warnermedia.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 59:a1:21:d7:7b:63:7f:97:18:b2:3f:cd was issued on by GlobalSign nv-sa.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 59:a1:21:d7:7b:63:7f:97:18:b2:3f:cd
Serial Number (int): 27738962744092667335769472973
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 12:e7:35:9b:e1:59:d3:06:16:e8:6d:3e:96:22:71:fa:02:0d:0c:19
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 86:a3:ad:57:6e:0f:cd:da:fd:65:be:6b:2f:c7:7d:b2:70:51:5c:5f
Fingerprint (sha256): 03:86:c1:93:b8:09:cc:ed:7b:08:91:72:41:42:38:28:cb:b6:60:29:10:c5:c2:ef:6b:6e:88:a6:55:e4:05:88

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate warnermedia.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for warnermedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

warnermedia.com
*.warnermedia.com
*.timewarner.com
*.warnermediagroup.com
*.warnerbros.com
*.twi.com
*.stage.twi.com

Other certificates including the domain name warnermedia.com

(limited to 100 certificates)
portal.dev-b2b.wmedia.tech
api.registration.content.warnermedia.com
catman.warnermedia.com
thv.warnermedia.com
tableau.east.warnermedia.com
partnerhub.qa-b2b.wmedia.tech
brian.warnermedia.com
turner.com
creativeshop-staging.warnermedia.com
briandev.warnermedia.com
neo-dev.wbd.com
wmosccmcmg.warnermedia.com
submitmobile-auth.dope.warnermedia.com
blueprint.prod-ops.wmedia.tech
uar.appsec-nonprod.cso.warnermedia.com
warnermedia.com
lactnfm03.wmad.warnermedia.com
cdn-hbomax.warnermedia.com
sni.cloudflaressl.com
image.20210419.200345.s6.et.yellsatcloud.com
qa.wmswagstore.warnermedia.com
atom-qa.warnermedia.com
*.warnermedia.com
spy-staging.warnermedia.com
tapkit.warnermedia.com
pages.onefifty.warnermedia.com
qaappcentralappservice1.warnermedia.com
catmanqa.warnermedia.com
*.css.cso.warnermedia.com
access.warnermedia.com
smee.appsec-nonprod.cso.warnermedia.com
tenableio.cso.warnermedia.com
qa.grafana.prism.warnermedia.com
testkitshop-staging.warnermedia.com
heimdall-old.appsec.cso.warnermedia.com
screentrack.warnermedia.com
CloudVDI.Warnermedia.com
wmosccmcmg.warnermedia.com
morph-web-app.dev-ops.wmedia.tech
epg.tapkit.warnermedia.com
turner.com
atom-git.reverse-proxy.appsec.cso.warnermedia.com
contentsecurity.warnermedia.com
*.dev.galileo.warnermedia.com
turner.com
qaiamservicesappservice1.warnermedia.com
iamadmindev.warnermedia.com
shazam-dev.warnermedia.com
feast.beta.dap.warnermedia.com
dsb.warnermedia.com
*.warnermedia.com
dev.wmswagstore.warnermedia.com
turner.com
devloginappservice.warnermedia.com
twd-vdi-pri.warnermedia.com
qaappcentralappservice1.warnermedia.com
api.registration.content.warnermedia.com
artemis.appsec-nonprod.cso.warnermedia.com
submitmobile.warnermedia.com
switchboard.cso.warnermedia.com
*.brandcenter.warnermedia.com
image.20210419.200345.s6.et.yellsatcloud.com
*.cso.warnermedia.com
milestone0.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
catmanqaoffice.warnermedia.com
thv.warnermedia.com
ADMS.WMAD.WarnerMedia.com
admin-deliver-portal.qa-b2b.wmedia.tech
radiantldap.warnermedia.com
*.warnermedia.com
sni.cloudflaressl.com
sni.cloudflaressl.com
prodwestaupappservice1.warnermedia.com
kubeflow.beta.dap.warnermedia.com
thv.warnermedia.com
mstack.prod-ps.wmedia.tech
atom.warnermedia.com
lasso-web-ui.prod-ops.wmedia.tech
contentsecurity.warnermedia.com
dsb-dev.warnermedia.com
batmanapp.wcet-aio.warnermedia.com
msctoscalicensedr.wmad.warnermedia.com
sni.cloudflaressl.com
desktop.timewarner.com
maxdev-airflow.warnermedia.com
github.appsec.cso.warnermedia.com
prodwestiamadminappservice2.warnermedia.com
xytechatlantatest.warnermedia.com
deliver-portal.dev-b2b.wmedia.tech
prodlearning.warnermedia.com
edsapps-dev.warnermedia.com
return-dev.warnermedia.com
spy-dev.wbd.com
concertdatatest.warnermedia.com
ablink.mail.hbomax.com
prodeasticopappservice2.warnermedia.com
dev.thv.warnermedia.com

