*.trunarrative.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 65:27:fc:5c:6b:f2:d6:f4:4f:93:a3:57 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.trunarrative.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 65:27:fc:5c:6b:f2:d6:f4:4f:93:a3:57
Serial Number (int): 31306325840153476262106735447
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e1:91:49:c3:7c:ec:8d:26:52:4b:59:77:5d:c0:57:1c:db:ae:ec:61
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): b1:e6:e6:47:af:cf:63:12:e9:dc:a2:e2:09:49:72:62:7b:97:de:11
Fingerprint (sha256): 0e:83:1b:af:f2:b8:77:9b:48:30:c1:f2:a5:8e:29:bb:d3:ee:c3:e8:8a:e0:b6:d8:3f:27:d1:54:3c:4b:a5:96

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate *.trunarrative.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.trunarrative.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.trunarrative.com
trunarrative.com

Other certificates including the domain name trunarrative.com

(limited to 100 certificates)
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
trunarrative.com
*.trunarrative.com
status.amanah.com
mylanstatus.globalvisioninc.com
status.channelengine.com
choicepoint.com
*.trunarrative.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.wavity.info
trunarrative.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.medpt.com
mi.portal.sagrado.edu
trunarrative.com
trunarrative.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
choicepoint.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.channelengine.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
status.healthera.co.uk
www.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
api.trunarrative.com
www.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.medpt.com
trunarrative.com
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.madrasmediaworks.in
mi.portal.sagrado.edu
status.appetize.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
staging.trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.themoviedb.org
*.trunarrative.com
status.quick-vue.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
help.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.tecsens.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
trunarrative.com
status.madrasmediaworks.in
mylanstatus.globalvisioninc.com

