ssl002.zesty.io

- Zesty io Platform, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 03:41:2b:74:14:c7:e8:57:3b:41:5b:a4 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Zesty io Platform, Inc.

Organization: Zesty io Platform, Inc.
State / Province: California
Locality: San Diego
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:2b:74:14:c7:e8:57:3b:41:5b:a4
Serial Number (int): 1007240410817482910060338084
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: 27:60:8b:61:f8:18:94:25:c3:96:b2:9b:54:32:d4:5d:98:7a:4e:84
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): b6:dc:c6:ac:7b:53:82:de:d6:f5:52:fb:42:a4:33:ee:3c:19:7c:1e
Fingerprint (sha256): 03:b9:d4:0d:3e:21:22:4f:e3:6d:c9:58:9f:68:5e:33:9d:4b:5c:29:d7:cc:7b:4c:1f:d7:d8:a0:6a:37:af:14

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ssl002.zesty.io

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl002.zesty.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl002.zesty.io
*.zesty.site
ahumanproject.com
getitnowstores.com
homechoicestores.com
www.ahumanproject.com
www.getitnowstores.com
yakimavalleyvet.com

Other certificates including the domain name zesty.io

(limited to 100 certificates)
ssl002.zesty.io
dns-vetting1d.map.fastly.net
ssl371232.cloudflaressl.com
i2.shared.global.fastly.net
survey.itcgroup.io
dns-vetting1d.map.fastly.net
h2.shared.global.fastly.net
i2.shared.global.fastly.net
h2.shared.global.fastly.net
*.stage-manage.zesty.io
dns-vetting1d.map.fastly.net
zesty.io
ssl371232.cloudflaressl.com
dns-vetting1d.map.fastly.net
zesty.io
*.andoveranimalhospital.biz
zesty.io
ssl002.zesty.io
i2.shared.global.fastly.net
i2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
webbappsupport.logitout.com
ssl371233.cloudflaressl.com
ssl371233.cloudflaressl.com
www.info.zesty.io
i2.shared.global.fastly.net
ssl002.zesty.io
dns-vetting1d.map.fastly.net
ssl371233.cloudflaressl.com
i2.shared.global.fastly.net
i2.shared.global.fastly.net
*.manage.zesty.io
ssl002.zesty.io
i2.shared.global.fastly.net
i2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
ssl7535.cloudflare.com
i2.shared.global.fastly.net
ssl002.zesty.io
ssl002.zesty.io
i2.shared.global.fastly.net
ssl002.zesty.io
zesty.io
dns-vetting1d.map.fastly.net
zesty.io
ssl279245.cloudflaressl.com
i2.shared.global.fastly.net
i2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
accounts.zesty.io
survey.themakeconsulting.com
support.owlseven.ca
support.edgt.com
h2.shared.global.fastly.net
i2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
survey.globalsocialwelfaresummit.com
h2.shared.global.fastly.net
zesty.io
zesty.io
dns-vetting1d.map.fastly.net
survey.kelphr.com
i2.shared.global.fastly.net
ssl002.zesty.io
dns-vetting1d.map.fastly.net
zesty.io
dns-vetting1d.map.fastly.net
enquete.revisium.fr
survey.neurohydrate.com
dns-vetting1d.map.fastly.net
zesty.io
i2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
i2.shared.global.fastly.net
h2.shared.global.fastly.net
ssl279245.cloudflaressl.com
i2.shared.global.fastly.net
ssl002.zesty.io
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
i2.shared.global.fastly.net
survey.mytest.tokyo
ssl002.zesty.io
i2.shared.global.fastly.net
survey.kelphr.com
zesty.io
h2.shared.global.fastly.net
i2.shared.global.fastly.net
zesty.io
forum.zesty.io
encuestas.m4g.com.pe
*.andoveranimalhospital.biz
i2.shared.global.fastly.net
ssl279245.cloudflaressl.com
zesty.io
ssl002.zesty.io
ssl002.zesty.io
ssl002.zesty.io
i2.shared.global.fastly.net

