platformsh3.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 79:73:3d:29:ad:58:e8:92:7d:b6:23:d6 was issued on by GlobalSign nv-sa.

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 79:73:3d:29:ad:58:e8:92:7d:b6:23:d6
Serial Number (int): 37587001490801387023623398358
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3a:99:3a:26:9b:bd:55:d0:c5:76:9a:9e:a2:88:36:70:4b:75:e7:c4
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 6d:f3:c3:b9:91:fd:c3:2b:a0:1d:aa:25:c1:e1:bc:4a:01:8a:a2:a5
Fingerprint (sha256): 17:66:f1:68:36:29:91:c2:54:52:7a:44:50:02:90:6c:36:d4:75:36:2e:ef:4f:44:2c:a5:17:09:f3:2c:65:83

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate platformsh3.map.fastly.net

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformsh3.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformsh3.map.fastly.net
*.afrimarket.bj
*.afrimarket.ci
*.afrimarket.cm
*.afrimarket.fr
*.afrimarket.ml
*.afrimarket.sn
*.au.platformsh.site
*.auchan.afrimarket.sn
*.bellewaerde.be
*.bielertagblatt.ch
*.biomerieux-industry.com
*.boattest.com
*.bpce.fr
*.ca-1.platformsh.site
*.carac.fr
*.ccgpay-test.co.uk
*.de-2.platformsh.site
*.drupal.msstate.edu
*.editionsduboisbaudry.com
*.eu-2.platformsh.site
*.eu-3.platformsh.site
*.filieres-avicoles.com
*.fr-1.platformsh.site
*.franceminiature.fr
*.freerice.com
*.gecina.fr
*.groupebpce.com
*.groupebpce.fr
*.la-retraite-en-clair.fr
*.lrec-pp.la-retraite-en-clair.fr
*.maybelline.afrimarket.sn
*.mizzou.edu
*.moigneu.com
*.numobile.com.au
*.plm-magazine.com
*.preprod.formations.avocats.fr
*.processalimentaire.com
*.rayon-boissons.com
*.s-afrimarket.com
*.skimium.fr
*.teeps-sph.co
*.ubaldi.pro
*.us-2.platformsh.site
afrimarket.bj
afrimarket.ci
afrimarket.cm
afrimarket.fr
afrimarket.ml
afrimarket.sn
bellewaerde.be
bielertagblatt.ch
biomerieux-industry.com
blog.lrb.co.uk
boattest.com
bpce.fr
carac.fr
ccgpay-test.co.uk
drupal.msstate.edu
editionsduboisbaudry.com
emergency.msstate.edu
epargnonssolidaire.fr
filieres-avicoles.com
franceminiature.fr
freerice-engine.nuvole.org
freerice.com
gecina.fr
groupebpce.com
groupebpce.fr
la-retraite-en-clair.fr
measuresup.missouri.edu
missouri.edu
mizzou.edu
numobile.com.au
plm-magazine.com
preprod.formations.avocats.fr
processalimentaire.com
prod.missouri.edu
rayon-boissons.com
staging.api-content.skimium.fr
staging.api-customer.skimium.fr
staging.api-offer.skimium.fr
staging.api-reporting.skimium.fr
staging.api-user.skimium.fr
staging.missouri.edu
staging.skimium.be
staging.skimium.co.uk
staging.skimium.de
staging.skimium.es
staging.skimium.fr
staging.skimium.it
staging.skimium.nl
ubaldi.pro
visitus.missouri.edu
www.emergency.msstate.edu
www.epargnonssolidaire.fr
www.missouri.edu
www.prod.drupal.msstate.edu
www.prod.emergency.msstate.edu
www.prod.missouri.edu
www.prod.msstate.edu
www.staging.drupal.msstate.edu
www.staging.emergency.msstate.edu
www.staging.missouri.edu
www.staging.msstate.edu
www.staging.skimium.fr

Other certificates including the domain name platformsh3.map.fastly.net

(limited to 100 certificates)
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net
platformsh3.map.fastly.net

