cloudflare.com
ssl7159.cloudflare.com
ssl6504.cloudflare.com
ssl2076.cloudflare.com
ssl93554.cloudflare.com
ssl4486.cloudflare.com
ssl2515.cloudflare.com
ssl7543.cloudflare.com
ssl4852.cloudflare.com
ssl7390.cloudflare.com
ssl4333.cloudflare.com
ssl4641.cloudflare.com
ssl7477.cloudflare.com
ssl5571.cloudflare.com
ssl2835.cloudflare.com
ssl2562.cloudflare.com
ssl83992.cloudflare.com
ssl2717.cloudflare.com
ssl2906.cloudflare.com
ssl6704.cloudflare.com
ssl2335.cloudflare.com
ssl4487.cloudflare.com
ssl6813.cloudflare.com
ssl6466.cloudflare.com
ssl6823.cloudflare.com
ssl6292.cloudflare.com
ssl7133.cloudflare.com
ssl3035.cloudflare.com
ssl2736.cloudflare.com
ssl84304.cloudflare.com
ssl2339.cloudflare.com
ssl2571.cloudflare.com
ssl3107.cloudflare.com
ssl2992.cloudflare.com
ssl2652.cloudflare.com
ssl5735.cloudflare.com
ssl6558.cloudflare.com
ssl3033.cloudflare.com
ssl84327.cloudflare.com
ssl3097.cloudflare.com
ssl4011.cloudflare.com
ssl7241.cloudflare.com
ssl86304.cloudflare.com
ssl6657.cloudflare.com
ssl7257.cloudflare.com
ssl6846.cloudflare.com
ssl83886.cloudflare.com
ssl7072.cloudflare.com
ssl6738.cloudflare.com
ssl6466.cloudflare.com
ssl2446.cloudflare.com
ssl2393.cloudflare.com
ssl2387.cloudflare.com
ssl2312.cloudflare.com
ssl4811.cloudflare.com
ssl7348.cloudflare.com
ssl6272.cloudflare.com
ssl93550.cloudflare.com
ssl2071.cloudflare.com
ssl6996.cloudflare.com
ssl84313.cloudflare.com
ssl2920.cloudflare.com
ssl2192.cloudflare.com
ssl82116.cloudflare.com
ssl2556.cloudflare.com
ssl7322.cloudflare.com
ssl6552.cloudflare.com
ssl6598.cloudflare.com
ssl7542.cloudflare.com
ssl2523.cloudflare.com
ssl6953.cloudflare.com
ssl6950.cloudflare.com
ssl85870.cloudflare.com
ssl2531.cloudflare.com
ssl2764.cloudflare.com
ssl4118.cloudflare.com
ssl2113.cloudflare.com
ssl82161.cloudflare.com
ssl2722.cloudflare.com
ssl2084.cloudflare.com
ssl3038.cloudflare.com
ssl4140.cloudflare.com
ssl83885.cloudflare.com
ssl7570.cloudflare.com
ssl6447.cloudflare.com
ssl2734.cloudflare.com
ssl3011.cloudflare.com
ssl8548.cloudflare.com
ssl2113.cloudflare.com
ssl2419.cloudflare.com

Certificate

The complete raw certificate details for ssl2531.cloudflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgISESErx7dtrsR7aJaA5ggVsEvUMA0GCSqGSIb3DQEBBQUA
MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD
VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw
HhcNMTMwMTE4MTU1MzA4WhcNMTcwNDEzMTYxMjQ2WjBuMQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGTAXBgNVBAoTEENs
b3VkRmxhcmUsIEluYy4xHzAdBgNVBAMTFnNzbDI1MzEuY2xvdWRmbGFyZS5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFjWb+ucK0f9Iq7CrWhnx
7tTXRIFcMNmMk9XG8ZzFbBX2x+OBNOifrS6+SONzPY/tQhGgg18anTIgoXxotytd
2KcC0JyDs2Lnl18C0BUzjwmim5IsdGuK61/ux3O7PEEZxCdxD7gwh/VqhlzpGl2X
50brENdXQDrLp8HaEbbuxCp90a3WxqIeKNMc05BHFawxA2In8m/E73YaoXo6bVnW
zS7UwuPyOHtL5KXG6Mf2E0/qR2NWash3I5SZOqWvBC/QP49v9bS7IiYNWa+u6Xoz
H7SAh0wCs4CQelyo8IyCi90446VM6PaVpAzv88Dsrhxs9dwE7gDOnixz9nsU33CT
AgMBAAGjggLpMIIC5TAOBgNVHQ8BAf8EBAMCBaAwTAYDVR0gBEUwQzBBBgkrBgEE
AaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v
cmVwb3NpdG9yeS8wggE5BgNVHREEggEwMIIBLIIWc3NsMjUzMS5jbG91ZGZsYXJl
LmNvbYINcGRvZmZkdXR5LmNvbYINcHJlY2hhcmdlLmNvbYIKdG9waXRvLmNvbYIW
Ki5jdXN0b21lcnNiaWxsaW5nLmJpeoINKi5kb29yc3lzLmNvbYIMKi50b3BpdG8u
