firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:a2:f2:56:00:2d:79:4c:ee:e0:e0:89:2b:0e:b8:dd:9b was issued on by GlobalSign nv-sa.

With 148 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:a2:f2:56:00:2d:79:4c:ee:e0:e0:89:2b:0e:b8:dd:9b
Serial Number (int): 1492354772163773383469410346959780271676827
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 72:45:5d:29:9f:16:e2:55:64:ed:44:ce:2a:9f:33:21:01:77:f2:a9
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 16:8b:22:ac:85:69:3e:db:f1:6e:18:3a:a4:de:7d:c0:29:c0:8a:d3
Fingerprint (sha256): 1a:07:d3:89:64:3c:df:a0:82:9e:d9:eb:06:f2:df:d9:dc:0d:a8:83:4d:9a:85:12:58:a6:e4:5d:8a:20:1e:64

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

148

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
auditionmagic.com
*.auditionmagic.com
auto-reg.com
*.auto-reg.com
barberslook.com
*.barberslook.com
batosurl.ooo
*.batosurl.ooo
britishgaslabs.co.uk
*.britishgaslabs.co.uk
burningsea.com
*.burningsea.com
cherrie.io
*.cherrie.io
cloudcallinsystem.com
*.cloudcallinsystem.com
contentgardening.com
*.contentgardening.com
crazy.today
*.crazy.today
davidisfilm.com
*.davidisfilm.com
deartripadvisor.com
*.deartripadvisor.com
decaronas.com.br
*.decaronas.com.br
extinder.com
*.extinder.com
flavr.be
*.flavr.be
flutter.io
*.flutter.io
get248.com
*.get248.com
golaunchpad.org
*.golaunchpad.org
gotdone.me
*.gotdone.me
gpersia.com
*.gpersia.com
healthyu.io
*.healthyu.io
hillaryclintonbetterpresident.com
*.hillaryclintonbetterpresident.com
holdemsteps.com
*.holdemsteps.com
huffle.io
*.huffle.io
ifi.io
*.ifi.io
imintech.org
*.imintech.org
inevitableriseofthemachines.com
*.inevitableriseofthemachines.com
insider.life
*.insider.life
jfilip.ca
*.jfilip.ca
joinbeadoer.com
*.joinbeadoer.com
justmotion.co
*.justmotion.co
ken-johnstonmusic.co.uk
*.ken-johnstonmusic.co.uk
l-ac.com
*.l-ac.com
ladyhearttravel.info
*.ladyhearttravel.info
learn-reactjs.com
*.learn-reactjs.com
listen.no
*.listen.no
lopsa.com.ar
*.lopsa.com.ar
luckyloser.co
*.luckyloser.co
lunchtimevoter.com
*.lunchtimevoter.com
michaelcera.us
*.michaelcera.us
nastassiafreeman.com
*.nastassiafreeman.com
ng-conf.org
*.ng-conf.org
nic-west.com
*.nic-west.com
nimbo-x.com
*.nimbo-x.com
omyfly.com
*.omyfly.com
oyloo.com
*.oyloo.com
paperspire.com
*.paperspire.com
paycar.fr
*.paycar.fr
playfuldance.com
*.playfuldance.com
polyonfire.com
*.polyonfire.com
prompter.io
*.prompter.io
quiltdata.com
*.quiltdata.com
redams.se
*.redams.se
regattaone.com
*.regattaone.com
rootscreation.nl
*.rootscreation.nl
routinesuccess.net
*.routinesuccess.net
sapien-ci.com
*.sapien-ci.com
sayable.co
*.sayable.co
shortorange.com
*.shortorange.com
signupfor.it
*.signupfor.it
smasher.io
*.smasher.io
sqwirly.com
*.sqwirly.com
staticapps.org
*.staticapps.org
stupidseverinshutyourmouth.com
*.stupidseverinshutyourmouth.com
teamworkmail.com
*.teamworkmail.com
teevox.com
*.teevox.com
unlyst.com
*.unlyst.com
upclaz.com
*.upclaz.com
warrior.accountants
*.warrior.accountants
whiteboardmodels.com
*.whiteboardmodels.com
worldwideenglish.com
*.worldwideenglish.com
yeonseup.com
*.yeonseup.com
zerofootprint.com.au
*.zerofootprint.com.au

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPHTCCDgWgAwIBAgISESGi8lYALXlM7uDgiSsOuN2bMA0GCSqGSIb3DQEBCwUA
MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD
VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB
MjU2IC0gRzIwHhcNMTYwMTEwMTkyNDM0WhcNMTYxMjE0MTgxOTA2WjBtMQswCQYD
VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5j
aXNjbzEXMBUGA1UECgwORmlyZWJhc2UsIEluYy4xGDAWBgNVBAMMD2ZpcmViYXNl
YXBwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMj+legaQmRs
IeU7yKn8H2w9o0iCGAmDscWNTON8g29uOc/WcOAIBpQkMxwvvk+Iam0LApTrd3Xh
4ubHfGujwt7wHge4aJvAgTxSbpT9n9QnvXyy06JCDRZui1ZORgAtGXIEvOYfabM9
QVYcYZFPjXhYmFooS+Tr64pHkRX+93kcTP7H0d9MAzRbeO+urI/zCuVrleRaGKFx
BqhVEy/FjEYVOrj5jZucSCUFl1UH8G5YBTDqs7Z6mlvbpmcjFbJZn40a8I0mo0gz
I+/PBtvoxv0vXP9qGvSN9HTMjUC5G+X0BNwqotQ/jw4ZgwhqUGLkYBqO407Af2pn
17MqWAO9cMMCAwEAAaOCC7wwggu4MA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBA
MD4GBmeBDAECAjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWdu
LmNvbS9yZXBvc2l0b3J5LzCCCgEGA1UdEQSCCfgwggn0gg9maXJlYmFzZWFwcC5j
b22CESouZmlyZWJhc2VhcHAuY29tghFhdWRpdGlvbm1hZ2ljLmNvbYITKi5hdWRp
dGlvbm1hZ2ljLmNvbYIMYXV0by1yZWcuY29tgg4qLmF1dG8tcmVnLmNvbYIPYmFy
YmVyc2xvb2suY29tghEqLmJhcmJlcnNsb29rLmNvbYIMYmF0b3N1cmwub29vgg4q