Certificate

The complete raw certificate details for platformsh3.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOhzCCDW+gAwIBAgIMeXM9Ka1Y6JJ9tiPWMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkwNjIxMDgy
NTEzWhcNMTkxMTE2MTQwODIzWjB2MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMSMwIQYDVQQDExpwbGF0Zm9ybXNoMy5tYXAuZmFzdGx5Lm5ldDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM4+qhJ+Dni2x7GBVYuRfDYJP02V
mveWziWH5NhhDpGwmPSpeOf086FsND7a++PFBGOMPuonvzlg80kPYvEynKh/S3dO
K4wIAYAJ3YrIoYkgOwfc9oxt8+r27KokCnjT5rY0L+eS1IoT2sjSZ9+TIYcmg3Tc
fz11yZoSoJWgeZ79BrZFvklXpCnsUIsjvzr8qb2ao64rqF8c4wlls4IYqGWNZazQ
ER7PyJU66HJAAl9aO07veI9VkN/eOyj/Hsety2FrCBICCtDIh+dRQVcmWiCFFVtr
tzxcgIH9tZPoa5eEpchnMXAwRWsBl3AviPff3Oac0guHerLKYZQLSznaTXkCAwEA
AaOCCzIwggsuMA4GA1UdDwEB/wQEAwIFoDCBigYIKwYBBQUHAQEEfjB8MEIGCCsG
AQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9jbG91
ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwMi5nbG9iYWxz
aWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADCCCMIGA1UdEQSCCLkwggi1ghpwbGF0
Zm9ybXNoMy5tYXAuZmFzdGx5Lm5ldIIPKi5hZnJpbWFya2V0LmJqgg8qLmFmcmlt
YXJrZXQuY2mCDyouYWZyaW1hcmtldC5jbYIPKi5hZnJpbWFya2V0LmZygg8qLmFm
cmltYXJrZXQubWyCDyouYWZyaW1hcmtldC5zboIUKi5hdS5wbGF0Zm9ybXNoLnNp
dGWCFiouYXVjaGFuLmFmcmltYXJrZXQuc26CECouYmVsbGV3YWVyZGUuYmWCEyou
YmllbGVydGFnYmxhdHQuY2iCGSouYmlvbWVyaWV1eC1pbmR1c3RyeS5jb22CDiou
Ym9hdHRlc3QuY29tggkqLmJwY2UuZnKCFiouY2EtMS5wbGF0Zm9ybXNoLnNpdGWC
CiouY2FyYWMuZnKCEyouY2NncGF5LXRlc3QuY28udWuCFiouZGUtMi5wbGF0Zm9y
bXNoLnNpdGWCFCouZHJ1cGFsLm1zc3RhdGUuZWR1ghoqLmVkaXRpb25zZHVib2lz
YmF1ZHJ5LmNvbYIWKi5ldS0yLnBsYXRmb3Jtc2guc2l0ZYIWKi5ldS0zLnBsYXRm
b3Jtc2guc2l0ZYIXKi5maWxpZXJlcy1hdmljb2xlcy5jb22CFiouZnItMS5wbGF0
Zm9ybXNoLnNpdGWCFCouZnJhbmNlbWluaWF0dXJlLmZygg4qLmZyZWVyaWNlLmNv
bYILKi5nZWNpbmEuZnKCECouZ3JvdXBlYnBjZS5jb22CDyouZ3JvdXBlYnBjZS5m
coIZKi5sYS1yZXRyYWl0ZS1lbi1jbGFpci5mcoIhKi5scmVjLXBwLmxhLXJldHJh
aXRlLWVuLWNsYWlyLmZyghoqLm1heWJlbGxpbmUuYWZyaW1hcmtldC5zboIMKi5t
aXp6b3UuZWR1gg0qLm1vaWduZXUuY29tghEqLm51bW9iaWxlLmNvbS5hdYISKi5w
bG0tbWFnYXppbmUuY29tgh8qLnByZXByb2QuZm9ybWF0aW9ucy5hdm9jYXRzLmZy
ghgqLnByb2Nlc3NhbGltZW50YWlyZS5jb22CFCoucmF5b24tYm9pc3NvbnMuY29t
ghIqLnMtYWZyaW1hcmtldC5jb22CDCouc2tpbWl1bS5mcoIOKi50ZWVwcy1zcGgu
Y2+CDCoudWJhbGRpLnByb4IWKi51cy0yLnBsYXRmb3Jtc2guc2l0ZYINYWZyaW1h
cmtldC5iaoINYWZyaW1hcmtldC5jaYINYWZyaW1hcmtldC5jbYINYWZyaW1hcmtl
dC5mcoINYWZyaW1hcmtldC5tbIINYWZyaW1hcmtldC5zboIOYmVsbGV3YWVyZGUu
YmWCEWJpZWxlcnRhZ2JsYXR0LmNoghdiaW9tZXJpZXV4LWluZHVzdHJ5LmNvbYIO
YmxvZy5scmIuY28udWuCDGJvYXR0ZXN0LmNvbYIHYnBjZS5mcoIIY2FyYWMuZnKC
EWNjZ3BheS10ZXN0LmNvLnVrghJkcnVwYWwubXNzdGF0ZS5lZHWCGGVkaXRpb25z
ZHVib2lzYmF1ZHJ5LmNvbYIVZW1lcmdlbmN5Lm1zc3RhdGUuZWR1ghVlcGFyZ25v
bnNzb2xpZGFpcmUuZnKCFWZpbGllcmVzLWF2aWNvbGVzLmNvbYISZnJhbmNlbWlu
aWF0dXJlLmZyghpmcmVlcmljZS1lbmdpbmUubnV2b2xlLm9yZ4IMZnJlZXJpY2Uu
Y29tgglnZWNpbmEuZnKCDmdyb3VwZWJwY2UuY29tgg1ncm91cGVicGNlLmZyghds
YS1yZXRyYWl0ZS1lbi1jbGFpci5mcoIXbWVhc3VyZXN1cC5taXNzb3VyaS5lZHWC
DG1pc3NvdXJpLmVkdYIKbWl6em91LmVkdYIPbnVtb2JpbGUuY29tLmF1ghBwbG0t
bWFnYXppbmUuY29tgh1wcmVwcm9kLmZvcm1hdGlvbnMuYXZvY2F0cy5mcoIWcHJv
Y2Vzc2FsaW1lbnRhaXJlLmNvbYIRcHJvZC5taXNzb3VyaS5lZHWCEnJheW9uLWJv
aXNzb25zLmNvbYIec3RhZ2luZy5hcGktY29udGVudC5za2ltaXVtLmZygh9zdGFn
aW5nLmFwaS1jdXN0b21lci5za2ltaXVtLmZyghxzdGFnaW5nLmFwaS1vZmZlci5z
a2ltaXVtLmZygiBzdGFnaW5nLmFwaS1yZXBvcnRpbmcuc2tpbWl1bS5mcoIbc3Rh
Z2luZy5hcGktdXNlci5za2ltaXVtLmZyghRzdGFnaW5nLm1pc3NvdXJpLmVkdYIS
c3RhZ2luZy5za2ltaXVtLmJlghVzdGFnaW5nLnNraW1pdW0uY28udWuCEnN0YWdp
bmcuc2tpbWl1bS5kZYISc3RhZ2luZy5za2ltaXVtLmVzghJzdGFnaW5nLnNraW1p
dW0uZnKCEnN0YWdpbmcuc2tpbWl1bS5pdIISc3RhZ2luZy5za2ltaXVtLm5sggp1
YmFsZGkucHJvghR2aXNpdHVzLm1pc3NvdXJpLmVkdYIZd3d3LmVtZXJnZW5jeS5t
c3N0YXRlLmVkdYIZd3d3LmVwYXJnbm9uc3NvbGlkYWlyZS5mcoIQd3d3Lm1pc3Nv
