advancelocal.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 25:00:01:97:dd:8b:43:60:4f:fe:82:bc was issued on by GlobalSign nv-sa.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:00:01:97:dd:8b:43:60:4f:fe:82:bc
Serial Number (int): 11450952887178532927687262908
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 32:ca:3d:c2:13:49:54:40:a0:12:ed:16:86:9b:6e:8f:72:19:b6:74
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 92:3c:d2:5d:a1:d8:63:77:1e:e1:7a:b6:85:70:14:0e:49:0a:0d:aa
Fingerprint (sha256): 08:43:b3:ed:b1:18:e3:6e:d4:05:a4:b2:2d:53:16:f1:ba:ee:79:66:44:56:e3:eb:d3:01:76:b3:2e:30:bb:ef

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate advancelocal.map.fastly.net

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advancelocal.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advancelocal.map.fastly.net
*.advance-dev.com
*.advance.net
*.al.com
*.cleveland.com
*.gulflive.com
*.lehighvalleylive.com
*.mardigras.com
*.masslive.com
*.mlive.com
*.newyorkupstate.com
*.nj.com
*.nola.com
*.oregonlive.com
*.pennlive.com
*.silive.com
*.syracuse.com
advance-dev.com
advance.net
al.com
cleveland.com
gulflive.com
lehighvalleylive.com
mardigras.com
masslive.com
mlive.com
newyorkupstate.com
nj.com
njadvancemedia.com
nola.com
oregonlive.com
pennlive.com
silive.com
syracuse.com

Other certificates including the domain name advancelocal.map.fastly.net

(limited to 100 certificates)
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net
advancelocal.map.fastly.net

Certificate

The complete raw certificate details for advancelocal.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJRljdYIUvjoFayOvD7K
CZTr0J8XjIuFGVqjz/2qK4cLySM3ah2NVL4K9UJb63h5iW954/9yt1vaZTadw2NA
8qPwSmZE7uW+qxF09VUXnR5Mua2EDTF0UEieKkxzUruz8YWv8GdnTCLApbGkZSjF
Mx3pnrPnhWkpqFhLtQijqChthH2OyTlnGa44yjwGUJHZcyy1+zknjSagrlOtywne
G4kbplLI6USJMJqpHhiQccg54eWzGg5XHmjXJSve7y8nExvvp+522xNu7CI36aHu
5DfCXLNSSn1zVtbH/HAK9RbKJ1pwjxAGPYHG9HEgpM8UA2zunec2ZBVBFK6SBS75
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11450952887178532927687262908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 19:58:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 13:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'advancelocal.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20776259152332261920256594052835563939209951379420188820000230069189105928887163816317132678175488826929920263773170086343966212723217811212534636196149393272059294261952933677016691482881700651553244322342274962183484606053396418926984034150979977006948892929097318834196924517258918862442331764790319157037792990920621547060022784078278907262704126710726353962705814141863237332561386249189019817503884778640302350330158977106431182537371614700627919022421706034484933162287368093310643765379836760827114402309761084617486863162843173907594438173364768718004674079845764169775070684021232172853996029499494538082639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (531 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancelocal.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advance-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehighvalleylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mardigras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorkupstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syracuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advance-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehighvalleylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mardigras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkupstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njadvancemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syracuse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32ca3dc213495440a012ed16869b6e8f7219b674
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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