Y29tgg11c3RlbGVjb20ub3Jngg8qLnBkb2ZmZHV0eS5jb22CDyoucHJlY2hhcmdl
LmNvbYIPKi51c3RlbGVjb20ub3JnghRjdXN0b21lcnNiaWxsaW5nLmJpeoILZG9v
cnN5cy5jb22CE2RzaWRvb3JzZXJ2aWNlcy5jb22CFSouZHNpZG9vcnNlcnZpY2Vz
LmNvbYIRKi5ob3VkaW5pc29mdC5jb22CD2hvdWRpbmlzb2Z0LmNvbTAJBgNVHRME
AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBFBgNVHR8EPjA8MDqg
OKA2hjRodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9u
dmFsZzIuY3JsMIGWBggrBgEFBQcBAQSBiTCBhjBHBggrBgEFBQcwAoY7aHR0cDov
L3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxn
Mi5jcnQwOwYIKwYBBQUHMAGGL2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n
c29yZ2FuaXphdGlvbnZhbGcyMB0GA1UdDgQWBBSWQoDK/XLp9IRyQiVnMy7tzlb3
jjAfBgNVHSMEGDAWgBRdRrKNxEt0HLvt9XO2Orc4j3WefjANBgkqhkiG9w0BAQUF
AAOCAQEAqDTTN8yw9v1hx2V3mPmd0xOX2TOL94BByvwle0noleXY36kHoschpMcr
sxiMgT0wQfX/CopH0UPboChfXWE/br/e00DYqhAmLsSKCW0B6lFIQ7FE/yEg/Qin
UoLvI44Eu3QLKbotvUwN0O//2qNMqmrTAM1YOMo+nZ2uPkqpZiClVDwJtS3s4k7C
Bie8MTEgmVT2DKvXHe/DvxL5FlwcalY7mg1rVbBqA575RAoPTYyaF0dnqV4MyyAZ
NvC0wdv8OH6vYbl/PqDsgkfcskECcaDN/jGaS3ea4F4jDZ7QHEE6d1wvTQVTJhto
pNdWmrOvT6ihMjtWdAgv6VjW5H+a4w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBY1m/rnCtH/SKuwq1oZ
8e7U10SBXDDZjJPVxvGcxWwV9sfjgTTon60uvkjjcz2P7UIRoINfGp0yIKF8aLcr
XdinAtCcg7Ni55dfAtAVM48JopuSLHRriutf7sdzuzxBGcQncQ+4MIf1aoZc6Rpd
l+dG6xDXV0A6y6fB2hG27sQqfdGt1saiHijTHNOQRxWsMQNiJ/JvxO92GqF6Om1Z
1s0u1MLj8jh7S+SlxujH9hNP6kdjVmrIdyOUmTqlrwQv0D+Pb/W0uyImDVmvrul6
Mx+0gIdMArOAkHpcqPCMgovdOOOlTOj2laQM7/PA7K4cbPXcBO4Azp4sc/Z7FN9w
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492196372739579677206391037447442067901396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-18 15:53:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-13 16:12:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2531.cloudflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20209080663471664138186565469443823518187577775157545666837204437879355194141743568619490974157311057480551339283171900122613824203453592250681152197445837110400949792530910229761499063815780690541319615317397192384292615897716097511931773695739593313006196553343171844811658781737174781208408141822317908637804463768874323561416370840078149356077021408876328605557740592064629376120842825783122835480857289051145861981752377921380442270204032050541102726988956274058961963499596000241960637232243128690465222270139700940614765048991123596242930121639717553830195589893997484788118126016836681656406211262974030475411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2531.cloudflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdoffduty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customersbilling.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doorsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdoffduty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersbilling.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsidoorservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsidoorservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houdinisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houdinisoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							964280cafd72e9f48472422567332eedce56f78e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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