*.givegab.com

- Givegab, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2e:87:4e:c4:e8:71:f4:a6:05:7c:3c:c7 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Givegab, Inc.

Organization: Givegab, Inc.
State / Province: NY
Locality: Ithaca
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:87:4e:c4:e8:71:f4:a6:05:7c:3c:c7
Serial Number (int): 14399887414326787862385409223
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0c:8f:f4:d0:02:8c:62:29:18:75:de:67:8b:38:bb:6e:28:85:1c:b0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 57:a9:9a:a2:8f:3e:b0:c4:bd:cf:cc:28:36:4b:12:6f:41:ef:c2:f5
Fingerprint (sha256): 01:a6:24:6b:bc:a7:76:43:79:5f:b7:66:22:1a:83:98:b4:40:cf:b2:e5:da:e6:48:a5:c8:00:43:95:a9:22:0d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate *.givegab.com

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.givegab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.givegab.com
*.canisiusgivingday.com
*.enterprise.givegab.com
*.igivecatholic.org
*.springiton.org
abilenegives.org
amplifyatx.ilivehereigivehere.org
amplifyatx.org
biggivehouston.org
dayofgiving.ncsu.edu
dayofgiving.rochester.edu
domore24delaware.com
elpasogivingday.org
extragive.org
fcgives.org
give-more-24.org
givebiggreenbay.org
giveday.luthersem.edu
giveforgoodlouisville.org
givelocalccf.org
givelocallancaster.org
givelocallouisville.org
givelocalmov.org
givelocalyork.org
givelove.xula.edu
givemore24.org
givewhereyoulivecollier.org
giving.inn.org
givingday.cornell.edu
givingday.dsu.edu
givingday.sarahlawrence.edu
givingday.snc.edu
givingday.springfield.edu
givingday.umd.edu
givingday.vanderbilt.edu
givingday.wheaton.edu
humanracesc.org
huskersgive.unl.edu
igivecatholic.org
newsmatch.org
notredameday.nd.edu
palmettogivingday.org
raisetheregion.org
steps4students.org
texomagives.org
thegreatgive.org
user-content.givegab-cdn.com
washingtoncountygives.org
wegivecatholic.org
www.abilenegives.org
www.amplifyatx.org
www.bayougives.org
www.bigdgives.org
www.biggivehouston.org
www.brooklyngives.org
www.cunytuesday.org
www.domore24delaware.com
www.domore24racine.org
www.elpasogivingday.org
www.embraceastream.org
www.extragive.org
www.fcgives.org
www.flatheadgives.org
www.flatheadgiving.org
www.givebigchq.org
www.givebigdfw.org
www.givebiggreenbay.org
www.givebiggv.org
www.givebigkern.org
www.givebigpittsburgh.com
www.givedekalbcounty.org
www.giveforgoodlouisville.org
www.givelocalccf.org
www.givelocallancaster.org
www.givelocallouisville.org
www.givelocalmov.org
www.givelocalyork.org
www.givemore24.org
www.givenday.org
www.givewhereyoulivecollier.org
www.giving-day.org
www.givingday.cornell.edu
www.givingday.sarahlawrence.edu
www.greaterhelenagives.org
www.greatgiveflorida.org
www.horizonsgivingday.org
www.hudsongives.org
www.humanracesc.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.iowa4hgivingday.org
www.kygives.org
www.missoulagives.org
www.newsmatch.org
www.nhgives.org
www.nvbiggive.org
www.nygivesday.org
www.palmettogivingday.org
www.raisetheregion.org
www.spring2action.org
www.staugustinegives.com
www.steps4students.org
www.texomagives.org
www.tggce.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.thegreatgive.org
www.thespringshare.org
www.washingtoncountygives.org
www.wegivecatholic.org
www.yellowstonegives.org
givegab.com

