g2.shared.global.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 26:2f:ba:72:de:3e:85:49:7a:cb:93:ba was issued on by GlobalSign nv-sa.
With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 26:2f:ba:72:de:3e:85:49:7a:cb:93:baSerial Number (int): 11818130365842022215266833338
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 49:a7:84:70:de:c1:83:2b:2c:81:b9:53:8a:71:86:57:6d:94:59:42
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 9e:26:97:ff:4f:f1:56:d9:1a:d9:dc:7d:8b:b3:d5:6d:a5:bd:f4:e3
Fingerprint (sha256): 01:7f:47:b7:31:8e:4d:ea:54:0a:05:94:96:1a:b7:fb:9e:75:77:19:b1:7d:98:66:0b:4e:a1:12:30:53:aa:d0
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate g2.shared.global.fastly.net
94
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for g2.shared.global.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
g2.shared.global.fastly.net
*.admailtiser.com
*.apartmenttherapy.com
*.apttherapy.net
*.basebanner.com
*.bedandbreakfast.com
*.cbarsrv.com
*.compatiblepartners.com
*.coop.co.uk
*.donorschoose.net
*.donorschoose.org
*.everesttech.net
*.files.trnnd.io
*.forbes.com
*.fs.adoveo.com
*.fs.brandfolder.com
*.fs.greatwithtalent.net
*.fs.liondemand.com
*.fs.teamsynced.com
*.geniale.com
*.gensler.com
*.gocmsrv.com
*.goliveitup.com
*.graphcms.com
*.greenhouse.io
*.hmwy.io
*.homeawayconnect.com
*.medallia.com
*.modcloth.com
*.percipio.com
*.qa.experiencepoint.com
*.saleae.com
*.staging.saleae.com
*.staging.zeit.de
*.student.com
*.taboola.com
*.teracreative.com
*.thekitchn.com
*.tubemogul.com
*.vimeocdn.com
*.vrbo.io
*.webflowtest.io
*.wfm.com
*.wonderbly.com
*.zeit.de
*.zorosrv.com
admailtiser.com
api.cardplusapp.com
api.twizoo.com
bedandbreakfast.com
blogs.biomedcentral.com
cbarsrv.com
cdn.rangetouch.com
cdn.shr.one
charitywateruk.org
compatiblepartners.com
coop.co.uk
donorschoose.net
donorschoose.org
f.exp.gy
fs.adoveo.com
geniale.com
gocmsrv.com
greenhouse.io
hmwy.io
hollaback-staging.vimeo.com
hosting.videomize.tv
howchoo.com
liondemand.com
media.paulsmith.com
modcloth.com
modcloth.net
resources.be.bookingdirect.com
saleae.com
services.premierenetworks.com
staging.saleae.com
staging.zeit.de
stockservice.vimeo.com
student.com
teracreative.com
topreport.news
trip-tile.citymaps.io
tubemogul.com
tv.iheart.com
vrbo.io
wfm.com
wistia.st
wonderbly.com
www.avvoheadshots.com
www.avvoimages.com
www.brandvoice.com
www.researchandmarkets.com
www.swellbottle.com
zeit.de
*.admailtiser.com
*.apartmenttherapy.com
*.apttherapy.net
*.basebanner.com
*.bedandbreakfast.com
*.cbarsrv.com
*.compatiblepartners.com
*.coop.co.uk
*.donorschoose.net
*.donorschoose.org
*.everesttech.net
*.files.trnnd.io
*.forbes.com
*.fs.adoveo.com
*.fs.brandfolder.com
*.fs.greatwithtalent.net
*.fs.liondemand.com
*.fs.teamsynced.com
*.geniale.com
*.gensler.com
*.gocmsrv.com
*.goliveitup.com
*.graphcms.com
*.greenhouse.io
*.hmwy.io
*.homeawayconnect.com
*.medallia.com
*.modcloth.com
*.percipio.com
*.qa.experiencepoint.com
*.saleae.com
*.staging.saleae.com
*.staging.zeit.de
*.student.com
*.taboola.com
*.teracreative.com
*.thekitchn.com
*.tubemogul.com
*.vimeocdn.com
*.vrbo.io
*.webflowtest.io
*.wfm.com
*.wonderbly.com
*.zeit.de
*.zorosrv.com
admailtiser.com
api.cardplusapp.com
api.twizoo.com
bedandbreakfast.com
blogs.biomedcentral.com
cbarsrv.com
cdn.rangetouch.com
cdn.shr.one
charitywateruk.org
compatiblepartners.com
coop.co.uk
donorschoose.net
donorschoose.org
f.exp.gy
fs.adoveo.com
geniale.com
gocmsrv.com
greenhouse.io
hmwy.io
hollaback-staging.vimeo.com
hosting.videomize.tv
howchoo.com