LmJhdG9zdXJsLm9vb4IUYnJpdGlzaGdhc2xhYnMuY28udWuCFiouYnJpdGlzaGdh
c2xhYnMuY28udWuCDmJ1cm5pbmdzZWEuY29tghAqLmJ1cm5pbmdzZWEuY29tggpj
aGVycmllLmlvggwqLmNoZXJyaWUuaW+CFWNsb3VkY2FsbGluc3lzdGVtLmNvbYIX
Ki5jbG91ZGNhbGxpbnN5c3RlbS5jb22CFGNvbnRlbnRnYXJkZW5pbmcuY29tghYq
LmNvbnRlbnRnYXJkZW5pbmcuY29tggtjcmF6eS50b2RheYINKi5jcmF6eS50b2Rh
eYIPZGF2aWRpc2ZpbG0uY29tghEqLmRhdmlkaXNmaWxtLmNvbYITZGVhcnRyaXBh
ZHZpc29yLmNvbYIVKi5kZWFydHJpcGFkdmlzb3IuY29tghBkZWNhcm9uYXMuY29t
LmJyghIqLmRlY2Fyb25hcy5jb20uYnKCDGV4dGluZGVyLmNvbYIOKi5leHRpbmRl
ci5jb22CCGZsYXZyLmJlggoqLmZsYXZyLmJlggpmbHV0dGVyLmlvggwqLmZsdXR0
ZXIuaW+CCmdldDI0OC5jb22CDCouZ2V0MjQ4LmNvbYIPZ29sYXVuY2hwYWQub3Jn
ghEqLmdvbGF1bmNocGFkLm9yZ4IKZ290ZG9uZS5tZYIMKi5nb3Rkb25lLm1lggtn
cGVyc2lhLmNvbYINKi5ncGVyc2lhLmNvbYILaGVhbHRoeXUuaW+CDSouaGVhbHRo
eXUuaW+CIWhpbGxhcnljbGludG9uYmV0dGVycHJlc2lkZW50LmNvbYIjKi5oaWxs
YXJ5Y2xpbnRvbmJldHRlcnByZXNpZGVudC5jb22CD2hvbGRlbXN0ZXBzLmNvbYIR
Ki5ob2xkZW1zdGVwcy5jb22CCWh1ZmZsZS5pb4ILKi5odWZmbGUuaW+CBmlmaS5p
b4IIKi5pZmkuaW+CDGltaW50ZWNoLm9yZ4IOKi5pbWludGVjaC5vcmeCH2luZXZp
dGFibGVyaXNlb2Z0aGVtYWNoaW5lcy5jb22CISouaW5ldml0YWJsZXJpc2VvZnRo
ZW1hY2hpbmVzLmNvbYIMaW5zaWRlci5saWZlgg4qLmluc2lkZXIubGlmZYIJamZp
bGlwLmNhggsqLmpmaWxpcC5jYYIPam9pbmJlYWRvZXIuY29tghEqLmpvaW5iZWFk
b2VyLmNvbYINanVzdG1vdGlvbi5jb4IPKi5qdXN0bW90aW9uLmNvghdrZW4tam9o
bnN0b25tdXNpYy5jby51a4IZKi5rZW4tam9obnN0b25tdXNpYy5jby51a4IIbC1h
Yy5jb22CCioubC1hYy5jb22CFGxhZHloZWFydHRyYXZlbC5pbmZvghYqLmxhZHlo
ZWFydHRyYXZlbC5pbmZvghFsZWFybi1yZWFjdGpzLmNvbYITKi5sZWFybi1yZWFj
dGpzLmNvbYIJbGlzdGVuLm5vggsqLmxpc3Rlbi5ub4IMbG9wc2EuY29tLmFygg4q
LmxvcHNhLmNvbS5hcoINbHVja3lsb3Nlci5jb4IPKi5sdWNreWxvc2VyLmNvghJs
dW5jaHRpbWV2b3Rlci5jb22CFCoubHVuY2h0aW1ldm90ZXIuY29tgg5taWNoYWVs
Y2VyYS51c4IQKi5taWNoYWVsY2VyYS51c4IUbmFzdGFzc2lhZnJlZW1hbi5jb22C
FioubmFzdGFzc2lhZnJlZW1hbi5jb22CC25nLWNvbmYub3Jngg0qLm5nLWNvbmYu
b3JnggxuaWMtd2VzdC5jb22CDioubmljLXdlc3QuY29tggtuaW1iby14LmNvbYIN
Ki5uaW1iby14LmNvbYIKb215Zmx5LmNvbYIMKi5vbXlmbHkuY29tgglveWxvby5j
b22CCyoub3lsb28uY29tgg5wYXBlcnNwaXJlLmNvbYIQKi5wYXBlcnNwaXJlLmNv
bYIJcGF5Y2FyLmZyggsqLnBheWNhci5mcoIQcGxheWZ1bGRhbmNlLmNvbYISKi5w
bGF5ZnVsZGFuY2UuY29tgg5wb2x5b25maXJlLmNvbYIQKi5wb2x5b25maXJlLmNv
bYILcHJvbXB0ZXIuaW+CDSoucHJvbXB0ZXIuaW+CDXF1aWx0ZGF0YS5jb22CDyou
cXVpbHRkYXRhLmNvbYIJcmVkYW1zLnNlggsqLnJlZGFtcy5zZYIOcmVnYXR0YW9u
ZS5jb22CECoucmVnYXR0YW9uZS5jb22CEHJvb3RzY3JlYXRpb24ubmyCEioucm9v
dHNjcmVhdGlvbi5ubIIScm91dGluZXN1Y2Nlc3MubmV0ghQqLnJvdXRpbmVzdWNj
ZXNzLm5ldIINc2FwaWVuLWNpLmNvbYIPKi5zYXBpZW4tY2kuY29tggpzYXlhYmxl
LmNvggwqLnNheWFibGUuY2+CD3Nob3J0b3JhbmdlLmNvbYIRKi5zaG9ydG9yYW5n
ZS5jb22CDHNpZ251cGZvci5pdIIOKi5zaWdudXBmb3IuaXSCCnNtYXNoZXIuaW+C
DCouc21hc2hlci5pb4ILc3F3aXJseS5jb22CDSouc3F3aXJseS5jb22CDnN0YXRp
Y2FwcHMub3JnghAqLnN0YXRpY2FwcHMub3Jngh5zdHVwaWRzZXZlcmluc2h1dHlv
dXJtb3V0aC5jb22CICouc3R1cGlkc2V2ZXJpbnNodXR5b3VybW91dGguY29tghB0
ZWFtd29ya21haWwuY29tghIqLnRlYW13b3JrbWFpbC5jb22CCnRlZXZveC5jb22C
DCoudGVldm94LmNvbYIKdW5seXN0LmNvbYIMKi51bmx5c3QuY29tggp1cGNsYXou
Y29tggwqLnVwY2xhei5jb22CE3dhcnJpb3IuYWNjb3VudGFudHOCFSoud2Fycmlv
ci5hY2NvdW50YW50c4IUd2hpdGVib2FyZG1vZGVscy5jb22CFioud2hpdGVib2Fy
ZG1vZGVscy5jb22CFHdvcmxkd2lkZWVuZ2xpc2guY29tghYqLndvcmxkd2lkZWVu
Z2xpc2guY29tggx5ZW9uc2V1cC5jb22CDioueWVvbnNldXAuY29tghR6ZXJvZm9v
dHByaW50LmNvbS5hdYIWKi56ZXJvZm9vdHByaW50LmNvbS5hdTAJBgNVHRMEAjAA
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHR8EQjBAMD6gPKA6
hjhodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFs
c2hhMmcyLmNybDCBoAYIKwYBBQUHAQEEgZMwgZAwTQYIKwYBBQUHMAKGQWh0dHA6
Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFs
c2hhMmcycjEuY3J0MD8GCCsGAQUFBzABhjNodHRwOi8vb2NzcDIuZ2xvYmFsc2ln
bi5jb20vZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIwHQYDVR0OBBYEFHJFXSmfFuJV
ZO1EziqfMyEBd/KpMB8GA1UdIwQYMBaAFJbeYfG9HBYpUxzAzH07gwBA5hp8MA0G
CSqGSIb3DQEBCwUAA4IBAQBwQeqgbIc/SM6Ib/9OvqpD4khCpYl7mT59NkkHjeil
uXdIranR4ep1+c5SLZTf9Jko7r5yd7bg5GPz4QQnpjoMwyM09e9F5ZD/BxuBXjtW
kNdLn9SA8O4ublJKBsajzoPzkXOZ/nLy4nGjsh9Wv00GZN54+6vmHpy7gAvjNtL7
swU9X32e9g76segJgeC2lqSF3E9m5WmdX8DsSsbQoTMABf/F0V3oBCQR+T/lfd9p
FMWLSSwRLyABuZUAeGfwk9X5BMyXbKW3qCJ5pJathpJHsD5QKvksie9ep8uPpDwl
HRlcjTJiLwzsNLy1WVB4240C/T1InxGJIE9j58I26fsl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP6V6BpCZGwh5TvIqfwf
bD2jSIIYCYOxxY1M43yDb245z9Zw4AgGlCQzHC++T4hqbQsClOt3deHi5sd8a6PC
3vAeB7hom8CBPFJulP2f1Ce9fLLTokINFm6LVk5GAC0ZcgS85h9psz1BVhxhkU+N
eFiYWihL5OvrikeRFf73eRxM/sfR30wDNFt4766sj/MK5WuV5FoYoXEGqFUTL8WM
