app-proxy-qa2-uat.us.paloaltonetworks.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number e8:20:da:58:89:66:e0:8d was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app-proxy-qa2-uat.us.paloaltonetworks.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e8:20:da:58:89:66:e0:8d
Serial Number (int): 16726609089851220109
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 89:7b:39:54:18:50:f2:5b:ea:fb:a0:4c:a7:2f:b5:a7:a8:ec:64:56
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 2e:6b:1f:2e:63:6f:a4:f1:35:4f:b8:55:d1:cc:5e:95:5b:4d:b4:c4
Fingerprint (sha256): 01:bc:7c:a4:4c:8d:fb:47:8b:ee:f5:61:1c:a8:bb:9e:9a:03:36:e3:ce:0c:d7:06:26:ee:d5:fc:48:04:21:17

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1700.crl

Check the revocation status for certificate app-proxy-qa2-uat.us.paloaltonetworks.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app-proxy-qa2-uat.us.paloaltonetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-proxy-qa2-uat.us.paloaltonetworks.com
www.app-proxy-qa2-uat.us.paloaltonetworks.com

Other certificates including the domain name paloaltonetworks.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
nova-licensing-https.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
assets.cdn.apps.paloaltonetworks.com
asia-south1.datastore.prisma-saas.paloaltonetworks.com
pansupportqa.paloaltonetworks.com
app-proxy.us.paloaltonetworks.com
jira.paloaltonetworks.com
mail.europe-west2.email.dlp.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
proxy-qa4.eu.paloaltonetworks.com
xecm.paloaltonetworks.com
proxy.us.paloaltonetworks.com
lrc.paloaltonetworks.com
app-proxy-qa2.us.paloaltonetworks.com
io-qa.dns.service.paloaltonetworks.com
secure05.stage.lithium.com
app.developers.paloaltonetworks.com
nova-management-app.paloaltonetworks.com
status.3stepit.com
www.shoprous.com
secure09.lithium.com
www.paloaltonetworks.com
laboratoriodaluna.com.br
awspayg.paloaltonetworks.com
abrsonline.atostatus.com.au
jira.paloaltonetworks.com
app-proxy-qa2-uat.us.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
prod.secure-policy.cloudmgmt.paloaltonetworks.com
api.sase.paloaltonetworks.com
ml-static-stg.service.paloaltonetworks.com
*.vpc1.prisma-saas.paloaltonetworks.com
consul-rtdns.service.paloaltonetworks.com
developers.paloaltonetworks.com
secure05.stage.lithium.com
san-003.ceros.com
lrc-eu.paloaltonetworks.com
netsec.qa.appsvc.paloaltonetworks.com
get.paloaltonetworks.com
gyprocpro-admin.chococrm.com
www.sander-catering.cateringportal.io
updatesdebug.paloaltonetworks.com
test.prisma-saas.paloaltonetworks.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
status.3stepit.com
secure03.lithium.com
saas.aimmo.ai
portal.zoomies.io
secure05.stage.lithium.com
events.paloaltonetworks.com
saasedl.paloaltonetworks.com
techinsider.dev.paloaltonetworks.com
support.qa.app.paloaltonetworks.com
abrsonline.atostatus.com.au
autoassistant.paloaltonetworks.com
admin.crownsbakery.com
san-003.ceros.com
www.evolutio.app
abrsonline.atostatus.com.au
downloads.paloaltonetworks.com
www.bayoulacombemuseum.com
*.xdr.us.paloaltonetworks.com
*.us1.cent1.gov.cdl.paloaltonetworks.com
salestapslack.app.paloaltonetworks.com
*.dev.xsoar.paloaltonetworks.com
proxy-stg4.us.paloaltonetworks.com
jira.paloaltonetworks.com
identitytest.paloaltonetworks.com
swiftdoc.paloaltonetworks.com
register.paloaltonetworks.com
app-proxy.uk.paloaltonetworks.com
aperture.dev3.as.appsvc.paloaltonetworks.com
*.contentupdates.paloaltonetworks.com
*.magnifier.paloaltonetworks.com
apex.qa.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
postg.paloaltonetworks.com
api.paloaltonetworks.com
proxy.eu.paloaltonetworks.com
*.developers.paloaltonetworks.com
ml-qa.service.paloaltonetworks.com
Palo Alto Networks, Inc.
directory-sync.us.paloaltonetworks.com
igniteservices.paloaltonetworks.com
security.paloaltonetworks.com
*.app-portal-dev.us.paloaltonetworks.com
uc18.janrainengage.com
splunk.paloaltonetworks.com
test.gov.adv-saas-vis.paloaltonetworks.com
*.magnifier.eu.paloaltonetworks.com
outreach.paloaltonetworks.com
na64-1.cdn.salesforce-communities.com
provider2.actionservice.paloaltonetworks.com
status.3stepit.com
aperture-americas.qa2.as.appsvc.paloaltonetworks.com
dlp.paloaltonetworks.com
status.3stepit.com
search.paloaltonetworks.com