liondemand.com
media.paulsmith.com
modcloth.com
modcloth.net
resources.be.bookingdirect.com
saleae.com
services.premierenetworks.com
staging.saleae.com
staging.zeit.de
stockservice.vimeo.com
student.com
teracreative.com
topreport.news
trip-tile.citymaps.io
tubemogul.com
tv.iheart.com
vrbo.io
wfm.com
wistia.st
wonderbly.com
www.avvoheadshots.com
www.avvoimages.com
www.brandvoice.com
www.researchandmarkets.com
www.swellbottle.com
zeit.de
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
Certificate
The complete raw certificate details for g2.shared.global.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILZDCCCkygAwIBAgIMJi+6ct4+hUl6y5O6MA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkxMTE4MjAx NjE1WhcNMjAxMTEyMTgzNTU1WjB3MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMSQwIgYDVQQDDBtnMi5zaGFyZWQuZ2xvYmFsLmZhc3RseS5uZXQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5RIFTk/m8+6g2sO0fK1OrrnY H0bZsKnV8jyyv8RR2FtDfyBlwo7N2xKf9PAsQRIaEX9RlmC3A7vrg8b/HTvQn6Wd kPFJcVC6CX8GOXBD88GbT583UuTHFWuXN/p83eTSQMd+jR+JECvRz59iO8T7ak1g 1ltuo6BohrwzAtrM7/gYpV29Vtt7ro4NlMz1iw17kbKqLbaxpQPMHBlbR2CfVjGC Z32iLcSC+WHA47rtoYSerUJtqf2ioMYl2iggpAE2Y6QSWzwNcnTQ5p2s8cUt9fJ8 vxPDdLSwz9M6euNb+Ds8EQNhWgC/qRH3XbYEaCRVrkA5Fmn3b35qOGpiVBTVAgMB AAGjgggOMIIICjAOBgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggr BgEFBQcwAoY2aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xv dWRzc2xzaGEyZzMuY3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFs c2lnbi5jb20vY2xvdWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwggaSBgNVHREEggaJMIIGhYIbZzIu c2hhcmVkLmdsb2JhbC5mYXN0bHkubmV0ghEqLmFkbWFpbHRpc2VyLmNvbYIWKi5h cGFydG1lbnR0aGVyYXB5LmNvbYIQKi5hcHR0aGVyYXB5Lm5ldIIQKi5iYXNlYmFu bmVyLmNvbYIVKi5iZWRhbmRicmVha2Zhc3QuY29tgg0qLmNiYXJzcnYuY29tghgq LmNvbXBhdGlibGVwYXJ0bmVycy5jb22CDCouY29vcC5jby51a4ISKi5kb25vcnNj aG9vc2UubmV0ghIqLmRvbm9yc2Nob29zZS5vcmeCESouZXZlcmVzdHRlY2gubmV0 ghAqLmZpbGVzLnRybm5kLmlvggwqLmZvcmJlcy5jb22CDyouZnMuYWRvdmVvLmNv bYIUKi5mcy5icmFuZGZvbGRlci5jb22CGCouZnMuZ3JlYXR3aXRodGFsZW50Lm5l dIITKi5mcy5saW9uZGVtYW5kLmNvbYITKi5mcy50ZWFtc3luY2VkLmNvbYINKi5n ZW5pYWxlLmNvbYINKi5nZW5zbGVyLmNvbYINKi5nb2Ntc3J2LmNvbYIQKi5nb2xp dmVpdHVwLmNvbYIOKi5ncmFwaGNtcy5jb22CDyouZ3JlZW5ob3VzZS5pb4IJKi5o bXd5LmlvghUqLmhvbWVhd2F5Y29ubmVjdC5jb22CDioubWVkYWxsaWEuY29tgg4q Lm1vZGNsb3RoLmNvbYIOKi5wZXJjaXBpby5jb22CGCoucWEuZXhwZXJpZW5jZXBv aW50LmNvbYIMKi5zYWxlYWUuY29tghQqLnN0YWdpbmcuc2FsZWFlLmNvbYIRKi5z dGFnaW5nLnplaXQuZGWCDSouc3R1ZGVudC5jb22CDSoudGFib29sYS5jb22CEiou dGVyYWNyZWF0aXZlLmNvbYIPKi50aGVraXRjaG4uY29tgg8qLnR1YmVtb2d1bC5j b22CDioudmltZW9jZG4uY29tggkqLnZyYm8uaW+CECoud2ViZmxvd3Rlc3QuaW+C CSoud2ZtLmNvbYIPKi53b25kZXJibHkuY29tggkqLnplaXQuZGWCDSouem9yb3Ny di5jb22CD2FkbWFpbHRpc2VyLmNvbYITYXBpLmNhcmRwbHVzYXBwLmNvbYIOYXBp LnR3aXpvby5jb22CE2JlZGFuZGJyZWFrZmFzdC5jb22CF2Jsb2dzLmJpb21lZGNl bnRyYWwuY29tggtjYmFyc3J2LmNvbYISY2RuLnJhbmdldG91Y2guY29tggtjZG4u c2hyLm9uZYISY2hhcml0eXdhdGVydWsub3JnghZjb21wYXRpYmxlcGFydG5lcnMu Y29tggpjb29wLmNvLnVrghBkb25vcnNjaG9vc2UubmV0ghBkb25vcnNjaG9vc2Uu b3JngghmLmV4cC5neYINZnMuYWRvdmVvLmNvbYILZ2VuaWFsZS5jb22CC2dvY21z cnYuY29tgg1ncmVlbmhvdXNlLmlvggdobXd5Lmlvghtob2xsYWJhY2stc3RhZ2lu Zy52aW1lby5jb22CFGhvc3RpbmcudmlkZW9taXplLnR2ggtob3djaG9vLmNvbYIO bGlvbmRlbWFuZC5jb22CE21lZGlhLnBhdWxzbWl0aC5jb22CDG1vZGNsb3RoLmNv bYIMbW9kY2xvdGgubmV0gh5yZXNvdXJjZXMuYmUuYm9va2luZ2RpcmVjdC5jb22C CnNhbGVhZS5jb22CHXNlcnZpY2VzLnByZW1pZXJlbmV0d29ya3MuY29tghJzdGFn aW5nLnNhbGVhZS5jb22CD3N0YWdpbmcuemVpdC5kZYIWc3RvY2tzZXJ2aWNlLnZp bWVvLmNvbYILc3R1ZGVudC5jb22CEHRlcmFjcmVhdGl2ZS5jb22CDnRvcHJlcG9y