ticketmaster4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 4a:5f:e1:1b:07:a8:a6:14:4f:47:7a:44 was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:5f:e1:1b:07:a8:a6:14:4f:47:7a:44
Serial Number (int): 23017801710715534078074387012
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 2e:d0:36:89:17:48:98:bd:28:73:0e:c7:d0:61:c0:86:32:e9:44:3a
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 0a:ab:75:68:73:82:82:71:56:85:8f:9b:0f:01:ce:2d:18:77:03:87
Fingerprint (sha256): 1d:3e:0e:24:86:02:10:b4:1e:75:28:b9:bc:73:c5:eb:92:ca:89:66:e2:d2:50:ad:19:79:4e:92:4f:4a:2e:b7

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster4.map.fastly.net

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster4.map.fastly.net
*.admission.com
*.biletix.com
*.getmein.com
*.livenation.ae
*.livenation.co.uk
*.livenation.cz
*.livenation.de
*.livenation.dk
*.livenation.es
*.livenation.fi
*.livenation.fr
*.livenation.hu
*.livenation.it
*.livenation.kr
*.livenation.nl
*.livenation.no
*.livenation.pl
*.livenation.se
*.lne.nonprod.public.tmaws.eu
*.ticketmaster.at
*.ticketmaster.be
*.ticketmaster.ca
*.ticketmaster.ch
*.ticketmaster.co.nz
*.ticketmaster.com.au
*.ticketmaster.cz
*.ticketmaster.de
*.ticketmaster.dk
*.ticketmaster.es
*.ticketmaster.fi
*.ticketmaster.fr
*.ticketmaster.it
*.ticketmaster.nl
*.ticketmaster.no
*.ticketmaster.pl
*.ticketmaster.se
*.ticketweb.co.uk
*.tmol.co
admin.preprod-verifiedfan.ticketmaster.com
admin.verifiedfan.ticketmaster.com
am-prod-client-files.ppub-tmaws.io
am-static-01.ppub-tmaws.io
am-static-01.ticketmaster.com
am-static-02.ppub-tmaws.io
am-static-03.ppub-tmaws.io
am-static-04.ppub-tmaws.io
am-stg-client-files.ppub-tmaws.io
am-stg-common-content.ppub-tmaws.io
buy.taylorswifttix.com
checkout.ticketmaster.com
common-widgets.ppub-tmaws.io
embed-au-alpha.ticketmaster.net
embed-au-int.ticketmaster.net
embed-au.ticketmaster.com
embed.ticketmaster.com.au
harrypotter.ticketmaster.com.au
help.ticketmaster.com.au
help.ticketmaster.de
help.ticketmaster.dk
help.ticketmaster.ie
help.ticketweb.co.uk
hilfe.ticketmaster.at
identity.eventinventory.com
identity.ticketmaster.co.nz
identity.ticketmaster.co.uk
identity.ticketmaster.com.au
identity.ticketmaster.ie
int-checkout.ticketmaster.net
m.ticketmaster.co.nz
m.ticketmaster.com.au
m.ticketmaster.com.mx
micro-au.ticketmaster.net
mw.ticketmaster.com
preprod.checkout.ticketmaster.com
preprod1-am.ticketmaster.com
schles.ticketmaster.net
services-nogateway.ticketmaster.net
stage.checkout.ticketmaster.com
stg-common-widgets.ppub-tmaws.io
stg1-am.ticketmaster.com
ticketmaster.ca
ticketmaster.co.uk
ticketmaster.ie
tmol.co
tst.ticketmaster.com
verifiedfan.livenation.com
verifiedfan.ticketmaster.ca
verifiedfan.ticketmaster.co.nz
verifiedfan.ticketmaster.co.uk
verifiedfan.ticketmaster.com.au
verifiedfan.ticketmaster.ie
www.verifiedfan.ticketmaster.com
www1-int.ticketmaster.net

