ticketmaster.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 47:98:26:a7:48:15:00:2e:bc:9d:56:a6 was issued on by GlobalSign nv-sa.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 47:98:26:a7:48:15:00:2e:bc:9d:56:a6
Serial Number (int): 22157374957623590816002692774
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 93:69:c5:b1:3f:d9:cb:a8:28:2c:b0:d1:99:71:de:b2:ae:59:d8:cb
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e0:fa:9a:41:9c:2b:84:45:f7:21:56:a5:60:ad:80:33:7f:1a:bb:47
Fingerprint (sha256): 07:2d:9d:76:0b:f9:73:e0:35:14:ab:9d:88:7a:19:3d:c6:96:ec:95:fd:ae:ed:5f:d0:04:d9:fb:cb:8f:2a:b3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster.map.fastly.net

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster.map.fastly.net
*.io-media.com
*.mfol.eu
*.nonprod.ticketmaster.net
*.s.tmol.io
*.ticketmaster.co.uk
*.ticketmaster.ie
*.tmconst.com
alpha-ca.ticketmaster.net
alpha.ticketmaster.net
am.ticketmaster.com
apiaggreg-qa.ticketmaster.com
apiaggreg-stage.ticketmaster.com
apiaggreg.ticketmaster.com
beta.ticketmaster.com
beta.tmol.co
concerts1.livenation.com
concerts1.stage.livenation.com
content.resale.ticketmaster.com
embed-alpha.ticketmaster.net
embed-int.ticketmaster.net
embed.stage.ticketmaster.com
embed.ticketmaster.com
embed1-alpha.ticketmaster.net
embed2-alpha.ticketmaster.net
embed3-alpha.ticketmaster.net
embed99-alpha.ticketmaster.net
harrypotter.ticketmaster.com
identity-dev.ticketexchangebyticketmaster.com
identity-dev.ticketsnow.com
identity-int.ticketmaster.net
identity-preprod.ticketmaster.com
identity.concerts.livenation.com
identity.livenation.com
identity.mobilitus.net
identity.ontouraccess.com
identity.ticketexchangebyticketmaster.com
identity.ticketmaster.ca
identity.ticketmaster.com
identity.ticketsnow.com
identity.tmverifiedfan.com
ismds-uk.tmol.io
m.concerts.livenation.com
m.ticketmaster.ca
m.ticketmaster.co.nz
m.ticketmaster.co.uk
m.ticketmaster.com
m.ticketmaster.com.au
m.ticketmaster.com.mx
m.ticketmaster.ie
maps.ticketmaster.com
maps.tmol.co
maps.tmol.io
mapsapi.tmol.co
mapsapi.tmol.io
mapsint.tmol.co
mapsintqa.tmol.co
mapsqa.tmol.co
micro.ticketmaster.net
mobile-app.livenation.com
mobile-app.ticketmaster.com
my.livenation.com
my.ticketmaster.ca
my.ticketmaster.com
preprod-VerifiedFan.ticketmaster.com
preprod.vf.ticketmaster.com
reggie-qa.ticketmaster.com
reggie-stage.ticketmaster.com
reggie.ticketmaster.com
s2.tmol.co
s2.tmol.io
services-fastly.ticketmaster.com
services-ijash.ticketmaster.net
services-intqa.ticketmaster.net
services-preprod.ticketmaster.net
services-qa.ticketmaster.net
services-staging.ticketmaster.com
services.ticketmaster.com
settlement.livenation.com
shania.io
shaniatickets.com
telekom.ticketmaster.de
theatre.ticketmaster.co.uk
tickets.taylorswift.com
venue.tmol.co
venue.tmol.io
venueint.tmol.co
venueqa.tmol.co
verifiedfan.ticketmaster.com
vf.ticketmaster.com
wb-test.vf.pub-tmaws.io
www.ticketmaster.com
www1.stage.ticketmaster.com
www1.testingprod.ticketmaster.com
www1.ticketmaster.ca
www1.ticketmaster.co.nz
www1.ticketmaster.co.uk
www1.ticketmaster.com
www1.ticketmaster.com.au
www1.ticketmaster.com.mx
www1.ticketmaster.ie

Other certificates including the domain name ticketmaster.map.fastly.net

(limited to 100 certificates)
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net
ticketmaster.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPpzCCDo+gAwIBAgIMR5gmp0gVAC68nVamMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwODEyMjEw
ODEwWhcNMjAwOTExMTkxMTEyWjB3MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5