Certificate

The complete raw certificate details for ssl002.zesty.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIMA0ErdBTH6Fc7QVukMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwMTMwMTg0
NjE0WhcNMTkxMDE4MTcxOTQwWjByMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTESMBAGA1UEBxMJU2FuIERpZWdvMSAwHgYDVQQKExdaZXN0eSBpbyBQ
bGF0Zm9ybSwgSW5jLjEYMBYGA1UEAxMPc3NsMDAyLnplc3R5LmlvMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U9Bf19efGfTc4Ktu9yVLlFBiGghf2UN
rPf5EMl+6Ojm+V4w5rDQrrOSS4FuG8l49v4sLm6auVGRcniDerzgE99cW5i7vwVy
CqblmQ9fJOZhqDtHZOCpfPSnztL6RV3+UsFNY6Url8wxiav+aQLZkR0ztpDCqfGj
/0KO7OIxg/5U0WIuir2uNj4+aztt1DHUMR+DEwugQtkdtpKUgL9HQovYCwQFaZem
BN8TKm80Y1GlfqcdIfCzQwTEJYS/pjFzsBr8g0K8M2nR674UdKmVAXdWP4n4r9Bg
15dOLXcTwO/Ffwb9Zdd6A3B3Yo8pF1l/gnPVBz9p7rrzbbmVz1uXwwIDAQABo4IC
JjCCAiIwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUH
MAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Ns
c2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u
Y29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYI
KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv
MAgGBmeBDAECAjAJBgNVHRMEAjAAMIGrBgNVHREEgaMwgaCCD3NzbDAwMi56ZXN0
eS5pb4IMKi56ZXN0eS5zaXRlghFhaHVtYW5wcm9qZWN0LmNvbYISZ2V0aXRub3dz
dG9yZXMuY29tghRob21lY2hvaWNlc3RvcmVzLmNvbYIVd3d3LmFodW1hbnByb2pl
Y3QuY29tghZ3d3cuZ2V0aXRub3dzdG9yZXMuY29tghN5YWtpbWF2YWxsZXl2ZXQu
Y29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUJ2CL
YfgYlCXDlrKbVDLUXZh6ToQwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2U
WOYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAEqlpaSf
FzMjRy+LWHfxhNlY5F9pqGmjWqbH+/zTqaj1MDBDxrrElnjJv76bIIeaKU5YtsvI
Wugp6qAJKB0zj5udQhEQbe8NmCfAEMf/vlB9/KoTqORlNC3qG7Gd4AlCbe20PuFJ
AOyyWo05F/Kz1HkGksUy16Rhnkn1H72muopfQhTtq9IZFbMxxLL9TU6vzln6ydgj
gvYTwFBKojzD4ztVJk8uOeN1kdp+6Tv4Bp2HzJPkuoh8w98Su+f9ng7H3c2qry2O
dAG45+kch0kAnkMC6T8GEeiiLt4KJolZZwkey7xSOlnnAZ+Pn7x7lvWvTxEUYmBv
ZLWbZm2899N41uA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U9Bf19efGfTc4Ktu9yV
LlFBiGghf2UNrPf5EMl+6Ojm+V4w5rDQrrOSS4FuG8l49v4sLm6auVGRcniDerzg
E99cW5i7vwVyCqblmQ9fJOZhqDtHZOCpfPSnztL6RV3+UsFNY6Url8wxiav+aQLZ
kR0ztpDCqfGj/0KO7OIxg/5U0WIuir2uNj4+aztt1DHUMR+DEwugQtkdtpKUgL9H
QovYCwQFaZemBN8TKm80Y1GlfqcdIfCzQwTEJYS/pjFzsBr8g0K8M2nR674UdKmV
AXdWP4n4r9Bg15dOLXcTwO/Ffwb9Zdd6A3B3Yo8pF1l/gnPVBz9p7rrzbbmVz1uX
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1007240410817482910060338084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 18:46:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 17:19:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zesty io Platform, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl002.zesty.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29957560793117919923523379359217306858895983179205626214047535182913829073698222635359381102483025932440008586290967694554974496013414702806129681422129753382766150028500479773250415327003483648006041382294799240638122728840251206586090877372962541749609910519737113546176013399755431452230625867313630909403713376091898075939235422190967428076913900439499862843171118079133948170610548184709083484202758722997189347363741597822746780911373119147182762846366397850144058840815736035976768823489727322914339646664672433546268759326987929953637366247500648531561842204245939239647532816251046731320765115680284724664259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl002.zesty.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zesty.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahumanproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getitnowstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homechoicestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahumanproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getitnowstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakimavalleyvet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27608b61f8189425c396b29b5432d45d987a4e84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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