adeo4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 20:85:21:9a:ee:75:d1:6a:0b:72:33:57 was issued on by GlobalSign nv-sa.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:85:21:9a:ee:75:d1:6a:0b:72:33:57
Serial Number (int): 10064466144367180135682683735
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 6a:c3:c2:a3:59:31:a6:76:c3:30:82:a8:95:b2:f4:4c:1a:d3:1f:5d
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): de:d5:e7:a3:f5:f3:d7:36:16:84:5d:19:8e:77:fa:42:10:b9:01:53
Fingerprint (sha256): 19:c5:3c:e5:de:5e:ed:8f:8e:55:58:d1:f4:a9:54:8a:fd:19:e6:8b:b4:83:80:b5:c2:fe:0b:fd:12:66:f3:2b

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate adeo4.map.fastly.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adeo4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adeo4.map.fastly.net
*.api.adeo.com
*.api.prep.adeo.com
api-pub-loyalty-eu.adeo.com
buperformance.adeo.com
last-mile.leroymerlin.fr
magepreprod.bricoman.fr
my-loyalty-lmpt.adeo.com
rec-instala.leroymerlin.fr
timeline.adeo.com

Other certificates including the domain name adeo4.map.fastly.net

(limited to 100 certificates)
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net

Certificate

The complete raw certificate details for adeo4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIMIIUhmu510WoLcjNXMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTkxMTI5MTM1
NjIwWhcNMjAwOTI3MTc0MjE4WjBwMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMR0wGwYDVQQDExRhZGVvNC5tYXAuZmFzdGx5Lm5ldDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALEOU/ODyNE/4K+H7uT2l9Lq73QVOdBF0zsu
u6FI7Af1/yaLoddxfky9C1bBx1AAbqqSO+BrUIlbH1NOMl/LTVc6Jo/S6G5MbgKF
rs3hGNcJdWx5gzJNbPWFUCyQI4WhP/EpET8HGG2+6pWWWOIqRqj7lqcC8BUcy+ZE
S/KCWe6xpis8PRyBvaK65aEeXH4zuk3LHsZI61ceRHcwfhUbcx2kklf1bTqrBwDX
QzYeQQi5KMxEuNJngK6Vb6cgmtYis1RzPEYzmPFoomHNYxWoEReNlVHUfDZWQ1Uk
V37N+HZ4e3J5s0a5A8DaUjWZMQ+D1W6WszaJHdZATVT4nb69QucCAwEAAaOCAnIw
ggJuMA4GA1UdDwEB/wQEAwIFoDCBigYIKwYBBQUHAQEEfjB8MEIGCCsGAQUFBzAC
hjZodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9jbG91ZHNzbHNo
YTJnMy5jcnQwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNv
bS9jbG91ZHNzbHNoYTJnMzBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAI
BgZngQwBAgIwCQYDVR0TBAIwADCB9wYDVR0RBIHvMIHsghRhZGVvNC5tYXAuZmFz
dGx5Lm5ldIIOKi5hcGkuYWRlby5jb22CEyouYXBpLnByZXAuYWRlby5jb22CG2Fw
aS1wdWItbG95YWx0eS1ldS5hZGVvLmNvbYIWYnVwZXJmb3JtYW5jZS5hZGVvLmNv
bYIYbGFzdC1taWxlLmxlcm95bWVybGluLmZyghdtYWdlcHJlcHJvZC5icmljb21h
bi5mcoIYbXktbG95YWx0eS1sbXB0LmFkZW8uY29tghpyZWMtaW5zdGFsYS5sZXJv
eW1lcmxpbi5mcoIRdGltZWxpbmUuYWRlby5jb20wHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFKkrh+HOJEc7G7/PhTcCVZ0NlFjmMB0G
A1UdDgQWBBRqw8KjWTGmdsMwgqiVsvRMGtMfXTATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAByuK/MxmFS5z/u475ddiP5Bsn9iLH/acVLGw
4koawlde6zskS1lMWTkSHVc586zJHFuLgoJMYvDDDq4OAIzCedn9O5sX9VGqO2KF
1nEbuH5N2e+jpPQQu1n79z6WnGvgDCuaQuSA/raObvKdQ1XgFt7aLkyGaIpyTC0M
Nvm1/8feA8muejZGVhFwGup0zQpPZWYl4NmryTomytk3BdjstjVbs7T+EdMqXchT
rU3nsc92ItS1bPC3ZmMCkau3zfy2PIZXNYKZVAqz97fjyFnNqX1mqtNvjHXyQ5zw
dIKnLGShU/UTibMZbUuv7rD+35TgTkwSDweWkOcBafNZy2/uvg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5T84PI0T/gr4fu5PaX
0urvdBU50EXTOy67oUjsB/X/Jouh13F+TL0LVsHHUABuqpI74GtQiVsfU04yX8tN
Vzomj9LobkxuAoWuzeEY1wl1bHmDMk1s9YVQLJAjhaE/8SkRPwcYbb7qlZZY4ipG
qPuWpwLwFRzL5kRL8oJZ7rGmKzw9HIG9orrloR5cfjO6TcsexkjrVx5EdzB+FRtz
HaSSV/VtOqsHANdDNh5BCLkozES40meArpVvpyCa1iKzVHM8RjOY8WiiYc1jFagR
F42VUdR8NlZDVSRXfs34dnh7cnmzRrkDwNpSNZkxD4PVbpazNokd1kBNVPidvr1C
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10064466144367180135682683735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 13:56:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 17:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adeo4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22351245346819608922184295397469460369662060182324307613470527002197365936208681675359105015005745631414283003712849741252818517659447312939993424601077109240837042985442622714667170238312900941638355847298207515597046692800319797291674601723498940534553823321014367182986146908177755356105326057779169826226035496502573324304180614609451407469771911896322954691931039224865761041826618639896599632813581194631589281335716059165048950008411943036918624508589229025910680677043590574100701972124314519353208677662827660889197225363199801919986029339145294863433034666803961736978880434406662564663372432717881202787047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeo4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.prep.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-pub-loyalty-eu.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buperformance.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'last-mile.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magepreprod.bricoman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-loyalty-lmpt.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-instala.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeline.adeo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ac3c2a35931a676c33082a895b2f44c1ad31f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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