Certificate

The complete raw certificate details for *.trunarrative.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHezCCBmOgAwIBAgIMZSf8XGvy1vRPk6NXMA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN
MTYxMjE5MTYxODE0WhcNMTcxMjIwMTYxODE0WjBAMSEwHwYDVQQLExhEb21haW4g
Q29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAMMEioudHJ1bmFycmF0aXZlLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM+xqJxU+UYMymmJlggD8oMA
UaQzvkdJxrEf/j4K3E08lD763zJNbVchkHtV8K2aaepsKYBhjXv/HAxLZQldzIS9
42EmVBe2GdzfeWKsFo4GZ7zI5TCRrErtez9h1ICm+F2hEXNGXSEnNaKIMN7XkyaV
qjZKT5THqpAO7s/+6UEflR3kcczHOfsErkfjXx5m5LT/Z2yb2l1AJDmUFGwuTPjM
t0iAM0bdq+JVpCYDoR4gmQXMTfmSQccSAs1vasrLbslM7RSRAaD3fi2P6/nSc9GD
feg5e6fvUT8EuGJBrww7MHzfTpPLaal3ojypb1tR2VLCg98Gs00LcgBQj3LSn2sC
AwEAAaOCBFMwggRPMA4GA1UdDwEB/wQEAwIFoDCBlAYIKwYBBQUHAQEEgYcwgYQw
RwYIKwYBBQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0
L2dzZG9tYWludmFsc2hhMmcycjEuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2Nz
cDIuZ2xvYmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzIwVgYDVR0gBE8wTTBB
BgkrBgEEAaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2ln
bi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQwYDVR0fBDww
OjA4oDagNIYyaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZh
bHNoYTJnMi5jcmwwLwYDVR0RBCgwJoISKi50cnVuYXJyYXRpdmUuY29tghB0cnVu
YXJyYXRpdmUuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQU4ZFJw3zsjSZSS1l3XcBXHNuu7GEwHwYDVR0jBBgwFoAU6k581IAt5RWB
hiaMgm3AmKTPlw8wggJsBgorBgEEAdZ5AgQCBIICXASCAlgCVgB2AN3rHSt6DU+m
IIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWRfgVfMAAAQDAEcwRQIgfmBaqbEV
f1rq0s9V4mEcun5l0s9bvqnih13r0m904xgCIQCpSEtYK3Ibdu5BIp2d/adFcOWy
vwW8mY8SV0ZWYzejSwB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDd
AAABWRfgWJQAAAQDAEcwRQIgcNVER2KmqDwtUUf4iCehqiVSd4G1QGia7iArRfKa
il8CIQC/Vi9bHso4FeUMvFPAQb8fMbYM5USPTK0wd2DheCGoqwB1ALvZ37wfinG1
k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABWRfgWZoAAAQDAEYwRAIgPi+b9wI7
AM2GV23QFNG2D2NLFd3rvKJzLwFqufhxozACIENodHt0NSmElZ+TouZ6Ik27c7Nv
omhHQNEdln3Yr6npAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFZF+BY8wAABAMARjBEAiBmrVT4JP8b3FtFfx1/0NRCGv/NebYtToMxsJr94zKq
WAIgGFY3XU7t+OLw9pMxLHzj4NLC3RG3QvdDBzPLQIMTyEYAdgDuS723dc5guuFC
aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVkX4Fv1AAAEAwBHMEUCIHefATSlrYdO
g+Lp2DCYow4to7hK72XHswaqLZ2/tnx+AiEAjAjTPKxY3RHtra93g2Eu3JOC49sR
NK/S/D92m16jPYMwDQYJKoZIhvcNAQELBQADggEBAHJSn32Ky6D7xZoWx0rnx8BH
nail5vkUgdAMri3cT13HZhC3Ia5IEdQFUxEeIaT+IOyxf1rufZ1yFfCE83JuQScv
lhn74hqCy3aUB+5Ngh5YhExEjbZjIYYhw6/yWM/u7BmpFJ6MCBqm3Z9ls/vGtgKS
NIyEtxZLSb6Xvwxc7ifez8kg8XszY/tsde7eRryKCeJvSd2OPzzEuAoAJBNTRTvL
tGl5QMgCzGtpHWTUsFVLyDwOSH0chzf4/ITfgNsiHQSXNTi/rYxRUhtRUQvupisV
nIrU7QnSFgvGwV5nqZmyEJlXkn/HBMtuGXmpVOmMU/FEVtDv+wUKTAGvZv1t8Io=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7GonFT5RgzKaYmWCAPy
gwBRpDO+R0nGsR/+PgrcTTyUPvrfMk1tVyGQe1XwrZpp6mwpgGGNe/8cDEtlCV3M
hL3jYSZUF7YZ3N95YqwWjgZnvMjlMJGsSu17P2HUgKb4XaERc0ZdISc1oogw3teT
JpWqNkpPlMeqkA7uz/7pQR+VHeRxzMc5+wSuR+NfHmbktP9nbJvaXUAkOZQUbC5M
+My3SIAzRt2r4lWkJgOhHiCZBcxN+ZJBxxICzW9qystuyUztFJEBoPd+LY/r+dJz
0YN96Dl7p+9RPwS4YkGvDDswfN9Ok8tpqXeiPKlvW1HZUsKD3wazTQtyAFCPctKf
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31306325840153476262106735447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-19 16:18:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-20 16:18:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.trunarrative.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26218935866255438745237545324269311077146812568952111053042326815101922989485016558383906936467597114332332746265532778005519886841033878196081114363011617217030328134177764902654823666879319952514549982765578465083366794869488514518613714869854073077279081711890968308261791157984507627035475696496331499368557112622692189427358995767121422844940444608183319645936007950002202572172434093741611901964655927112229913266419921844388664927421798570531964074270620179341471165909024962924067156235107724050930622550567508821369092642503049814409430144152204023000953935345975202223007346660039326775708701734074240376683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trunarrative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunarrative.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e19149c37cec8d26524b59775dc0571cdbaeec61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0072529f7d8acba0fbc59a16c74ae7c7c0479da8a5e6f91481d00cae2ddc4f5dc76610b721ae4811d40553111e21a4fe20ecb17f5aee7d9d7215f084f3726e41272f9619fbe21a82cb769407ee4d821e58844c448db663218621c3aff258cfeeec19a9149e8c081aa6dd9f65b3fbc6b60292348c84b7164b49be97bf0c5cee27decfc920f17b3363fb6c75eede46bc8a09e26f49dd8e3f3cc4b80a00241353453bcbb4697940c802cc6b691d64d4b0554bc83c0e487d1c8737f8fc84df80db221d04973538bfad8c51521b51510beea62b159c8ad4ed09d2160bc6c15e67a999b2109957927fc704cb6e1979a954e98c53f14456d0effb050a4c01af66fd6df08a