prod.secure-policy.cloudmgmt.paloaltonetworks.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 69:ec:4c:2b:d6:54:0c:eb was issued on by GoDaddy.com, Inc..

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=prod.secure-policy.cloudmgmt.paloaltonetworks.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 69:ec:4c:2b:d6:54:0c:eb
Serial Number (int): 7632559219649285355
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: a0:3a:24:d9:25:7e:31:49:0d:d8:66:95:31:a2:e4:42:5c:dc:2c:63
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 9f:b1:87:4b:f0:47:50:cf:5d:1b:c0:c7:70:32:8a:25:ba:0d:41:5d
Fingerprint (sha256): 01:c9:a3:64:0e:c5:de:68:d4:64:f0:8d:24:b0:1c:2f:ef:81:d2:63:2a:67:22:fa:43:b7:b7:a7:9c:38:16:ac

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-5878.crl

Check the revocation status for certificate prod.secure-policy.cloudmgmt.paloaltonetworks.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.secure-policy.cloudmgmt.paloaltonetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.in.secure-policy.cloudmgmt.paloaltonetworks.com
prod.au.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.gov.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.ch.secure-policy.cloudmgmt.paloaltonetworks.com
prod.es.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.secure-policy.cloudmgmt.paloaltonetworks.com
prod.it.secure-policy.cloudmgmt.paloaltonetworks.com
prod.uk.secure-policy.cloudmgmt.paloaltonetworks.com
prod.de.secure-policy.cloudmgmt.paloaltonetworks.com
prod.sg.secure-policy.cloudmgmt.paloaltonetworks.com
prod.id.secure-policy.cloudmgmt.paloaltonetworks.com
prod.eu.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.sg.secure-policy.cloudmgmt.paloaltonetworks.com
prod.ch.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.de.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.eu.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.uk.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.es.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.it.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.au.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.in.secure-policy.cloudmgmt.paloaltonetworks.com
prod.gov.secure-policy.cloudmgmt.paloaltonetworks.com
www.api-prod.secure-policy.cloudmgmt.paloaltonetworks.com
prod.secure-policy.cloudmgmt.paloaltonetworks.com
www.prod.secure-policy.cloudmgmt.paloaltonetworks.com
prod.ca.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.nl.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.jp.secure-policy.cloudmgmt.paloaltonetworks.com
prod.jp.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.ca.secure-policy.cloudmgmt.paloaltonetworks.com
prod.us.secure-policy.cloudmgmt.paloaltonetworks.com
prod.nl.secure-policy.cloudmgmt.paloaltonetworks.com
api-prod.us.secure-policy.cloudmgmt.paloaltonetworks.com

