email.discovery.com

- Discovery Communications Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:73:9d:fa:03:c9:73:d0:be:55:c6:5e:ef:82:1e:e0:67 was issued on by GlobalSign nv-sa.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Discovery Communications Inc

Organization: Discovery Communications Inc
State / Province: Maryland
Locality: Silver Spring
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:73:9d:fa:03:c9:73:d0:be:55:c6:5e:ef:82:1e:e0:67
Serial Number (int): 1492291860429339649479886306271734165069927
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 39:28:ea:01:55:31:ae:46:6d:2d:63:ab:43:70:b1:b0:70:ca:21:de
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 61:05:49:d6:f7:06:a0:1a:58:7b:f6:0d:69:58:db:e1:e6:87:8a:01
Fingerprint (sha256): 01:60:ef:92:f5:f5:3c:9c:fc:b1:ab:97:12:f3:2e:27:9b:b8:34:39:21:87:96:93:3d:96:b4:51:36:18:a1:03

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate email.discovery.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email.discovery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email.discovery.com
autodiscover.own.tv
autodiscover.hubtv.com
autodiscover.mydiscovery.com
autodiscover.discoverybrasil.com
autodiscover.realtimetv.it
autodiscover.hubnetwork.com
autodiscover.dejso.com
autodiscover.wilmatvinc.com
autodiscover.howstuffworks.com
emailus.discovery.com
dctzepcas01.dci.discovery.com
dctzepcas02.dci.discovery.com
strzepcas01.dci.discovery.com
strzepcas02.dci.discovery.com
ldczepcas01.dci.discovery.com
ldczepcas02.dci.discovery.com
sinzepcas01.dci.discovery.com
loyzepcas02.dci.discovery.com
dctcasarray.dci.discovery.com
emaildne.discovery.com
strcasarray.dci.discovery.com
ldccasarray.dci.discovery.com
emaildnap.discovery.com
dctzepcas03.dci.discovery.com
dctzepcas04.dci.discovery.com
strzepcas03.dci.discovery.com
strzepcas04.dci.discovery.com
sincasarray.dci.discovery.com
dctzephybrid01.dci.discovery.com
dctzephybrid02.dci.discovery.com
strzephybrid01.dci.discovery.com
strzephybrid02.dci.discovery.com
hybrid01.discovery.com
hybrid02.discovery.com
hybrid03.discovery.com
hybrid04.discovery.com
autodiscover.eoptest.discovery.com
sinzephybrid01.dci.discovery.com
hybrid05.discovery.com
strzepmail05.dci.discovery.com
autodiscover.discovery.com
autodiscover.sbsdiscovery.co.uk
autodiscover.deejaytv.it

