t.ssl.fastly.net
- Fastly, Inc -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 73:ac:ed:7a:fc:7e:c4:66:f9:a4:d7:f7 was issued on by GlobalSign nv-sa.
With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc
Organization:
Fastly, Inc
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 73:ac:ed:7a:fc:7e:c4:66:f9:a4:d7:f7Serial Number (int): 35799832839981811711057647607
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 7e:d5:8a:75:94:87:7b:1b:14:77:39:ee:ac:db:9e:57:38:ec:0d:be
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): f8:a0:f4:31:93:42:e5:b6:4c:9e:45:73:aa:fc:79:b7:bf:16:0b:ac
Fingerprint (sha256): 07:02:17:20:2b:9a:82:7e:10:02:8b:7b:82:8d:95:bb:1e:46:dd:9f:44:3e:a5:93:cf:a6:1e:ad:45:7c:75:7e
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate t.ssl.fastly.net
89
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for t.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
t.ssl.fastly.net
*.artifactstaging.com
*.asana.com
*.bluenationreview.com
*.closetfactory.com
*.faith-connexion.com
*.foolcdn.com
*.fs.fleetio.com
*.homesandproperty.co.uk
*.independent.co.uk
*.livestreamapis.com
*.morphcast.video
*.parr-global.com
*.rl.talis.com
*.songkick.com
*.standard.co.uk
*.starbuckspoll.com
*.turtl.co
*.turtl.io
*.vimeo-staging2.com
*.webflow.io
*.wepay-inc.com
4pmti.com
app.birchbox.com
app.industry.co
app.staging.birchbox.com
asana.com
assets-au.dollarshaveclub.com
assets-ca.dollarshaveclub.com
au.dollarshaveclub.com
bluenationreview.com
c.dlnws.com
ca.dollarshaveclub.com
cavil.api.sympoz.com
cdn.deseretnews.com
config.shazamid.com
embed.studionodes.net
embed.ustudio.com
homesandproperty.co.uk
hub.crimsoneducation.org
hypebae.com
icanvas.com
images.otto.de
independent.co.uk
infiniscope.education
insecure-terminus.pantheon.io
livestreamapis.com
media.paulsmith.co.uk
membership.coop.co.uk
morphcast.video
move-dev.banksimple.com
preprod.membership.coop.co.uk
ralphlauren.asia
ralphlauren.cn
ralphlauren.co.jp
ralphlauren.co.kr
ralphlauren.com.au
scorecard.fool.com
secretcdn.com
secure.tudocelular.com
sgi.offerscdn.net
showcase-next.matterport.com
slices.movableink-templates.com
standard.co.uk
starbuckspoll.com
status.webex.com
thebalance.com
theindy100.com
togetherforamerica.com
vimeo-staging2.com
webflow.io
www-qa.jauntvr.net
www.4pmti.com
www.artcode.com
www.crimsoneducation.org
www.fool.com
www.icanvas.com
www.industry.co
www.ralphlauren.asia
www.ralphlauren.cn
www.ralphlauren.co.jp
www.ralphlauren.co.kr
www.ralphlauren.com.au
www.replicon.com
www.secretcdn.com
www.thinks.com
www.togetherforamerica.com
www.ultrafibreoptic.co.uk
www.zyber.co.nz
*.artifactstaging.com
*.asana.com
*.bluenationreview.com
*.closetfactory.com
*.faith-connexion.com
*.foolcdn.com
*.fs.fleetio.com
*.homesandproperty.co.uk
*.independent.co.uk
*.livestreamapis.com
*.morphcast.video
*.parr-global.com
*.rl.talis.com
*.songkick.com
*.standard.co.uk
*.starbuckspoll.com
*.turtl.co
*.turtl.io
*.vimeo-staging2.com
*.webflow.io
*.wepay-inc.com
4pmti.com
app.birchbox.com
app.industry.co
app.staging.birchbox.com
asana.com
assets-au.dollarshaveclub.com
assets-ca.dollarshaveclub.com
au.dollarshaveclub.com
bluenationreview.com
c.dlnws.com
ca.dollarshaveclub.com
cavil.api.sympoz.com
cdn.deseretnews.com
config.shazamid.com
embed.studionodes.net
embed.ustudio.com
homesandproperty.co.uk
hub.crimsoneducation.org
hypebae.com
icanvas.com
images.otto.de
independent.co.uk
infiniscope.education
insecure-terminus.pantheon.io
livestreamapis.com
media.paulsmith.co.uk
membership.coop.co.uk
morphcast.video
move-dev.banksimple.com
preprod.membership.coop.co.uk
ralphlauren.asia
ralphlauren.cn
ralphlauren.co.jp
ralphlauren.co.kr