Other certificates including the domain name paloaltonetworks.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
nova-licensing-https.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
assets.cdn.apps.paloaltonetworks.com
asia-south1.datastore.prisma-saas.paloaltonetworks.com
pansupportqa.paloaltonetworks.com
app-proxy.us.paloaltonetworks.com
jira.paloaltonetworks.com
mail.europe-west2.email.dlp.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
proxy-qa4.eu.paloaltonetworks.com
xecm.paloaltonetworks.com
proxy.us.paloaltonetworks.com
lrc.paloaltonetworks.com
app-proxy-qa2.us.paloaltonetworks.com
io-qa.dns.service.paloaltonetworks.com
secure05.stage.lithium.com
app.developers.paloaltonetworks.com
nova-management-app.paloaltonetworks.com
status.3stepit.com
www.shoprous.com
secure09.lithium.com
www.paloaltonetworks.com
laboratoriodaluna.com.br
awspayg.paloaltonetworks.com
abrsonline.atostatus.com.au
jira.paloaltonetworks.com
app-proxy-qa2-uat.us.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
prod.secure-policy.cloudmgmt.paloaltonetworks.com
api.sase.paloaltonetworks.com
ml-static-stg.service.paloaltonetworks.com
*.vpc1.prisma-saas.paloaltonetworks.com
consul-rtdns.service.paloaltonetworks.com
developers.paloaltonetworks.com
secure05.stage.lithium.com
san-003.ceros.com
lrc-eu.paloaltonetworks.com
netsec.qa.appsvc.paloaltonetworks.com
get.paloaltonetworks.com
gyprocpro-admin.chococrm.com
www.sander-catering.cateringportal.io
updatesdebug.paloaltonetworks.com
test.prisma-saas.paloaltonetworks.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
status.3stepit.com
secure03.lithium.com
saas.aimmo.ai
portal.zoomies.io
secure05.stage.lithium.com
events.paloaltonetworks.com
saasedl.paloaltonetworks.com
techinsider.dev.paloaltonetworks.com
support.qa.app.paloaltonetworks.com
abrsonline.atostatus.com.au
autoassistant.paloaltonetworks.com
admin.crownsbakery.com
san-003.ceros.com
www.evolutio.app
abrsonline.atostatus.com.au
downloads.paloaltonetworks.com
www.bayoulacombemuseum.com
*.xdr.us.paloaltonetworks.com
*.us1.cent1.gov.cdl.paloaltonetworks.com
salestapslack.app.paloaltonetworks.com
*.dev.xsoar.paloaltonetworks.com
proxy-stg4.us.paloaltonetworks.com
jira.paloaltonetworks.com
identitytest.paloaltonetworks.com
swiftdoc.paloaltonetworks.com
register.paloaltonetworks.com
app-proxy.uk.paloaltonetworks.com
aperture.dev3.as.appsvc.paloaltonetworks.com
*.contentupdates.paloaltonetworks.com
*.magnifier.paloaltonetworks.com
apex.qa.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
postg.paloaltonetworks.com
api.paloaltonetworks.com
proxy.eu.paloaltonetworks.com
*.developers.paloaltonetworks.com
ml-qa.service.paloaltonetworks.com
Palo Alto Networks, Inc.
directory-sync.us.paloaltonetworks.com
igniteservices.paloaltonetworks.com
security.paloaltonetworks.com
*.app-portal-dev.us.paloaltonetworks.com
uc18.janrainengage.com
splunk.paloaltonetworks.com
test.gov.adv-saas-vis.paloaltonetworks.com
*.magnifier.eu.paloaltonetworks.com
outreach.paloaltonetworks.com
na64-1.cdn.salesforce-communities.com
provider2.actionservice.paloaltonetworks.com
status.3stepit.com
aperture-americas.qa2.as.appsvc.paloaltonetworks.com
dlp.paloaltonetworks.com
status.3stepit.com
search.paloaltonetworks.com

Certificate

The complete raw certificate details for prod.secure-policy.cloudmgmt.paloaltonetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bwGVnuz7UUKBUX9gIBQ
o8vUU736rLbMPILdULbPwGDT99j82APuVACjpWhqQZ9oemoYRemK+hRCYwvM4bAY
n+Q7YgWcDdktC4CsD+W8fplJQxWpXEa7XPvg8K7mL/0KA14ylS8/so7mQosW5J7p
X5ufw/vG5GSRyJtConB/Iuh0354jR2ujIrodV2urD91iGXivTR5o2cjrCNfFxLCF
zQk2C3e+THXDs+Lilt9g5Dm39dSX0oHVkz+b3k2QM0LUzg0XReNagajVmqWuiZd/
c8I9TyCMHLH0A3E4J73+F5bHPrBSwMQ5HrOk2jicu4if8z+ShCaHFHzpWfLPPA9s
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7632559219649285355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 13:40:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 13:40:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27486430641039546637490142092696699461300333284442481080794510413765726215214258218582829627042860674636630718621747282136218142782659942279117344284795728665551650347608631325653707073163695781672791237311491619353907489257075159123930621470264244852342651091008535139228902844792987745024271536646749958045914152247384041881736501945614286731401075527198457960771567119782336165156489071660822233239216397052448780563799488417177290241439238653675650055061466874300100088222810232792128892280663673021205879082483581535141700623082883381123595267319831815620524949800331481860409936733709563213794576968550477425867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-5878.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.in.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.au.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.gov.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.ch.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.es.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.it.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.uk.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.de.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sg.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.id.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.eu.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.sg.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ch.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.de.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.eu.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.uk.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.es.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.it.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.au.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.in.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gov.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api-prod.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ca.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.nl.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.jp.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.jp.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.ca.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.us.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nl.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.us.secure-policy.cloudmgmt.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a03a24d9257e31490dd8669531a2e4425cdc2c63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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