LCBJbmMuMSQwIgYDVQQDDBt0aWNrZXRtYXN0ZXIubWFwLmZhc3RseS5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLdTmkVpV2j7lpoCfVmPF7Akb
Z/aj4z9TeXmDf8s4k6au5U742MCYv2VA09zlp02iVqKcwYOGtqwSoKeixXSnGDk0
hxOk2Wt1rghSSrvAM7fDgrZEOz3jEBKT6t9BmssE9SUMrHt7808g9gmloRnowF3Q
XkCFZRSl3y/tYyxWr6+YkHd0ATV78i+qhccLN5gF9oHDdtmQWCuXRgtNZwrvN0i+
yp23BFVT8Pzl0+/+f2mkfjxccMYJYmf29N3Hmr3Uef2q0Wl9VYJCPmpQv3EsSjkD
t82cmfc0XGuRzoOUU7Kr8cjtsX4bMS9aPaZRBdPgMyOfdWZLE88k40NNpQOZAgMB
AAGjggxRMIIMTTAOBgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggr
BgEFBQcwAoY2aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xv
dWRzc2xzaGEyZzMuY3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFs
c2lnbi5jb20vY2xvdWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwggniBgNVHREEggnZMIIJ1YIbdGlj
a2V0bWFzdGVyLm1hcC5mYXN0bHkubmV0gg4qLmlvLW1lZGlhLmNvbYIJKi5tZm9s
LmV1ghoqLm5vbnByb2QudGlja2V0bWFzdGVyLm5ldIILKi5zLnRtb2wuaW+CFCou
dGlja2V0bWFzdGVyLmNvLnVrghEqLnRpY2tldG1hc3Rlci5pZYINKi50bWNvbnN0
LmNvbYIZYWxwaGEtY2EudGlja2V0bWFzdGVyLm5ldIIWYWxwaGEudGlja2V0bWFz
dGVyLm5ldIITYW0udGlja2V0bWFzdGVyLmNvbYIdYXBpYWdncmVnLXFhLnRpY2tl
dG1hc3Rlci5jb22CIGFwaWFnZ3JlZy1zdGFnZS50aWNrZXRtYXN0ZXIuY29tghph
cGlhZ2dyZWcudGlja2V0bWFzdGVyLmNvbYIVYmV0YS50aWNrZXRtYXN0ZXIuY29t
ggxiZXRhLnRtb2wuY2+CGGNvbmNlcnRzMS5saXZlbmF0aW9uLmNvbYIeY29uY2Vy
dHMxLnN0YWdlLmxpdmVuYXRpb24uY29tgh9jb250ZW50LnJlc2FsZS50aWNrZXRt
YXN0ZXIuY29tghxlbWJlZC1hbHBoYS50aWNrZXRtYXN0ZXIubmV0ghplbWJlZC1p
bnQudGlja2V0bWFzdGVyLm5ldIIcZW1iZWQuc3RhZ2UudGlja2V0bWFzdGVyLmNv
bYIWZW1iZWQudGlja2V0bWFzdGVyLmNvbYIdZW1iZWQxLWFscGhhLnRpY2tldG1h
c3Rlci5uZXSCHWVtYmVkMi1hbHBoYS50aWNrZXRtYXN0ZXIubmV0gh1lbWJlZDMt
YWxwaGEudGlja2V0bWFzdGVyLm5ldIIeZW1iZWQ5OS1hbHBoYS50aWNrZXRtYXN0
ZXIubmV0ghxoYXJyeXBvdHRlci50aWNrZXRtYXN0ZXIuY29tgi1pZGVudGl0eS1k
ZXYudGlja2V0ZXhjaGFuZ2VieXRpY2tldG1hc3Rlci5jb22CG2lkZW50aXR5LWRl
di50aWNrZXRzbm93LmNvbYIdaWRlbnRpdHktaW50LnRpY2tldG1hc3Rlci5uZXSC
IWlkZW50aXR5LXByZXByb2QudGlja2V0bWFzdGVyLmNvbYIgaWRlbnRpdHkuY29u
Y2VydHMubGl2ZW5hdGlvbi5jb22CF2lkZW50aXR5LmxpdmVuYXRpb24uY29tghZp
ZGVudGl0eS5tb2JpbGl0dXMubmV0ghlpZGVudGl0eS5vbnRvdXJhY2Nlc3MuY29t
gilpZGVudGl0eS50aWNrZXRleGNoYW5nZWJ5dGlja2V0bWFzdGVyLmNvbYIYaWRl
bnRpdHkudGlja2V0bWFzdGVyLmNhghlpZGVudGl0eS50aWNrZXRtYXN0ZXIuY29t
ghdpZGVudGl0eS50aWNrZXRzbm93LmNvbYIaaWRlbnRpdHkudG12ZXJpZmllZGZh
bi5jb22CEGlzbWRzLXVrLnRtb2wuaW+CGW0uY29uY2VydHMubGl2ZW5hdGlvbi5j
b22CEW0udGlja2V0bWFzdGVyLmNhghRtLnRpY2tldG1hc3Rlci5jby5ueoIUbS50
aWNrZXRtYXN0ZXIuY28udWuCEm0udGlja2V0bWFzdGVyLmNvbYIVbS50aWNrZXRt
YXN0ZXIuY29tLmF1ghVtLnRpY2tldG1hc3Rlci5jb20ubXiCEW0udGlja2V0bWFz
dGVyLmllghVtYXBzLnRpY2tldG1hc3Rlci5jb22CDG1hcHMudG1vbC5jb4IMbWFw
cy50bW9sLmlvgg9tYXBzYXBpLnRtb2wuY2+CD21hcHNhcGkudG1vbC5pb4IPbWFw
c2ludC50bW9sLmNvghFtYXBzaW50cWEudG1vbC5jb4IObWFwc3FhLnRtb2wuY2+C
Fm1pY3JvLnRpY2tldG1hc3Rlci5uZXSCGW1vYmlsZS1hcHAubGl2ZW5hdGlvbi5j
b22CG21vYmlsZS1hcHAudGlja2V0bWFzdGVyLmNvbYIRbXkubGl2ZW5hdGlvbi5j
b22CEm15LnRpY2tldG1hc3Rlci5jYYITbXkudGlja2V0bWFzdGVyLmNvbYIkcHJl
cHJvZC1WZXJpZmllZEZhbi50aWNrZXRtYXN0ZXIuY29tghtwcmVwcm9kLnZmLnRp
Y2tldG1hc3Rlci5jb22CGnJlZ2dpZS1xYS50aWNrZXRtYXN0ZXIuY29tgh1yZWdn
aWUtc3RhZ2UudGlja2V0bWFzdGVyLmNvbYIXcmVnZ2llLnRpY2tldG1hc3Rlci5j
b22CCnMyLnRtb2wuY2+CCnMyLnRtb2wuaW+CIHNlcnZpY2VzLWZhc3RseS50aWNr
ZXRtYXN0ZXIuY29tgh9zZXJ2aWNlcy1pamFzaC50aWNrZXRtYXN0ZXIubmV0gh9z
ZXJ2aWNlcy1pbnRxYS50aWNrZXRtYXN0ZXIubmV0giFzZXJ2aWNlcy1wcmVwcm9k
LnRpY2tldG1hc3Rlci5uZXSCHHNlcnZpY2VzLXFhLnRpY2tldG1hc3Rlci5uZXSC
IXNlcnZpY2VzLXN0YWdpbmcudGlja2V0bWFzdGVyLmNvbYIZc2VydmljZXMudGlj
a2V0bWFzdGVyLmNvbYIZc2V0dGxlbWVudC5saXZlbmF0aW9uLmNvbYIJc2hhbmlh
LmlvghFzaGFuaWF0aWNrZXRzLmNvbYIXdGVsZWtvbS50aWNrZXRtYXN0ZXIuZGWC