ralphlauren.com.au
scorecard.fool.com
secretcdn.com
secure.tudocelular.com
sgi.offerscdn.net
showcase-next.matterport.com
slices.movableink-templates.com
standard.co.uk
starbuckspoll.com
status.webex.com
thebalance.com
theindy100.com
togetherforamerica.com
vimeo-staging2.com
webflow.io
www-qa.jauntvr.net
www.4pmti.com
www.artcode.com
www.crimsoneducation.org
www.fool.com
www.icanvas.com
www.industry.co
www.ralphlauren.asia
www.ralphlauren.cn
www.ralphlauren.co.jp
www.ralphlauren.co.kr
www.ralphlauren.com.au
www.replicon.com
www.secretcdn.com
www.thinks.com
www.togetherforamerica.com
www.ultrafibreoptic.co.uk
www.zyber.co.nz
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
Certificate
The complete raw certificate details for t.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILtzCCCp+gAwIBAgIMc6ztevx+xGb5pNf3MA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTYwODIyMjAw OTA2WhcNMTcwNjI5MTc1MTA4WjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEUMBIGA1UECgwLRmFzdGx5 LCBJbmMxGTAXBgNVBAMMEHQuc3NsLmZhc3RseS5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQD2UKY6R3exNXsWo5FjiFgFW8ZzATr0SKgXwXQcHgvm TFzOG5ena4cz6mzabPqVOAIb2WaHahUI17LHwMY4OIqB+A09eAON7zbZ0PWtlrhB mXb1Jb0nXZitonIy53MnKUMiKNd4IJBvlc1pmSwX+tX9xV1vadDMjpg9q09El/HE 5IDlceaN3aig7mpLwQGlHRpp8+anJIbhjlBYbJexx6ZfWWsWKYg2sv0qC8lkS5z9 E/K4yRx4qPqeeT97yh9serqKcaLHnIjMHPwEHFwz5oLU7i+evY4604l0DWikkGPd a6YM2C6IBiYL4ewKYSxGXzwY0RVthXsDHGenQqjAtXK7AgMBAAGjgghtMIIIaTAO BgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggrBgEFBQcwAoY2aHR0 cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xvdWRzc2xzaGEyZzMu Y3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vY2xv dWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcC ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM AQICMAkGA1UdEwQCMAAwggcGBgNVHREEggb9MIIG+YIQdC5zc2wuZmFzdGx5Lm5l dIIVKi5hcnRpZmFjdHN0YWdpbmcuY29tggsqLmFzYW5hLmNvbYIWKi5ibHVlbmF0 aW9ucmV2aWV3LmNvbYITKi5jbG9zZXRmYWN0b3J5LmNvbYIVKi5mYWl0aC1jb25u ZXhpb24uY29tgg0qLmZvb2xjZG4uY29tghAqLmZzLmZsZWV0aW8uY29tghgqLmhv bWVzYW5kcHJvcGVydHkuY28udWuCEyouaW5kZXBlbmRlbnQuY28udWuCFCoubGl2 ZXN0cmVhbWFwaXMuY29tghEqLm1vcnBoY2FzdC52aWRlb4IRKi5wYXJyLWdsb2Jh bC5jb22CDioucmwudGFsaXMuY29tgg4qLnNvbmdraWNrLmNvbYIQKi5zdGFuZGFy ZC5jby51a4ITKi5zdGFyYnVja3Nwb2xsLmNvbYIKKi50dXJ0bC5jb4IKKi50dXJ0 bC5pb4IUKi52aW1lby1zdGFnaW5nMi5jb22CDCoud2ViZmxvdy5pb4IPKi53ZXBh eS1pbmMuY29tggk0cG10aS5jb22CEGFwcC5iaXJjaGJveC5jb22CD2FwcC5pbmR1 c3RyeS5jb4IYYXBwLnN0YWdpbmcuYmlyY2hib3guY29tgglhc2FuYS5jb22CHWFz c2V0cy1hdS5kb2xsYXJzaGF2ZWNsdWIuY29tgh1hc3NldHMtY2EuZG9sbGFyc2hh dmVjbHViLmNvbYIWYXUuZG9sbGFyc2hhdmVjbHViLmNvbYIUYmx1ZW5hdGlvbnJl dmlldy5jb22CC2MuZGxud3MuY29tghZjYS5kb2xsYXJzaGF2ZWNsdWIuY29tghRj YXZpbC5hcGkuc3ltcG96LmNvbYITY2RuLmRlc2VyZXRuZXdzLmNvbYITY29uZmln LnNoYXphbWlkLmNvbYIVZW1iZWQuc3R1ZGlvbm9kZXMubmV0ghFlbWJlZC51c3R1 ZGlvLmNvbYIWaG9tZXNhbmRwcm9wZXJ0eS5jby51a4IYaHViLmNyaW1zb25lZHVj YXRpb24ub3JnggtoeXBlYmFlLmNvbYILaWNhbnZhcy5jb22CDmltYWdlcy5vdHRv LmRlghFpbmRlcGVuZGVudC5jby51a4IVaW5maW5pc2NvcGUuZWR1Y2F0aW9ugh1p bnNlY3VyZS10ZXJtaW51cy5wYW50aGVvbi5pb4ISbGl2ZXN0cmVhbWFwaXMuY29t ghVtZWRpYS5wYXVsc21pdGguY28udWuCFW1lbWJlcnNoaXAuY29vcC5jby51a4IP bW9ycGhjYXN0LnZpZGVvghdtb3ZlLWRldi5iYW5rc2ltcGxlLmNvbYIdcHJlcHJv ZC5tZW1iZXJzaGlwLmNvb3AuY28udWuCEHJhbHBobGF1cmVuLmFzaWGCDnJhbHBo bGF1cmVuLmNughFyYWxwaGxhdXJlbi5jby5qcIIRcmFscGhsYXVyZW4uY28ua3KC EnJhbHBobGF1cmVuLmNvbS5hdYISc2NvcmVjYXJkLmZvb2wuY29tgg1zZWNyZXRj ZG4uY29tghZzZWN1cmUudHVkb2NlbHVsYXIuY29tghFzZ2kub2ZmZXJzY2RuLm5l dIIcc2hvd2Nhc2UtbmV4dC5tYXR0ZXJwb3J0LmNvbYIfc2xpY2VzLm1vdmFibGVp bmstdGVtcGxhdGVzLmNvbYIOc3RhbmRhcmQuY28udWuCEXN0YXJidWNrc3BvbGwu Y29tghBzdGF0dXMud2ViZXguY29tgg50aGViYWxhbmNlLmNvbYIOdGhlaW5keTEw