dXJpLmVkdYIbd3d3LnByb2QuZHJ1cGFsLm1zc3RhdGUuZWR1gh53d3cucHJvZC5l
bWVyZ2VuY3kubXNzdGF0ZS5lZHWCFXd3dy5wcm9kLm1pc3NvdXJpLmVkdYIUd3d3
LnByb2QubXNzdGF0ZS5lZHWCHnd3dy5zdGFnaW5nLmRydXBhbC5tc3N0YXRlLmVk
dYIhd3d3LnN0YWdpbmcuZW1lcmdlbmN5Lm1zc3RhdGUuZWR1ghh3d3cuc3RhZ2lu
Zy5taXNzb3VyaS5lZHWCF3d3dy5zdGFnaW5nLm1zc3RhdGUuZWR1ghZ3d3cuc3Rh
Z2luZy5za2ltaXVtLmZyMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf
BgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3AlWdDZRY5jAdBgNVHQ4EFgQUOpk6Jpu9
VdDFdpqeoog2cEt158QwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWt5I8U+AAAEAwBHMEUCIFSPAV1y
RcacEzzRz9rpaW5zTX6Jnf7Ax+N8QFYaG+ESAiEAuHivv5uY2F65uQoxsDob9s4N
qFLtr2cpldU/8aql85YAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9
ywAAAWt5I8TOAAAEAwBIMEYCIQCqpyZ/9nl4pbBhgr+9XhfdGa+AzFQvojr2cEf5
2LwVkAIhAPDA/Nxfn+lqqOA/RG0AJ6mqEmPGEF9dJDNEz0V1bb7jMA0GCSqGSIb3
DQEBCwUAA4IBAQALWKSq+DOlSt8XdRXWNvEDaiVe4GiFZNoyoM+hFKKWTShrc0OX
8hPqqzXDYq+fMh4adf3xPc7girv5mcRk6IqYR2EkXjskgzvsjLTcAW13OwMxv4kF
zaoQP85nXYHknLkGG9yhIrZTqeGFoSuOYjm11LHSAkQPzaZReq/2D21YcUHKMXFz
spKUm2AVZIEAfmO5vaPInl4a95fFivlXjNCGBDY3/lJiEu6QLTEXEh/umgsA8+Ku
/iSdiy7wy4zDMEI4HXTbU6l5wo9DVHD5VN5CK8/4iIdmXSmLAEVkAGkHK+HKkb+X
zy1kclonaYeZR3Q1jl9+fb+kaX8w2OKec/9p
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj6qEn4OeLbHsYFVi5F8
Ngk/TZWa95bOJYfk2GEOkbCY9Kl45/TzoWw0Ptr748UEY4w+6ie/OWDzSQ9i8TKc
qH9Ld04rjAgBgAndisihiSA7B9z2jG3z6vbsqiQKeNPmtjQv55LUihPayNJn35Mh
hyaDdNx/PXXJmhKglaB5nv0GtkW+SVekKexQiyO/OvypvZqjriuoXxzjCWWzghio
ZY1lrNARHs/IlTrockACX1o7Tu94j1WQ3947KP8ex63LYWsIEgIK0MiH51FBVyZa
IIUVW2u3PFyAgf21k+hrl4SlyGcxcDBFawGXcC+I99/c5pzSC4d6ssphlAtLOdpN
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37587001490801387023623398358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 08:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 14:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platformsh3.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26035991763059527632158950319227112910836414528292316067470450595600462432057981744029227060820110654413607329526891227821909124874632898988180941049658381589928273684997386775948388608192662945942024666739596707195818522319765998497596006634560002880194824357236916918270474828178299706363858941181137287906151677813684941937888380286611861106329632247759228796316637181493257036441923385861635918064772875222255302178167791220200775611875270927704019571302770853167016717629563259828943108149967909006276244797292760579509745751219734340341029634021213424853087650477691702824856745722628177401646270841639115836793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformsh3.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.au.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auchan.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellewaerde.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bielertagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biomerieux-industry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boattest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-1.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccgpay-test.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editionsduboisbaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-3.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filieres-avicoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr-1.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franceminiature.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freerice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gecina.