canvas.spotify.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 19:06:1f:fe:d9:b3:c1:de:0a:b9:d7:fa:bd:62:b0:f2 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=canvas.spotify.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 19:06:1f:fe:d9:b3:c1:de:0a:b9:d7:fa:bd:62:b0:f2Serial Number (int): 33262502621800657978915413633523691762
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: b3:08:93:5a:c4:3a:0a:82:8b:d6:0f:e8:a1:77:2b:dd:c9:0c:ab:83
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): f2:39:3b:59:62:b4:85:de:9d:a0:78:af:ce:65:72:be:19:75:3f:30
Fingerprint (sha256): 08:45:0b:a2:11:2f:63:21:1c:11:c3:3b:4c:59:72:18:22:ae:c9:ca:de:15:fd:f4:57:ab:17:98:3b:83:72:47
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/xpqFe6uj0uQCRL Distribution Point: http://crls.pki.goog/gts1d4/8Qk46-KwOAo.crl
Check the revocation status for certificate canvas.spotify.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canvas.spotify.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canvas.spotify.com
Other certificates including the domain name spotify.com
(limited to 100 certificates)
mydata.spotify.com
pci.spotify.com
lexikon-slack-app.spotify.com
download.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
adanalytics.spotify.com
noteable.spotify.com
info.backstage.spotify.com
www.newsroom.spotify.com
noteable.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
experimentation.spotify.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
connect.spotify.com
eu2.status.fireblocks.com
eu2.status.fireblocks.com
canary-certificate-for-noop.spotify.com
eu4-1.cdn.salesforce-communities.com
download.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
eu2.status.fireblocks.com
mydata.spotify.com
eu2.status.fireblocks.com
eu4-1.cdn.salesforce-communities.com
hrblog.spotify.com
audio-fa-quic-svcb.cdn-gslb.spotify.com
noteable.spotify.com
secure02.lithium.com
testing-open.spotify.com
secure02.lithium.com
pay.spotify.com
*.ash.spotify.com
feedback.spotify.com
any.spotify.com
www.newsroom.spotify.com
promo.spotify.com
www.newsroom.spotify.com
heads-fa.spotify.com
canvas.spotify.com
www.hrblog.spotify.com
secure02.lithium.com
lexikon-slack-app.spotify.com
canary-certificate-for-noop.spotify.com
secure01.stage.lithium.com
newsroom.spotify.com
partner-links.spotify.com
tags.spotify.com
dynamicworkplace4wtc.spotify.com
ads.spotify.com
eu2.status.fireblocks.com
assets.spotify.com
admin.adanalytics.spotify.com
promo.spotify.com
canvas.spotify.com
secure02.lithium.com
www.newsroom.spotify.com
secure02.lithium.com
secure02.lithium.com
recsys-challenge.spotify.com
canary-certificate-for-noop.spotify.com
pci-testing.spotify.com
investors.spotify.com
www.noteable.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
eu2.status.fireblocks.com
secure02.lithium.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
www.newsroom.spotify.com
wl.spotify.com
help.adanalytics.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
secure02.lithium.com
common.spotify.com
eu2.status.fireblocks.com
promo.spotify.com
canvas.spotify.com
canvas.spotify.com
secure01.stage.lithium.com
*.spotify.com
developer.spotify.com
news.confidence.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
admin.adanalytics.spotify.com
backstage-licensing.spotify.com
hrblog.spotify.com
mydata.spotify.com
wl.spotify.com
developer.spotify.com
mydata.spotify.com
developer.spotify.com
canary-certificate-for-noop.spotify.com
pci.spotify.com
lexikon-slack-app.spotify.com
download.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
adanalytics.spotify.com
noteable.spotify.com
info.backstage.spotify.com
www.newsroom.spotify.com
noteable.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
experimentation.spotify.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
connect.spotify.com
eu2.status.fireblocks.com
eu2.status.fireblocks.com
canary-certificate-for-noop.spotify.com
eu4-1.cdn.salesforce-communities.com
download.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
eu2.status.fireblocks.com
mydata.spotify.com
eu2.status.fireblocks.com
eu4-1.cdn.salesforce-communities.com
hrblog.spotify.com
audio-fa-quic-svcb.cdn-gslb.spotify.com
noteable.spotify.com
secure02.lithium.com
testing-open.spotify.com
secure02.lithium.com
pay.spotify.com
*.ash.spotify.com
feedback.spotify.com
any.spotify.com
www.newsroom.spotify.com
promo.spotify.com
www.newsroom.spotify.com
heads-fa.spotify.com
canvas.spotify.com
www.hrblog.spotify.com
secure02.lithium.com
lexikon-slack-app.spotify.com