MC5jb22CFnRvZ2V0aGVyZm9yYW1lcmljYS5jb22CEnZpbWVvLXN0YWdpbmcyLmNv bYIKd2ViZmxvdy5pb4ISd3d3LXFhLmphdW50dnIubmV0gg13d3cuNHBtdGkuY29t gg93d3cuYXJ0Y29kZS5jb22CGHd3dy5jcmltc29uZWR1Y2F0aW9uLm9yZ4IMd3d3 LmZvb2wuY29tgg93d3cuaWNhbnZhcy5jb22CD3d3dy5pbmR1c3RyeS5jb4IUd3d3 LnJhbHBobGF1cmVuLmFzaWGCEnd3dy5yYWxwaGxhdXJlbi5jboIVd3d3LnJhbHBo bGF1cmVuLmNvLmpwghV3d3cucmFscGhsYXVyZW4uY28ua3KCFnd3dy5yYWxwaGxh dXJlbi5jb20uYXWCEHd3dy5yZXBsaWNvbi5jb22CEXd3dy5zZWNyZXRjZG4uY29t gg53d3cudGhpbmtzLmNvbYIad3d3LnRvZ2V0aGVyZm9yYW1lcmljYS5jb22CGXd3 dy51bHRyYWZpYnJlb3B0aWMuY28udWuCD3d3dy56eWJlci5jby5uejAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFH7VinWUh3sbFHc57qzb nlc47A2+MB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMA0GCSqGSIb3 DQEBCwUAA4IBAQCf1LsgCAyyfDswQiDadn0B47piRFVKq/oSeYPsGILptAMklCN8 z29riTRg0Uj4HGOFJnKGyFQzIFkW66tP05eV8oalzVeOrUROG2tq1n88wNXxMCRQ wqjCkw4Mt0BYfQyPnC4LKhOLGIVKGOimwpwPwky4NPUF1GwuzV8ZZOLLnTiBttIP q0rIpN3o92iTt9f+dkHAhbqfIedpDb/ghtgKmg/muSr+YVRgMPfcyb5rXqPrLQL/ EtcfN+TirO24fu/DMDiqZ/otuxcDDe0vH5UZChY2VbC8SNWAsbBL4nwOcQC8u6Ar fzyvuFsZHkEaFjCdj2WEJAvpyteA/smBhkiz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lCmOkd3sTV7FqORY4hY BVvGcwE69EioF8F0HB4L5kxczhuXp2uHM+ps2mz6lTgCG9lmh2oVCNeyx8DGODiK gfgNPXgDje822dD1rZa4QZl29SW9J12YraJyMudzJylDIijXeCCQb5XNaZksF/rV /cVdb2nQzI6YPatPRJfxxOSA5XHmjd2ooO5qS8EBpR0aafPmpySG4Y5QWGyXscem X1lrFimINrL9KgvJZEuc/RPyuMkceKj6nnk/e8ofbHq6inGix5yIzBz8BBxcM+aC 1O4vnr2OOtOJdA1opJBj3WumDNguiAYmC+HsCmEsRl88GNEVbYV7Axxnp0KowLVy uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 35799832839981811711057647607 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 20:09:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 17:51:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31094392686916215853890437837746696506600236785883326825796127821743318937620584753295616777717349018855491733606257470017415783810938797151950312844463827491184392177589730656304775190370892017464501824752198960688456323101931203077709189169541796133540503405382476605501878121540008285967222122878200110299436938508713984895400478375533883743656539616877258660582056963031478075861265725080474171951595803426261634246986273677048245192990132810214337105792483423926016796011355074794419160785266524613244257035487444625700647859179031477569599509126307668830777899593789619747676125750998544569064970139391787102907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1789 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artifactstaging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluenationreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.closetfactory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faith-connexion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foolcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.fleetio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesandproperty.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independent.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestreamapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morphcast.video' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parr-global.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rl.talis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songkick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.standard.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starbuckspoll.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turtl.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turtl.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeo-staging2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webflow.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wepay-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4pmti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.birchbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.industry.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.birchbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-au.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-ca.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluenationreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.dlnws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.dollarshaveclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavil.api.sympoz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.deseretnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.shazamid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.studionodes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ustudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesandproperty.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.crimsoneducation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypebae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icanvas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.otto.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infiniscope.education' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insecure-terminus.pantheon.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestreamapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.paulsmith.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphcast.video' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'move-dev.banksimple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.membership.coop.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralphlauren.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.fool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tudocelular.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgi.offerscdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase-next.matterport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slices.movableink-templates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standard.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starbuckspoll.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.webex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindy100.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherforamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo-staging2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webflow.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.jauntvr.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4pmti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artcode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsoneducation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icanvas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industry.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralphlauren.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralphlauren.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralphlauren.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralphlauren.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralphlauren.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.replicon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherforamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrafibreoptic.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyber.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ed58a7594877b1b147739eeacdb9e5738ec0dbe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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