firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:23:55:d4:ec:66:57:79:4a:4a:3e:eb:c2:62:45:b3:11 was issued on by GlobalSign nv-sa.

With 138 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:23:55:d4:ec:66:57:79:4a:4a:3e:eb:c2:62:45:b3:11
Serial Number (int): 1492185147592000965350643062607552220345105
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 92:9e:5c:a4:23:9f:e8:c6:8a:0a:60:27:29:82:d3:a5:c0:c5:13:7c
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): de:53:76:be:04:85:24:0b:81:81:69:6b:18:6f:34:5b:b8:13:2b:ad
Fingerprint (sha256): 09:7e:b8:c0:51:56:1c:df:e7:7c:57:f0:10:bc:59:26:2c:6e:c4:08:00:86:99:9d:59:01:e0:94:d1:b5:93:be

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

138

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
21stgov.com
*.21stgov.com
angularfire2.com
*.angularfire2.com
appxiom.com
*.appxiom.com
argofrienddate.com
*.argofrienddate.com
augur.net
*.augur.net
azgfd.com
*.azgfd.com
beckfriends.com
*.beckfriends.com
blockstackstats.com
*.blockstackstats.com
casualmountains.com
*.casualmountains.com
chaplinkyle.com
*.chaplinkyle.com
conveystrategy.com
*.conveystrategy.com
coop150.dk
*.coop150.dk
coreinputapp.com
*.coreinputapp.com
cultivatecompliance.com
*.cultivatecompliance.com
doonetwork.org
*.doonetwork.org
driverup.com
*.driverup.com
driverupapp.com
*.driverupapp.com
dubbelelf.nl
*.dubbelelf.nl
eduplanllc.com
*.eduplanllc.com
efdr.io
*.efdr.io
efjourney.com
*.efjourney.com
emmersive.io
*.emmersive.io
fal.ci
*.fal.ci
finhacks.in
*.finhacks.in
fire-paper.com
*.fire-paper.com
gratitudely.com
*.gratitudely.com
groh.io
*.groh.io
hackerhow.com
*.hackerhow.com
heyanna.online
*.heyanna.online
ibm-twm.com
*.ibm-twm.com
ihateitapp.com
*.ihateitapp.com
indianspecialists.com
*.indianspecialists.com
inxdisplay.com
*.inxdisplay.com
kiwinetworks.com
*.kiwinetworks.com
lacarte.tech
*.lacarte.tech
lendshare.io
*.lendshare.io
lvvitamins.com
*.lvvitamins.com
marijess.com
*.marijess.com
meatrevoacrecer.com
*.meatrevoacrecer.com
mesilane.net
*.mesilane.net
meta.pro
*.meta.pro
metaguru.guru
*.metaguru.guru
minuet.io
*.minuet.io
moderndeveloper.com
*.moderndeveloper.com
moyanotes.com
*.moyanotes.com
nosy.chat
*.nosy.chat
otherthemes.com
*.otherthemes.com
persona-im.com
*.persona-im.com
robotscrewdriver.com
*.robotscrewdriver.com
sagepath.io
*.sagepath.io
segfault.pl
*.segfault.pl
shakee.hk
*.shakee.hk
snapchat-directory.com
*.snapchat-directory.com
solidwar.com
*.solidwar.com
sportmate.io
*.sportmate.io
survivors.gallery
*.survivors.gallery
tival.se
*.tival.se
tpasque.com
*.tpasque.com
txtask.com
*.txtask.com
udundi.business
*.udundi.business
userjoy.io
*.userjoy.io
vizidata.center
*.vizidata.center
vocblr.com
*.vocblr.com
vukovi.org
*.vukovi.org
wolf.vision
*.wolf.vision
xomni.com.au
*.xomni.com.au
yaspan.tech
*.yaspan.tech
zeniface.com
*.zeniface.com

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN7jCCDNagAwIBAgISESEjVdTsZld5Sko+68JiRbMRMA0GCSqGSIb3DQEBCwUA
MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD
VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB
MjU2IC0gRzIwHhcNMTYwNDA1MDI0ODI4WhcNMTcwMjEyMTk1NzU1WjBtMQswCQYD
VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5j
aXNjbzEXMBUGA1UECgwORmlyZWJhc2UsIEluYy4xGDAWBgNVBAMMD2ZpcmViYXNl
YXBwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM1UM0EkWkrO
6CGZbUmyuukzM/wALMpFZ1LuyrM1DQgibxO1SPRG6EkaYlk0P1yL3NnelLG+ymbV
iJ8mPUZLNNmcB83mdrLSz8qV1H97dZfTcJIVFcE8slJ8PEWKjLyRIcIPOFghU05x
HCXrGu3N39v+97SlNx2mBqFckHkQQSigRPjiy+u5YTQgRvQQjcO8bK9QC+n8FRBL
zR+p8XVE9MQDS6uyxrtSmdE/SkitGi1nVXeDWDH42bjWyUzp8IV8lPK5JbguWfu+
pNRattWwwdBrjIhYXoExTON9aEVTRwO7Sfp2EaYNmRsbNKfmrabjTJDSLg5OqOE5
/p++JFqqHCUCAwEAAaOCCo0wggqJMA4GA1UdDwEB/wQEAwIFoDBWBgNVHSAETzBN
MEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwggjFBgNVHREEggi8MIIIuIIP
ZmlyZWJhc2VhcHAuY29tghEqLmZpcmViYXNlYXBwLmNvbYILMjFzdGdvdi5jb22C
DSouMjFzdGdvdi5jb22CEGFuZ3VsYXJmaXJlMi5jb22CEiouYW5ndWxhcmZpcmUy
LmNvbYILYXBweGlvbS5jb22CDSouYXBweGlvbS5jb22CEmFyZ29mcmllbmRkYXRl
LmNvbYIUKi5hcmdvZnJpZW5kZGF0ZS5jb22CCWF1Z3VyLm5ldIILKi5hdWd1ci5u