canary-certificate-for-noop.spotify.com
secure01.stage.lithium.com
newsroom.spotify.com
partner-links.spotify.com
tags.spotify.com
dynamicworkplace4wtc.spotify.com
ads.spotify.com
eu2.status.fireblocks.com
assets.spotify.com
admin.adanalytics.spotify.com
promo.spotify.com
canvas.spotify.com
secure02.lithium.com
www.newsroom.spotify.com
secure02.lithium.com
secure02.lithium.com
recsys-challenge.spotify.com
canary-certificate-for-noop.spotify.com
pci-testing.spotify.com
investors.spotify.com
www.noteable.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
eu2.status.fireblocks.com
secure02.lithium.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
www.newsroom.spotify.com
wl.spotify.com
help.adanalytics.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
secure02.lithium.com
common.spotify.com
eu2.status.fireblocks.com
promo.spotify.com
canvas.spotify.com
canvas.spotify.com
secure01.stage.lithium.com
*.spotify.com
developer.spotify.com
news.confidence.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
admin.adanalytics.spotify.com
backstage-licensing.spotify.com
hrblog.spotify.com
mydata.spotify.com
wl.spotify.com
developer.spotify.com
mydata.spotify.com
developer.spotify.com
canary-certificate-for-noop.spotify.com
Certificate
The complete raw certificate details for canvas.spotify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdTCCA12gAwIBAgIQGQYf/tmzwd4Kudf6vWKw8jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzA4MjIwMDI2MDdaFw0yMzExMjAw MTE0MzhaMB0xGzAZBgNVBAMTEmNhbnZhcy5zcG90aWZ5LmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMHsXeQFmZMqVD5yJ9lR/BUKCWIYd+7RvrlT 868PtGo9ejRDeQESQW1/y8Umz4bE4B15wawqX4m+fCgfld8a90G16gx19Vp5rBTJ Yz0t7+kzMOuFjkRPEo3GefKvTNp6ORFZ+OH4JMk/6ogOFVvaKuH4byL5qOqtZY5X e+wbrqlDgNchFG+UREmMAxi0xAI2b8FbON80emDTHP2pcEYTkJb1m0CKNbEQD0GT UFzlke4CwWVJTQAKQWU4oYP89TK3aw9ss8XbWjxg98Hub/jNMQF3a1Ra7YQgtlij d380nK+JK9iE93Qc+ojCOmRp7u6n3cfJTLUhNZiY1JX9RLS1kRMCAwEAAaOCAYYw ggGCMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSzCJNaxDoKgovWD+ihdyvdyQyrgzAfBgNVHSMEGDAW gBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L3hwcUZlNnVqMHVRMDEG CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVy MB0GA1UdEQQWMBSCEmNhbnZhcy5zcG90aWZ5LmNvbTAhBgNVHSAEGjAYMAgGBmeB DAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz LnBraS5nb29nL2d0czFkNC84UWs0Ni1Ld09Bby5jcmwwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBABQ3vzaxWANKJ/e2BmP0MzF3lnusPh3B zsP9Ujdsy1qT57cRSC8l14hsbQjaqQZopv2fHWky94oMFA59cKiAJ4RMdLzUIIR2 bXebv2sZgDvWBxO/GiGp9cuNJxHQk95NsY/51VYOYXzoLFUB3ZqyiMlxPIFM6otV 6fhE+47ceeELygVpGSG5TBUP/iwH//Z6g/sT4TMRTg1LHB/u/or/j7DumqEId5UW G8kGrFaJh1IKEAR6FoDz7YcOqakw85+wvcC7K4x2NQsNLfMOBesgp58C5Vfjp3JV yk9zXmcLpsm2xheJMidq/pQj9/6ghOyf4TwL4cOV+VdB8wY52OaPwKQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwexd5AWZkypUPnIn2VH8 FQoJYhh37tG+uVPzrw+0aj16NEN5ARJBbX/LxSbPhsTgHXnBrCpfib58KB+V3xr3 QbXqDHX1WnmsFMljPS3v6TMw64WORE8SjcZ58q9M2no5EVn44fgkyT/qiA4VW9oq 4fhvIvmo6q1ljld77BuuqUOA1yEUb5RESYwDGLTEAjZvwVs43zR6YNMc/alwRhOQ lvWbQIo1sRAPQZNQXOWR7gLBZUlNAApBZTihg/z1MrdrD2yzxdtaPGD3we5v+M0x AXdrVFrthCC2WKN3fzScr4kr2IT3dBz6iMI6ZGnu7qfdx8lMtSE1mJjUlf1EtLWR EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33262502621800657978915413633523691762 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:26:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 01:14:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canvas.spotify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24480549652226297389098568696492724713550504896879723943392469920040070362670060493427416177205538523385713496731582708794416991840771838416997029029587934349904306004418358304282015799203461319329891740886954945868522440511484041489819905910308778004096858046051838433975158964393033594527596293858312180277401966179545703595965486770332972853928861546584229504928310631690090588891888214767078280692033143770674840115250296139694683565928947026019523744831495591646249251588011770261596239804777797032540210183256899506985673611705850582320017171073871550247317392233332020200661389005055888832187341652916000100627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b308935ac43a0a828bd60fe8a1772bddc90cab83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/xpqFe6uj0uQ' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvas.spotify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/8Qk46-KwOAo.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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