Certificate

The complete raw certificate details for warnermedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIMWaEh13tjf5cYsj/NMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzAxMzExNTIxMDRaFw0y
NDAzMDMxNTIxMDNaMGkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazER
MA8GA1UEBxMITmV3IFlvcmsxGjAYBgNVBAoTEVdhcm5lciBNZWRpYSwgTExDMRgw
FgYDVQQDEw93YXJuZXJtZWRpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDrGiM0Pq9DccStri5wWUzwOp6Iiq9Q/Iu+1tspnzEKgNwQXQZn8uWr
qGAmYk6cjXYuWp+BqBAwx6tIe26yH8dxbCcf8dV+AIVZ9LQDzY4uRJgtg/4z1OMS
qIw4Xsi7ougdmp1KAoRSwdF1YO4lSpq39TVHE3NwUBU83mcuGrqeHurvv9FM0JFF
sTQIWBv/SevNltsQZVpJTR0s+TTeHKHoZbinRTA+sDm0yYQ/WziP639ETuGEQSkZ
M5BIA9MuRgwQeBKfTNJDwf5alIztYtDeTP5Rh7fvxCP8fBdQp4+MZyGwAdNzjw7m
Tz4fFKUOiAealgHiiXccvFxtiSw29tb9AgMBAAGjggIEMIICADAOBgNVHQ8BAf8E
BAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1
cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcG
CCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3Ns
Y2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0
dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJ
BgNVHRMEAjAAMIGFBgNVHREEfjB8gg93YXJuZXJtZWRpYS5jb22CESoud2FybmVy
bWVkaWEuY29tghAqLnRpbWV3YXJuZXIuY29tghYqLndhcm5lcm1lZGlhZ3JvdXAu
Y29tghAqLndhcm5lcmJyb3MuY29tggkqLnR3aS5jb22CDyouc3RhZ2UudHdpLmNv
bTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/
8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFBLnNZvhWdMGFuhtPpYicfoCDQwZ
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQlN9aRHvo
u8EgZFAvVsSyllFaReP8TxU5trHFYtfVvEGhFP7gjb2dg/JkoD/4UyvUHJHn2fAA
QLJdnNimnCLEz/0CtqW20iXzB2fw+K4pwA2DsHD2gMHI/SXuxXgzCoqOa7vSE3Tr
tpHvaY54ft7gA5pPzDvLpISBdT/wcvGSYtxbJ2B8XjCiVtYNpYbagJiYceN33eBD
O+XiZinjBsjQbW4l8d7CTUTl62XETDh/1sEN7EHwW4vLehwcXfV3kfekrZQ/qvpM
DLw5m9G+cPAJiwAkE+F/LVmGm7XjkdB0RE5I7vdgOSy5dz5mJcbVj8bfhkJ72Qor
r97yusBMA9u5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xojND6vQ3HEra4ucFlM
8DqeiIqvUPyLvtbbKZ8xCoDcEF0GZ/Llq6hgJmJOnI12LlqfgagQMMerSHtush/H
cWwnH/HVfgCFWfS0A82OLkSYLYP+M9TjEqiMOF7Iu6LoHZqdSgKEUsHRdWDuJUqa
t/U1RxNzcFAVPN5nLhq6nh7q77/RTNCRRbE0CFgb/0nrzZbbEGVaSU0dLPk03hyh
6GW4p0UwPrA5tMmEP1s4j+t/RE7hhEEpGTOQSAPTLkYMEHgSn0zSQ8H+WpSM7WLQ
3kz+UYe378Qj/HwXUKePjGchsAHTc48O5k8+HxSlDogHmpYB4ol3HLxcbYksNvbW
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27738962744092667335769472973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 15:21:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 15:21:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'warnermedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29678890556510919975435783716306431942164706585974898077605272610532234303022797509914402534274109071299509495831526378985053659056403484828608926834285432881190414402254442116307844942337446925310126640655972961124652405881007176219330711452360097829751216592018680313549197173635421462570577318365310257036124601200263537139380713577001209884229499408587115803033084534085836533455043276718329442503586911561025023535841246795380419641021762131413414782892917613764369540956426753914368064366641044142285504103096534765775761741184500905655693807806499922025338114405238545274312652789530768251098103648187873416957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timewarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnerbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.twi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12e7359be159d30616e86d3e962271fa020d0c19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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