dC5uZXdzghV0cmlwLXRpbGUuY2l0eW1hcHMuaW+CDXR1YmVtb2d1bC5jb22CDXR2 LmloZWFydC5jb22CB3ZyYm8uaW+CB3dmbS5jb22CCXdpc3RpYS5zdIINd29uZGVy Ymx5LmNvbYIVd3d3LmF2dm9oZWFkc2hvdHMuY29tghJ3d3cuYXZ2b2ltYWdlcy5j b22CEnd3dy5icmFuZHZvaWNlLmNvbYIad3d3LnJlc2VhcmNoYW5kbWFya2V0cy5j b22CE3d3dy5zd2VsbGJvdHRsZS5jb22CB3plaXQuZGUwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjm MB0GA1UdDgQWBBRJp4Rw3sGDKyyBuVOKcYZXbZRZQjATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA2AHgOpsxPzKc9r6bK5685XhdlN9DVS KMemZNwpOd+koEXbx7v3kRZQCpfLyyZ0ekN0U6aeLoMeX8bBosay11UwWy+jiaYX khz2LbZRCVVoZA7pFq01z/+Ow8x5sjPOLhcVH8cc8H41YUdeOMOXFgqv37H7CPHs oISm9sLX0YrOnyJ3zzdK0mMn+56V5kYn7lFRAJlEWUX+fgdvLibH65vXgVHJN+2C fa39X1L0WginfkxRwOMsxPTd6qh5exGUxNcLw4ClTMPvDy37nVKWFOBejTf4xEUm QnCvFyGwZO9CTBRblG9SzMH12OsKqQTHz3UedDn6Kz6dXeIHSmKSgQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUSBU5P5vPuoNrDtHyt Tq652B9G2bCp1fI8sr/EUdhbQ38gZcKOzdsSn/TwLEESGhF/UZZgtwO764PG/x07 0J+lnZDxSXFQugl/BjlwQ/PBm0+fN1LkxxVrlzf6fN3k0kDHfo0fiRAr0c+fYjvE +2pNYNZbbqOgaIa8MwLazO/4GKVdvVbbe66ODZTM9YsNe5Gyqi22saUDzBwZW0dg n1Yxgmd9oi3EgvlhwOO67aGEnq1Cban9oqDGJdooIKQBNmOkEls8DXJ00OadrPHF LfXyfL8Tw3S0sM/TOnrjW/g7PBEDYVoAv6kR9122BGgkVa5AORZp929+ajhqYlQU 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11818130365842022215266833338 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 20:16:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-12 18:35:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'g2.shared.global.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20563564225550381765136978563481723765305251219363641530345875784643557654575701944554600239793651097404184279544473682879671411144741059427376520819771531431477747726987973767879243067569213857809340392090319945622550252854692909380274656160175149253404093354720118849994817301094790044443017153194748181212704929261230818102803356107754923805253452227962176116573290963066128129356562621200366035947723768934228829689625159825786531360621126062763278386029798796692435278361810349867040415481976025093270945340955546101759374690095307337703013360141803724844698616076262038535903325556332067434465002557536648565973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1673 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g2.shared.global.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admailtiser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartmenttherapy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basebanner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedandbreakfast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbarsrv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compatiblepartners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everesttech.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.trnnd.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.adoveo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.brandfolder.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.greatwithtalent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.liondemand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.teamsynced.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geniale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gocmsrv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goliveitup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphcms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenhouse.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmwy.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeawayconnect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medallia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modcloth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.percipio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.experiencepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saleae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.saleae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.student.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taboola.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teracreative.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekitchn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemogul.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeocdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbo.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webflowtest.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wonderbly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zorosrv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admailtiser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cardplusapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.twizoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedandbreakfast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.biomedcentral.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbarsrv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rangetouch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shr.one' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitywateruk.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compatiblepartners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.exp.gy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.adoveo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocmsrv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhouse.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmwy.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollaback-staging.vimeo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.videomize.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howchoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liondemand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.paulsmith.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.be.bookingdirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.premierenetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.saleae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockservice.vimeo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teracreative.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreport.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip-tile.citymaps.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.iheart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrbo.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wistia.st' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderbly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avvoheadshots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avvoimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandvoice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.researchandmarkets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swellbottle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeit.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49a78470dec1832b2c81b9538a7186576d945942 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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