GnRoZWF0cmUudGlja2V0bWFzdGVyLmNvLnVrghd0aWNrZXRzLnRheWxvcnN3aWZ0
LmNvbYINdmVudWUudG1vbC5jb4INdmVudWUudG1vbC5pb4IQdmVudWVpbnQudG1v
bC5jb4IPdmVudWVxYS50bW9sLmNvghx2ZXJpZmllZGZhbi50aWNrZXRtYXN0ZXIu
Y29tghN2Zi50aWNrZXRtYXN0ZXIuY29tghd3Yi10ZXN0LnZmLnB1Yi10bWF3cy5p
b4IUd3d3LnRpY2tldG1hc3Rlci5jb22CG3d3dzEuc3RhZ2UudGlja2V0bWFzdGVy
LmNvbYIhd3d3MS50ZXN0aW5ncHJvZC50aWNrZXRtYXN0ZXIuY29tghR3d3cxLnRp
Y2tldG1hc3Rlci5jYYIXd3d3MS50aWNrZXRtYXN0ZXIuY28ubnqCF3d3dzEudGlj
a2V0bWFzdGVyLmNvLnVrghV3d3cxLnRpY2tldG1hc3Rlci5jb22CGHd3dzEudGlj
a2V0bWFzdGVyLmNvbS5hdYIYd3d3MS50aWNrZXRtYXN0ZXIuY29tLm14ghR3d3cx
LnRpY2tldG1hc3Rlci5pZTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
HwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwHQYDVR0OBBYEFJNpxbE/
2cuoKCyw0Zlx3rKuWdjLMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAu9nfvB+K
cbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFsh6j1gAAABAMARzBFAiEAiWDs
MHXSeN7WUgaV+4MRRcRswrz8SI8Y0X3xr35J66ICIEzriRbC8RImKYicE1wRSFOZ
Ri5Vn99StFlCc3O2d3+eAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFsh6j5mQAABAMARzBFAiEAucicshPtBhZw2jNxb+hNbkz5rL2oFchi2Nk+
+2yjq8gCIGWRF0UjivlARfvqXLV2yryXFAbHiMYJgoSJsBNyprI6MA0GCSqGSIb3
DQEBCwUAA4IBAQAriWy+PfvfF1OtdzWcfBRQrZMqfmQ35SsOkg5/YdJV9B2colZL
L0FXbSEwEn9Y/prRsn63QSMzwWYAnvNyTHjPG0zmw+ra5uh3vakaeWljbBV11VQS
boddEhxviAmoIZcFxTNf9uQVzaef9mk6NulYUp84C5nqxSOUUMktfDVHcEuAHOZk
U1fCoVa7/RLthrjrk5th2melMzPGL/cOxrfiKAGjVJE+Uz5thZSjDIG1gklCOj6W
Sh/PnpXpjTGg32G7zOgHW5XZPKEkaExrglArlF3YzbracQvJkbGWffovAsIuTfYU
dpfil3REVMti9LhWtgEagHI6SW9Opy3JcZW4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy3U5pFaVdo+5aaAn1Zj
xewJG2f2o+M/U3l5g3/LOJOmruVO+NjAmL9lQNPc5adNolainMGDhrasEqCnosV0
pxg5NIcTpNlrda4IUkq7wDO3w4K2RDs94xASk+rfQZrLBPUlDKx7e/NPIPYJpaEZ
6MBd0F5AhWUUpd8v7WMsVq+vmJB3dAE1e/IvqoXHCzeYBfaBw3bZkFgrl0YLTWcK
7zdIvsqdtwRVU/D85dPv/n9ppH48XHDGCWJn9vTdx5q91Hn9qtFpfVWCQj5qUL9x
LEo5A7fNnJn3NFxrkc6DlFOyq/HI7bF+GzEvWj2mUQXT4DMjn3VmSxPPJONDTaUD
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22157374957623590816002692774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 21:08:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-11 19:11:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ticketmaster.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24639069893965445744442220033614196222424507011201117945852955305510780607619607330305065404145462651156986036844418315374789372399716715123584430502846707283993484325615999844520542586298766696219261031030156027951188642626012581689987595117114732231876363916848234329545930542121594973234117310637926144444261878717133076294245750104207499805628028300630280231771974694290761268603082722292605519318478231197682841470067892003956332585793656351117843204688633550489639851100869650686254969600824970037236781891331405735920859339131732980768065170521540092381642724454609632845642065687783657147691080866641148707737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2521 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.io-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfol.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nonprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmconst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-ca.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaggreg-qa.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaggreg-stage.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaggreg.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts1.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts1.stage.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.resale.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.stage.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed1-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed2-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed3-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed99-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-dev.ticketexchangebyticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-dev.ticketsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-preprod.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.concerts.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.mobilitus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ontouraccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketexchangebyticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.tmverifiedfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismds-uk.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.concerts.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsapi.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsapi.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsint.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsintqa.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsqa.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-app.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-app.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-VerifiedFan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.vf.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggie-qa.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggie-stage.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggie.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-fastly.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-ijash.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-intqa.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-preprod.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-staging.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlement.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shania.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaniatickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telekom.ticketmaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatre.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.taylorswift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venue.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venue.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venueint.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venueqa.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vf.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb-test.vf.pub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.stage.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.testingprod.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ticketmaster.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9369c5b13fd9cba8282cb0d19971deb2ae59d8cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c87a8f58000000403004730450221008960ec3075d278ded6520695fb831145c46cc2bcfc488f18d17df1af7e49eba202204ceb8916c2f1122629889c135c11485399462e559fdf52b459427373b6777f9e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c87a8f9990000040300473045022100b9c89cb213ed061670da33716fe84d6e4cf9acbda815c862d8d93efb6ca3abc8022065911745238af94045fbea5cb576cabc971406c788c609828489b01372a6b23a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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