ZXSCCWF6Z2ZkLmNvbYILKi5hemdmZC5jb22CD2JlY2tmcmllbmRzLmNvbYIRKi5i
ZWNrZnJpZW5kcy5jb22CE2Jsb2Nrc3RhY2tzdGF0cy5jb22CFSouYmxvY2tzdGFj
a3N0YXRzLmNvbYITY2FzdWFsbW91bnRhaW5zLmNvbYIVKi5jYXN1YWxtb3VudGFp
bnMuY29tgg9jaGFwbGlua3lsZS5jb22CESouY2hhcGxpbmt5bGUuY29tghJjb252
ZXlzdHJhdGVneS5jb22CFCouY29udmV5c3RyYXRlZ3kuY29tggpjb29wMTUwLmRr
ggwqLmNvb3AxNTAuZGuCEGNvcmVpbnB1dGFwcC5jb22CEiouY29yZWlucHV0YXBw
LmNvbYIXY3VsdGl2YXRlY29tcGxpYW5jZS5jb22CGSouY3VsdGl2YXRlY29tcGxp
YW5jZS5jb22CDmRvb25ldHdvcmsub3JnghAqLmRvb25ldHdvcmsub3Jnggxkcml2
ZXJ1cC5jb22CDiouZHJpdmVydXAuY29tgg9kcml2ZXJ1cGFwcC5jb22CESouZHJp
dmVydXBhcHAuY29tggxkdWJiZWxlbGYubmyCDiouZHViYmVsZWxmLm5sgg5lZHVw
bGFubGxjLmNvbYIQKi5lZHVwbGFubGxjLmNvbYIHZWZkci5pb4IJKi5lZmRyLmlv
gg1lZmpvdXJuZXkuY29tgg8qLmVmam91cm5leS5jb22CDGVtbWVyc2l2ZS5pb4IO
Ki5lbW1lcnNpdmUuaW+CBmZhbC5jaYIIKi5mYWwuY2mCC2ZpbmhhY2tzLmlugg0q
LmZpbmhhY2tzLmlugg5maXJlLXBhcGVyLmNvbYIQKi5maXJlLXBhcGVyLmNvbYIP
Z3JhdGl0dWRlbHkuY29tghEqLmdyYXRpdHVkZWx5LmNvbYIHZ3JvaC5pb4IJKi5n
cm9oLmlvgg1oYWNrZXJob3cuY29tgg8qLmhhY2tlcmhvdy5jb22CDmhleWFubmEu
b25saW5lghAqLmhleWFubmEub25saW5lggtpYm0tdHdtLmNvbYINKi5pYm0tdHdt
LmNvbYIOaWhhdGVpdGFwcC5jb22CECouaWhhdGVpdGFwcC5jb22CFWluZGlhbnNw
ZWNpYWxpc3RzLmNvbYIXKi5pbmRpYW5zcGVjaWFsaXN0cy5jb22CDmlueGRpc3Bs
YXkuY29tghAqLmlueGRpc3BsYXkuY29tghBraXdpbmV0d29ya3MuY29tghIqLmtp
d2luZXR3b3Jrcy5jb22CDGxhY2FydGUudGVjaIIOKi5sYWNhcnRlLnRlY2iCDGxl
bmRzaGFyZS5pb4IOKi5sZW5kc2hhcmUuaW+CDmx2dml0YW1pbnMuY29tghAqLmx2
dml0YW1pbnMuY29tggxtYXJpamVzcy5jb22CDioubWFyaWplc3MuY29tghNtZWF0
cmV2b2FjcmVjZXIuY29tghUqLm1lYXRyZXZvYWNyZWNlci5jb22CDG1lc2lsYW5l
Lm5ldIIOKi5tZXNpbGFuZS5uZXSCCG1ldGEucHJvggoqLm1ldGEucHJvgg1tZXRh
Z3VydS5ndXJ1gg8qLm1ldGFndXJ1Lmd1cnWCCW1pbnVldC5pb4ILKi5taW51ZXQu
aW+CE21vZGVybmRldmVsb3Blci5jb22CFSoubW9kZXJuZGV2ZWxvcGVyLmNvbYIN
bW95YW5vdGVzLmNvbYIPKi5tb3lhbm90ZXMuY29tgglub3N5LmNoYXSCCyoubm9z
eS5jaGF0gg9vdGhlcnRoZW1lcy5jb22CESoub3RoZXJ0aGVtZXMuY29tgg5wZXJz
b25hLWltLmNvbYIQKi5wZXJzb25hLWltLmNvbYIUcm9ib3RzY3Jld2RyaXZlci5j
b22CFioucm9ib3RzY3Jld2RyaXZlci5jb22CC3NhZ2VwYXRoLmlvgg0qLnNhZ2Vw
YXRoLmlvggtzZWdmYXVsdC5wbIINKi5zZWdmYXVsdC5wbIIJc2hha2VlLmhrggsq
LnNoYWtlZS5oa4IWc25hcGNoYXQtZGlyZWN0b3J5LmNvbYIYKi5zbmFwY2hhdC1k
aXJlY3RvcnkuY29tggxzb2xpZHdhci5jb22CDiouc29saWR3YXIuY29tggxzcG9y
dG1hdGUuaW+CDiouc3BvcnRtYXRlLmlvghFzdXJ2aXZvcnMuZ2FsbGVyeYITKi5z
dXJ2aXZvcnMuZ2FsbGVyeYIIdGl2YWwuc2WCCioudGl2YWwuc2WCC3RwYXNxdWUu
Y29tgg0qLnRwYXNxdWUuY29tggp0eHRhc2suY29tggwqLnR4dGFzay5jb22CD3Vk
dW5kaS5idXNpbmVzc4IRKi51ZHVuZGkuYnVzaW5lc3OCCnVzZXJqb3kuaW+CDCou
dXNlcmpveS5pb4IPdml6aWRhdGEuY2VudGVyghEqLnZpemlkYXRhLmNlbnRlcoIK
dm9jYmxyLmNvbYIMKi52b2NibHIuY29tggp2dWtvdmkub3JnggwqLnZ1a292aS5v
cmeCC3dvbGYudmlzaW9ugg0qLndvbGYudmlzaW9uggx4b21uaS5jb20uYXWCDiou
eG9tbmkuY29tLmF1ggt5YXNwYW4udGVjaIINKi55YXNwYW4udGVjaIIMemVuaWZh
Y2UuY29tgg4qLnplbmlmYWNlLmNvbTAJBgNVHRMEAjAAMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmds
b2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyLmNybDCBoAYI
KwYBBQUHAQEEgZMwgZAwTQYIKwYBBQUHMAKGQWh0dHA6Ly9zZWN1cmUuZ2xvYmFs
c2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsc2hhMmcycjEuY3J0MD8G
CCsGAQUFBzABhjNodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6
YXRpb252YWxzaGEyZzIwHQYDVR0OBBYEFJKeXKQjn+jGigpgJymC06XAxRN8MB8G
A1UdIwQYMBaAFJbeYfG9HBYpUxzAzH07gwBA5hp8MA0GCSqGSIb3DQEBCwUAA4IB
AQAjf4U4w6OPPhAkzOaoskWO5sDLkY+2szlvojisK8I/VFqLkFv+1/6gZj6A/KAl
AN8pg6XV7nMcW5Zt2lv2/49fzf2CgrMG3YvGuawHz8M9yz3vudBGtZVk6V+e2OU6
tsJHC5/0ioOiQC7lGcnvOwHR+E/MrZ3iBDFDzl3K5axf8JD0+VS2OOAiNbUMQlj0
wbSFYxlGlYK5DUzpNtFpi6RDArUoaEt6HFt6nASFXW/Ute/Djj/ULMWPSDukXv9r
d1RtxpeOGcF2414+Q6LKRfwCEz5QLFrW/4eh2x3xetRXj3uFg0rTaFkNcLCJNX+G
WRXq0pHDiRzoqJrqVPi+Ac1v
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVQzQSRaSs7oIZltSbK6
6TMz/AAsykVnUu7KszUNCCJvE7VI9EboSRpiWTQ/XIvc2d6Usb7KZtWInyY9Rks0
2ZwHzeZ2stLPypXUf3t1l9NwkhUVwTyyUnw8RYqMvJEhwg84WCFTTnEcJesa7c3f
2/73tKU3HaYGoVyQeRBBKKBE+OLL67lhNCBG9BCNw7xsr1AL6fwVEEvNH6nxdUT0
xANLq7LGu1KZ0T9KSK0aLWdVd4NYMfjZuNbJTOnwhXyU8rkluC5Z+76k1Fq21bDB
0GuMiFhegTFM431oRVNHA7tJ+nYRpg2ZGxs0p+atpuNMkNIuDk6o4Tn+n74kWqoc