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupebpce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupebpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrec-pp.la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maybelline.afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizzou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moigneu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.numobile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plm-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.formations.avocats.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.processalimentaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayon-boissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-afrimarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teeps-sph.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubaldi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-2.platformsh.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimarket.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellewaerde.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bielertagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomerieux-industry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.lrb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boattest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccgpay-test.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editionsduboisbaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epargnonssolidaire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filieres-avicoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franceminiature.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerice-engine.nuvole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecina.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupebpce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupebpce.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-retraite-en-clair.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'measuresup.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mizzou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numobile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plm-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.formations.avocats.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processalimentaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayon-boissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-content.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-customer.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-offer.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-reporting.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api-user.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.skimium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubaldi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitus.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epargnonssolidaire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.drupal.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.emergency.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.msstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.skimium.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a993a269bbd55d0c5769a9ea28836704b75e7c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b7923c53e00000403004730450220548f015d7245c69c133cd1cfdae9696e734d7e899dfec0c7e37c40561a1be112022100b878afbf9b98d85eb9b90a31b03a1bf6ce0da852edaf672995d53ff1aaa5f396007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b7923c4ce0000040300483046022100aaa7267ff67978a5b06182bfbd5e17dd19af80cc542fa23af67047f9d8bc1590022100f0c0fcdc5f9fe96aa8e03f446d0027a9aa1263c6105f5d243344cf45756dbee3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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