Certificate

The complete raw certificate details for app-proxy-qa2-uat.us.paloaltonetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIJAOgg2liJZuCNMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIwMDIwNTIxNTMwN1oX
DTIyMDIwNTIxNTMwN1owVzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMTIwMAYDVQQDEylhcHAtcHJveHktcWEyLXVhdC51cy5wYWxvYWx0b25ldHdv
cmtzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANh0t6tMsQMk
b+yLw7oK17hUbE2tfmy7Mv6/y+y2YzQgodc77hi3byBr8l531wgHGr8GvjtqHvb5
WtC1FLkw0gctCoqs4ofQGeyB/z1NB5svbcdZWqm+nZhZWxWPMSejGY66bI9LbkPU
z99bkEaVZazBO+VH6qBR3MWbBK709MuKu30IF8lJNdG67HTSXlULw9LjbOA9qvTW
Do+/3OB07WLyP4yQU+Mqvrbuo7Ujkvq5Z1BwLCAEaNZBBVYPd/Wc/464GJ/ZDY75
iw+7N/rbyjBCiiQ2P5f3wGpoYFW47vtKRAdU+4I12GQxpnBOB1TY5ocZE8FGzMcV
d6ZMMQ4j1gkCAwEAAaOCAgwwggIIMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g
K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTcwMC5jcmwwXQYD
VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy
dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr
BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t
LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw
tCyAzjBjBgNVHREEXDBagilhcHAtcHJveHktcWEyLXVhdC51cy5wYWxvYWx0b25l
dHdvcmtzLmNvbYItd3d3LmFwcC1wcm94eS1xYTItdWF0LnVzLnBhbG9hbHRvbmV0
d29ya3MuY29tMB0GA1UdDgQWBBSJezlUGFDyW+r7oEynL7WnqOxkVjATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh35pVUtjB5qMqn7Gtrv0
ffSvt8qmqHikgFvvf5LLJtN1TMWcxQLJYzfR5Txxfi4ANcu0Fi4QkMbAkxf9JUuf
WVQn5CrlTtx0xpPx60zLKIPrqkJU6Ej/ZugUjbBUdjXnRR3LXt4IppY1ua3Tqdew
QXZNDHIFQkdr5wmdvdfsUbDQHJTLcssdb7j9A9GjzSXyvTl33JP66dSoB1lq+HQ/
BQ35OW/SR/1SxpA7/f7Va6IOpfIxzgDSVrQZTdzp1MV8UTza/GojqUTFakpdNBIs
cZmjZUV3nXDB5+btBrvXx8BhgRwBO5wzxLs/9Unue0YLQkmbC/i/14CV9qr22Xw9
PQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HS3q0yxAyRv7IvDugrX
uFRsTa1+bLsy/r/L7LZjNCCh1zvuGLdvIGvyXnfXCAcavwa+O2oe9vla0LUUuTDS
By0Kiqzih9AZ7IH/PU0Hmy9tx1laqb6dmFlbFY8xJ6MZjrpsj0tuQ9TP31uQRpVl
rME75UfqoFHcxZsErvT0y4q7fQgXyUk10brsdNJeVQvD0uNs4D2q9NYOj7/c4HTt
YvI/jJBT4yq+tu6jtSOS+rlnUHAsIARo1kEFVg939Zz/jrgYn9kNjvmLD7s3+tvK
MEKKJDY/l/fAamhgVbju+0pEB1T7gjXYZDGmcE4HVNjmhxkTwUbMxxV3pkwxDiPW
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16726609089851220109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 21:53:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-05 21:53:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-proxy-qa2-uat.us.paloaltonetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27325029396122185112622684066934279687179117984345467901782840221738958739246388207281582164412831507038937272366061862751316700341203567746056905024951738311843405509174447036886280075836058548217134225144372715144679287914806378651816499643343719721263862802820521478481762078516556776415024463643755065998207668231202030493555846119116146382397615808039024307190530134646670950668115022868202434493328596233651486583649873348552714812704751877106184466586919617578735386740843006524661109059326237875246456836620705810142976578221408349827297104047203488204797786097044664907884463012347317048177009120727034746377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1700.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-proxy-qa2-uat.us.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app-proxy-qa2-uat.us.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							897b39541850f25beafba04ca72fb5a7a8ec6456
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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