Other certificates including the domain name discovery.com

(limited to 100 certificates)
tvlistings-qa.discovery.com
insider.discovery.com
indiamail.discovery.com
*.disco-api.com
*.discovery.com
passwordsafe-dev.discovery.com
*.nw.discovery.com
email.discovery.com
AWUZAPONARPRO01.dci.discovery.com
*.infra.discovery.com
iasm.discovery.com
adsalesdesign.discovery.com
deliver-qa.discovery.com
blacklineqa1.discovery.com
*.qa2.sauce.digitalstudios.discovery.com
creaapcps01.discovery.com
dev-momentum.discovery.com
insider.discovery.com
adsalesdesign.discovery.com
lnmail1.discovery.com
ir.corporate.discovery.com
japan.discovery.com
dtag-jsreport.devops.discovery.com
discovery.com
lync2013.dci.discovery.com
woody.discovery.com
auth.discovery.com
MUMAAPLYNCSBC02.dci.discovery.com
www.mexico.discovery.com
access.discovery.com
sapsanprd.discovery.com
hybridmail.discovery.com
corporate.discovery.com
*.sauce.digitalstudios.discovery.com
screening.discovery.com
dads.discovery.com
oktaadmin.discovery.com
remote.discovery.com
securestore.discovery.com
lnmail1.discovery.com
ssa.discovery.com
*.dev.discovery.com
adsalesdesign.discovery.com
store.discovery.com
cxoqa.discovery.com
inlet.discovery.com
images.dds.discovery.com
www.adsalesevents.discovery.com
api.digitalstudios.discovery.com
tlssyslog.discovery.com
org.discovery.com
games.discovery.com
leapfrog-ssl-4.gcs-web.com
citrix-director.discovery.com
edgepool2013.discovery.com
insider.discovery.com
deliver-uat.discovery.com
gohelp.discovery.com
*.bcqa.discovery.com
hrmobileinboxsba.discovery.com
www.food.com
dgoauth-qa.discovery.com
cloud-qa.discovery.com
access.discovery.com
*.discovery.com
entrada.discovery.com
lync2013.dci.discovery.com
soundfx.discovery.com
*.videogo.sauce.digitalstudios.discovery.com
straapiptv.discovery.com
lync2013.dci.discovery.com
strrapotxt01.discovery.com
*.prod.discovery.com
discovery.com
blacklineqa1.discovery.com
people.discovery.com
preprod.projectcat.discovery.com
gohelp.discovery.com
dtag-api.devops.discovery.com
tkyzaplyncsba01.dci.discovery.com
strzadtraps01.dci.discovery.com
insider.discovery.com
www.consumerproducts.discovery.com
CXO.discovery.com
*.disco-api.com
linkit-stage.dci.discovery.com
gohelp.discovery.com
lnmail5.discovery.com
www.adsalesevents.discovery.com
auth.discovery.com
epak.discovery.com
gohelp.discovery.com
www.food.com
bk.inotes.discovery.com
*.nw.discovery.com
photoassets.discovery.com
leapfrog-ssl-4.gcs-web.com
access.discovery.com
discovery.com
KTCZIPWRKSFT01.dci.discovery.com

Certificate

The complete raw certificate details for email.discovery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWrZH77SE9BDjYWkdIt7
ktRjeeYuW5N104MfAvZzHIZ77mbFARPrdpDV/gohvIHY0jY/eiE8+4k3ABdXJBNW
Jx+3YOujp4S3iP0u3B2oZ4JbMGHJvotbq9fRneXIjC9ftHc8kA3goYZw6LvEmdxX
PlF60DKL+fsj+WtciYZOdvzOYsmfDx0yK8uMyxvNdv1eHDT8QnsDT5TCf52W+VaP
7/SazWmalEZkthxNvkY4iV3XUQ8DQO5/kgPWj8ksdYvBOUy8Dk/ishxUA1iUJBpB
ixIHhnapSUy3rhuA/xbjRdpDFR9icNnKYZW12zHc3rqPTWTa0wal0gvTDnu92zS+
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492291860429339649479886306271734165069927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-05 22:38:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-08 20:46:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Silver Spring'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Discovery Communications Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email.discovery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19872102661561666103749434087973018610001774539782829499731070450793974635532381615882568161790968257405785559205375610136891863219025453938287868904086954322030179375544590806584905115152421719396596405244821426355298024133920105953558153174106969699430270325418030988562621003239093266922288790960359507495447993427476652435669848234624243854433057713531432189272094053903656285570893420309069487414141223169774702428889442142451953376866213092424272455504618384477402657030037813141242406594477795891951065713489119247901536724147575196829344978355747796531974378065074549824311463584512993296469553158103487528529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1289 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.own.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hubtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mydiscovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.discoverybrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.realtimetv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hubnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dejso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wilmatvinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailus.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzepcas01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzepcas02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzepcas01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzepcas02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldczepcas01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldczepcas02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinzepcas01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyzepcas02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctcasarray.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emaildne.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strcasarray.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldccasarray.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emaildnap.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzepcas03.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzepcas04.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzepcas03.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzepcas04.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sincasarray.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzephybrid01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctzephybrid02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzephybrid01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzephybrid02.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid01.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid02.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid03.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid04.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eoptest.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinzephybrid01.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid05.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strzepmail05.dci.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sbsdiscovery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.deejaytv.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3928ea015531ae466d2d63ab4370b1b070ca21de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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