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492185147592000965350643062607552220345105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-05 02:48:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-12 19:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25920373190439816938193977017241391079671606960341364805549810338940825976118202481792956730831427466975198815657969224228914381324204468307339974705829125670839440588892682904903807857798874884646402731141678098006854220917349150331268911873090682074340531454299377751304453355040312188294051812390195598762511476884894389458516330119365565731561819866259073223192188590675267119998216585582541759802253190854657876434087989170323211024421224132021804943981008428351175598151935304515732947770979059331151128287332700184147225212529507542641353615757312320522451303778998534043831425489575617397873763775339507096613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21stgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.21stgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angularfire2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angularfire2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argofrienddate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argofrienddate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azgfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azgfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockstackstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockstackstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casualmountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplinkyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaplinkyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveystrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conveystrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop150.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coop150.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreinputapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coreinputapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivatecompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivatecompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doonetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doonetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driverup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverupapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driverupapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubbelelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubbelelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduplanllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduplanllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efdr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efdr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmersive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emmersive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fal.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fal.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finhacks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finhacks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire-paper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fire-paper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratitudely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratitudely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackerhow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackerhow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyanna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyanna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibm-twm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibm-twm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihateitapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihateitapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inxdisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inxdisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwinetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwinetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacarte.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacarte.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendshare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lendshare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lvvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marijess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatrevoacrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meatrevoacrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesilane.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesilane.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meta.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaguru.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaguru.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minuet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minuet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderndeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moderndeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moyanotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moyanotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nosy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otherthemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otherthemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persona-im.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.persona-im.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotscrewdriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robotscrewdriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagepath.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sagepath.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segfault.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segfault.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakee.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakee.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapchat-directory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapchat-directory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solidwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportmate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportmate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivors.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivors.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tival.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tival.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tpasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txtask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txtask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udundi.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udundi.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userjoy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.userjoy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizidata.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vizidata.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocblr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocblr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vukovi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vukovi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolf.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolf.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xomni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xomni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaspan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaspan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeniface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeniface.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929e5ca4239fe8c68a0a60272982d3a5c0c5137c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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