RhU6uPmNm5xIJQWXVQfwblgFMOqztnqaW9umZyMVslmfjRrwjSajSDMj788G2+jG
/S9c/2oa9I30dMyNQLkb5fQE3Cqi1D+PDhmDCGpQYuRgGo7jTsB/amfXsypYA71w
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492354772163773383469410346959780271676827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-10 19:24:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-14 18:19:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25373201818156773140648522646455427198304787641116057162129028602691677389183252969437372091064681688442330890165354411288087655015822466510430545221050527893032651301331099638804380629408804627459173725381498595912164385693645101873187603911855230168886982978769257966718989154788876442090517384387692396247271416743007220967037802988777868517042642614383815771390768582845444184271742842452618531341771846402766947998675378588847315727807175406602484100450755585914012047295854074934635864425942806636426307918915344182767703132083662807727585154650594339861331606793412452236006610335726079103099279753645467201731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auditionmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-reg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto-reg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberslook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barberslook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batosurl.ooo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batosurl.ooo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishgaslabs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britishgaslabs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burningsea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burningsea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherrie.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cherrie.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudcallinsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudcallinsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contentgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazy.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazy.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidisfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davidisfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deartripadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deartripadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decaronas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decaronas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavr.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flavr.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flutter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get248.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get248.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golaunchpad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golaunchpad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotdone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotdone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpersia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpersia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyu.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyu.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillaryclintonbetterpresident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillaryclintonbetterpresident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdemsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holdemsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huffle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imintech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imintech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inevitableriseofthemachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inevitableriseofthemachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfilip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jfilip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinbeadoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joinbeadoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justmotion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justmotion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ken-johnstonmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ken-johnstonmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-ac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l-ac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyhearttravel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladyhearttravel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn-reactjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learn-reactjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopsa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lopsa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckyloser.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckyloser.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchtimevoter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunchtimevoter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelcera.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelcera.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastassiafreeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nastassiafreeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ng-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic-west.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nic-west.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbo-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nimbo-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omyfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omyfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paperspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playfuldance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playfuldance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyonfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polyonfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prompter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prompter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiltdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quiltdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redams.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redams.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regattaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regattaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootscreation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rootscreation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routinesuccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.routinesuccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapien-ci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapien-ci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sayable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signupfor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signupfor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smasher.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smasher.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqwirly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqwirly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staticapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stupidseverinshutyourmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stupidseverinshutyourmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamworkmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamworkmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teevox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teevox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upclaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upclaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrior.accountants'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warrior.accountants'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiteboardmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whiteboardmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwideenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldwideenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeonseup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeonseup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerofootprint.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zerofootprint.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72455d299f16e25564ed44ce2a9f33210177f2a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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