Other certificates including the domain name givegab.com

(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net

Certificate

The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOmTCCDYGgAwIBAgIMLodOxOhx9KYFfDzHMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwMjI1MTU0
ODE1WhcNMTkwOTIwMjMxNzEwWjBbMQswCQYDVQQGEwJVUzELMAkGA1UECAwCTlkx
DzANBgNVBAcMBkl0aGFjYTEWMBQGA1UECgwNR2l2ZWdhYiwgSW5jLjEWMBQGA1UE
AwwNKi5naXZlZ2FiLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKTFyZBl6W1EfB/RWf/+5YMflMWhN53Q3FSeUHgj6XYTPzQ5huFmlpog14f76pvZ
IgVnYmDSbcWlUzUMpfqe86dSZa5c6sSJb0BbkYYrcKYlrnSFvBIzWQCHBuCCt7pz
btfQTRL6NW5SfiJT+j7vUDKqYigYlLH9WIibLeZSLYfkFJ5i88DxCX6dc5sHyAYf
wk5mw2sJQStBXbChFwqdlBaR2oI8Spjz/A8DyGCStNAg+fasCc8VUpmqFdsnxl/D
co3PSqsaz9sUT6ioi70+Y7rptIOFdZenAI6f20EBwxUEMseYBF7pjHX8LudClNGK
5T4Ad+CuI+IxfJ4dDBxBIWECAwEAAaOCC18wggtbMA4GA1UdDwEB/wQEAwIFoDCB
igYIKwYBBQUHAQEEfjB8MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2Jh
bHNpZ24uY29tL2NhY2VydC9jbG91ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGG
Kmh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNV
HSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n
bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADCC
CeMGA1UdEQSCCdowggnWgg0qLmdpdmVnYWIuY29tghcqLmNhbmlzaXVzZ2l2aW5n
ZGF5LmNvbYIYKi5lbnRlcnByaXNlLmdpdmVnYWIuY29tghMqLmlnaXZlY2F0aG9s
aWMub3JnghAqLnNwcmluZ2l0b24ub3JnghBhYmlsZW5lZ2l2ZXMub3JngiFhbXBs
aWZ5YXR4LmlsaXZlaGVyZWlnaXZlaGVyZS5vcmeCDmFtcGxpZnlhdHgub3JnghJi
aWdnaXZlaG91c3Rvbi5vcmeCFGRheW9mZ2l2aW5nLm5jc3UuZWR1ghlkYXlvZmdp
dmluZy5yb2NoZXN0ZXIuZWR1ghRkb21vcmUyNGRlbGF3YXJlLmNvbYITZWxwYXNv
Z2l2aW5nZGF5Lm9yZ4INZXh0cmFnaXZlLm9yZ4ILZmNnaXZlcy5vcmeCEGdpdmUt
bW9yZS0yNC5vcmeCE2dpdmViaWdncmVlbmJheS5vcmeCFWdpdmVkYXkubHV0aGVy
c2VtLmVkdYIZZ2l2ZWZvcmdvb2Rsb3Vpc3ZpbGxlLm9yZ4IQZ2l2ZWxvY2FsY2Nm
Lm9yZ4IWZ2l2ZWxvY2FsbGFuY2FzdGVyLm9yZ4IXZ2l2ZWxvY2FsbG91aXN2aWxs
ZS5vcmeCEGdpdmVsb2NhbG1vdi5vcmeCEWdpdmVsb2NhbHlvcmsub3JnghFnaXZl
bG92ZS54dWxhLmVkdYIOZ2l2ZW1vcmUyNC5vcmeCG2dpdmV3aGVyZXlvdWxpdmVj
b2xsaWVyLm9yZ4IOZ2l2aW5nLmlubi5vcmeCFWdpdmluZ2RheS5jb3JuZWxsLmVk
dYIRZ2l2aW5nZGF5LmRzdS5lZHWCG2dpdmluZ2RheS5zYXJhaGxhd3JlbmNlLmVk
dYIRZ2l2aW5nZGF5LnNuYy5lZHWCGWdpdmluZ2RheS5zcHJpbmdmaWVsZC5lZHWC
EWdpdmluZ2RheS51bWQuZWR1ghhnaXZpbmdkYXkudmFuZGVyYmlsdC5lZHWCFWdp
dmluZ2RheS53aGVhdG9uLmVkdYIPaHVtYW5yYWNlc2Mub3JnghNodXNrZXJzZ2l2
ZS51bmwuZWR1ghFpZ2l2ZWNhdGhvbGljLm9yZ4INbmV3c21hdGNoLm9yZ4ITbm90
cmVkYW1lZGF5Lm5kLmVkdYIVcGFsbWV0dG9naXZpbmdkYXkub3JnghJyYWlzZXRo
ZXJlZ2lvbi5vcmeCEnN0ZXBzNHN0dWRlbnRzLm9yZ4IPdGV4b21hZ2l2ZXMub3Jn
ghB0aGVncmVhdGdpdmUub3Jnghx1c2VyLWNvbnRlbnQuZ2l2ZWdhYi1jZG4uY29t
ghl3YXNoaW5ndG9uY291bnR5Z2l2ZXMub3JnghJ3ZWdpdmVjYXRob2xpYy5vcmeC
FHd3dy5hYmlsZW5lZ2l2ZXMub3JnghJ3d3cuYW1wbGlmeWF0eC5vcmeCEnd3dy5i
YXlvdWdpdmVzLm9yZ4IRd3d3LmJpZ2RnaXZlcy5vcmeCFnd3dy5iaWdnaXZlaG91
c3Rvbi5vcmeCFXd3dy5icm9va2x5bmdpdmVzLm9yZ4ITd3d3LmN1bnl0dWVzZGF5
Lm9yZ4IYd3d3LmRvbW9yZTI0ZGVsYXdhcmUuY29tghZ3d3cuZG9tb3JlMjRyYWNp
bmUub3Jnghd3d3cuZWxwYXNvZ2l2aW5nZGF5Lm9yZ4IWd3d3LmVtYnJhY2Vhc3Ry
ZWFtLm9yZ4IRd3d3LmV4dHJhZ2l2ZS5vcmeCD3d3dy5mY2dpdmVzLm9yZ4IVd3d3
LmZsYXRoZWFkZ2l2ZXMub3JnghZ3d3cuZmxhdGhlYWRnaXZpbmcub3JnghJ3d3cu
Z2l2ZWJpZ2NocS5vcmeCEnd3dy5naXZlYmlnZGZ3Lm9yZ4IXd3d3LmdpdmViaWdn
cmVlbmJheS5vcmeCEXd3dy5naXZlYmlnZ3Yub3JnghN3d3cuZ2l2ZWJpZ2tlcm4u
b3Jnghl3d3cuZ2l2ZWJpZ3BpdHRzYnVyZ2guY29tghh3d3cuZ2l2ZWRla2FsYmNv
dW50eS5vcmeCHXd3dy5naXZlZm9yZ29vZGxvdWlzdmlsbGUub3JnghR3d3cuZ2l2
ZWxvY2FsY2NmLm9yZ4Iad3d3LmdpdmVsb2NhbGxhbmNhc3Rlci5vcmeCG3d3dy5n
aXZlbG9jYWxsb3Vpc3ZpbGxlLm9yZ4IUd3d3LmdpdmVsb2NhbG1vdi5vcmeCFXd3
dy5naXZlbG9jYWx5b3JrLm9yZ4ISd3d3LmdpdmVtb3JlMjQub3JnghB3d3cuZ2l2
ZW5kYXkub3Jngh93d3cuZ2l2ZXdoZXJleW91bGl2ZWNvbGxpZXIub3JnghJ3d3cu
Z2l2aW5nLWRheS5vcmeCGXd3dy5naXZpbmdkYXkuY29ybmVsbC5lZHWCH3d3dy5n
aXZpbmdkYXkuc2FyYWhsYXdyZW5jZS5lZHWCGnd3dy5ncmVhdGVyaGVsZW5hZ2l2
ZXMub3Jnghh3d3cuZ3JlYXRnaXZlZmxvcmlkYS5vcmeCGXd3dy5ob3Jpem9uc2dp
dmluZ2RheS5vcmeCE3d3dy5odWRzb25naXZlcy5vcmeCE3d3dy5odW1hbnJhY2Vz
Yy5vcmeCD3d3dy5odmdpdmVzLm9yZ4ISd3d3LmlkYWhvZ2l2ZXMub3Jngg53d3cu
aWxnaXZlLmNvbYIXd3d3Lmlvd2E0aGdpdmluZ2RheS5vcmeCD3d3dy5reWdpdmVz
Lm9yZ4IVd3d3Lm1pc3NvdWxhZ2l2ZXMub3JnghF3d3cubmV3c21hdGNoLm9yZ4IP
d3d3Lm5oZ2l2ZXMub3JnghF3d3cubnZiaWdnaXZlLm9yZ4ISd3d3Lm55Z2l2ZXNk
YXkub3Jnghl3d3cucGFsbWV0dG9naXZpbmdkYXkub3JnghZ3d3cucmFpc2V0aGVy
ZWdpb24ub3JnghV3d3cuc3ByaW5nMmFjdGlvbi5vcmeCGHd3dy5zdGF1Z3VzdGlu
ZWdpdmVzLmNvbYIWd3d3LnN0ZXBzNHN0dWRlbnRzLm9yZ4ITd3d3LnRleG9tYWdp
dmVzLm9yZ4INd3d3LnRnZ2NlLm9yZ4IWd3d3LnRoZWFtYXppbmdnaXZlLm9yZ4IU
d3d3LnRoZWJpZ2dpdmVzYS5vcmeCE3d3dy50aGViaWdzaGFyZS5vcmeCFHd3dy50
aGVncmVhdGdpdmUub3JnghZ3d3cudGhlc3ByaW5nc2hhcmUub3Jngh13d3cud2Fz
aGluZ3RvbmNvdW50eWdpdmVzLm9yZ4IWd3d3LndlZ2l2ZWNhdGhvbGljLm9yZ4IY
d3d3LnllbGxvd3N0b25lZ2l2ZXMub3JnggtnaXZlZ2FiLmNvbTAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFAyP9NACjGIpGHXeZ4s4u24o
hRywMB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPa81wrXDj7bqjYk7wn5xWqlo2
nK6Mp594+naIhe9HUe88NdIOeKuMzyRVGnpUJ/zlViIXgOvISn9WIIXnoQkTXdFm
WUp27liY5KKBNNSvFMmaYlEyI6EZmXNhsdqrlpS/82D9Hg+W5xLDsA4tdOWVbAMf
obXBaE1P4KEW7qSwuLeuSfYS/dajoEDCZVcQzWDBXTxU9z8jtqRaUocDNTYN8XO3
XW557tTD1/Oi1cmC7ALy0f9jf2hbGgA9gIBxGZ7BpfaQOc8czrbe5XdSLmKcr3os
+QDod/wnAuPqor3Zsu4Au+vMvjwZVGYiCEahR3AYRJ87VTZPQuo7ErHbzvVG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXJkGXpbUR8H9FZ//7l
gx+UxaE3ndDcVJ5QeCPpdhM/NDmG4WaWmiDXh/vqm9kiBWdiYNJtxaVTNQyl+p7z
p1JlrlzqxIlvQFuRhitwpiWudIW8EjNZAIcG4IK3unNu19BNEvo1blJ+IlP6Pu9Q
MqpiKBiUsf1YiJst5lIth+QUnmLzwPEJfp1zmwfIBh/CTmbDawlBK0FdsKEXCp2U
FpHagjxKmPP8DwPIYJK00CD59qwJzxVSmaoV2yfGX8Nyjc9KqxrP2xRPqKiLvT5j
uum0g4V1l6cAjp/bQQHDFQQyx5gEXumMdfwu50KU0YrlPgB34K4j4jF8nh0MHEEh
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14399887414326787862385409223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 15:48:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 23:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20800614596536580274010047047173259417941961024304627786367386388498018839251916901688707088259446690192886226539839452969911865526793391818551035480154388240409132130466017893873202060734038519157933024551291722225008032645508996682171352826941752553420364018552965614921737160510569673885412020177984965229563517038086170834240889652069811574050616739481994160009304182480002953968281354982540795366208797289512214613808127704048976426121878327129495622398104446738946371111059353171231654836489748115633629109087558015518019911709882170477876511713293731413060890030766754003669839439278209299204517822532639859041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2522 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprise.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abilenegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.ilivehereigivehere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-more-24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveday.luthersem.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallancaster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalmov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelove.xula.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.inn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.dsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.snc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.springfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.vanderbilt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.wheaton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanracesc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huskersgive.unl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameday.nd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmettogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisetheregion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtoncountygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abilenegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayougives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyngives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24racine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraceastream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigchq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigdfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallancaster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalmov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givenday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving-day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterhelenagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatgiveflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsongives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanracesc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowa4hgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missoulagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbiggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmettogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raisetheregion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring2action.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinegives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tggce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespringshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtoncountygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowstonegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8ff4d0028c62291875de678b38bb6e28851cb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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