Other certificates including the domain name ticketmaster4.map.fastly.net

(limited to 100 certificates)
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINuTCCDKGgAwIBAgIMSl/hGweophRPR3pEMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwNjI3MTYw
OTE2WhcNMTgxMDExMTIzNzQ0WjB4MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5
LCBJbmMuMSUwIwYDVQQDDBx0aWNrZXRtYXN0ZXI0Lm1hcC5mYXN0bHkubmV0MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQlUcXJtI6uxaOXpd0TOb55s
vOCx7E0Ca8szE8Ebpo6Uw2alORiK/o8Yy1GYIuo1kabEGZAWGXRY2oQFZEqHKfD+
QES2vFHpDd+B7seZAHoY4pdomWx+lP3gXDg/IUhP5MeLku2uOA1zT0l7Kefm4CQu
ouB+QbCrmOssc+7BbOseYsryMFUlXO4YHR/v/zNMxY2pEMMBtDNQzSxhZk60zFEY
HyRvQfdh2av+yUBL56+evZHgzt093uQMSZDuHdJyndmMqotSt0hsCYwhGJg2sPrM
hzoSGHdsbYQF0cXFA1amAYAy+yrlkUYtiGPgBA+GtPaPGfp8aASWxcuVO8PlcwID
AQABo4IKYjCCCl4wDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYI
KwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Ns
b3Vkc3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2Jh
bHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEU
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIII5gYDVR0RBIII3TCCCNmCHHRp
Y2tldG1hc3RlcjQubWFwLmZhc3RseS5uZXSCDyouYWRtaXNzaW9uLmNvbYINKi5i
aWxldGl4LmNvbYINKi5nZXRtZWluLmNvbYIPKi5saXZlbmF0aW9uLmFlghIqLmxp
dmVuYXRpb24uY28udWuCDyoubGl2ZW5hdGlvbi5jeoIPKi5saXZlbmF0aW9uLmRl
gg8qLmxpdmVuYXRpb24uZGuCDyoubGl2ZW5hdGlvbi5lc4IPKi5saXZlbmF0aW9u
LmZpgg8qLmxpdmVuYXRpb24uZnKCDyoubGl2ZW5hdGlvbi5odYIPKi5saXZlbmF0
aW9uLml0gg8qLmxpdmVuYXRpb24ua3KCDyoubGl2ZW5hdGlvbi5ubIIPKi5saXZl
bmF0aW9uLm5vgg8qLmxpdmVuYXRpb24ucGyCDyoubGl2ZW5hdGlvbi5zZYIdKi5s
bmUubm9ucHJvZC5wdWJsaWMudG1hd3MuZXWCESoudGlja2V0bWFzdGVyLmF0ghEq
LnRpY2tldG1hc3Rlci5iZYIRKi50aWNrZXRtYXN0ZXIuY2GCESoudGlja2V0bWFz
dGVyLmNoghQqLnRpY2tldG1hc3Rlci5jby5ueoIVKi50aWNrZXRtYXN0ZXIuY29t
LmF1ghEqLnRpY2tldG1hc3Rlci5jeoIRKi50aWNrZXRtYXN0ZXIuZGWCESoudGlj
a2V0bWFzdGVyLmRrghEqLnRpY2tldG1hc3Rlci5lc4IRKi50aWNrZXRtYXN0ZXIu
ZmmCESoudGlja2V0bWFzdGVyLmZyghEqLnRpY2tldG1hc3Rlci5pdIIRKi50aWNr
ZXRtYXN0ZXIubmyCESoudGlja2V0bWFzdGVyLm5vghEqLnRpY2tldG1hc3Rlci5w
bIIRKi50aWNrZXRtYXN0ZXIuc2WCESoudGlja2V0d2ViLmNvLnVrggkqLnRtb2wu
Y2+CKmFkbWluLnByZXByb2QtdmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmNvbYIi
YWRtaW4udmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmNvbYIiYW0tcHJvZC1jbGll
bnQtZmlsZXMucHB1Yi10bWF3cy5pb4IaYW0tc3RhdGljLTAxLnBwdWItdG1hd3Mu
aW+CHWFtLXN0YXRpYy0wMS50aWNrZXRtYXN0ZXIuY29tghphbS1zdGF0aWMtMDIu
cHB1Yi10bWF3cy5pb4IaYW0tc3RhdGljLTAzLnBwdWItdG1hd3MuaW+CGmFtLXN0
YXRpYy0wNC5wcHViLXRtYXdzLmlvgiFhbS1zdGctY2xpZW50LWZpbGVzLnBwdWIt
dG1hd3MuaW+CI2FtLXN0Zy1jb21tb24tY29udGVudC5wcHViLXRtYXdzLmlvghZi
dXkudGF5bG9yc3dpZnR0aXguY29tghljaGVja291dC50aWNrZXRtYXN0ZXIuY29t
ghxjb21tb24td2lkZ2V0cy5wcHViLXRtYXdzLmlvgh9lbWJlZC1hdS1hbHBoYS50
aWNrZXRtYXN0ZXIubmV0gh1lbWJlZC1hdS1pbnQudGlja2V0bWFzdGVyLm5ldIIZ
ZW1iZWQtYXUudGlja2V0bWFzdGVyLmNvbYIZZW1iZWQudGlja2V0bWFzdGVyLmNv
bS5hdYIfaGFycnlwb3R0ZXIudGlja2V0bWFzdGVyLmNvbS5hdYIYaGVscC50aWNr
ZXRtYXN0ZXIuY29tLmF1ghRoZWxwLnRpY2tldG1hc3Rlci5kZYIUaGVscC50aWNr
ZXRtYXN0ZXIuZGuCFGhlbHAudGlja2V0bWFzdGVyLmllghRoZWxwLnRpY2tldHdl
Yi5jby51a4IVaGlsZmUudGlja2V0bWFzdGVyLmF0ghtpZGVudGl0eS5ldmVudGlu
dmVudG9yeS5jb22CG2lkZW50aXR5LnRpY2tldG1hc3Rlci5jby5ueoIbaWRlbnRp
dHkudGlja2V0bWFzdGVyLmNvLnVrghxpZGVudGl0eS50aWNrZXRtYXN0ZXIuY29t
LmF1ghhpZGVudGl0eS50aWNrZXRtYXN0ZXIuaWWCHWludC1jaGVja291dC50aWNr
ZXRtYXN0ZXIubmV0ghRtLnRpY2tldG1hc3Rlci5jby5ueoIVbS50aWNrZXRtYXN0
ZXIuY29tLmF1ghVtLnRpY2tldG1hc3Rlci5jb20ubXiCGW1pY3JvLWF1LnRpY2tl
dG1hc3Rlci5uZXSCE213LnRpY2tldG1hc3Rlci5jb22CIXByZXByb2QuY2hlY2tv
dXQudGlja2V0bWFzdGVyLmNvbYIccHJlcHJvZDEtYW0udGlja2V0bWFzdGVyLmNv
bYIXc2NobGVzLnRpY2tldG1hc3Rlci5uZXSCI3NlcnZpY2VzLW5vZ2F0ZXdheS50
aWNrZXRtYXN0ZXIubmV0gh9zdGFnZS5jaGVja291dC50aWNrZXRtYXN0ZXIuY29t
giBzdGctY29tbW9uLXdpZGdldHMucHB1Yi10bWF3cy5pb4IYc3RnMS1hbS50aWNr
ZXRtYXN0ZXIuY29tgg90aWNrZXRtYXN0ZXIuY2GCEnRpY2tldG1hc3Rlci5jby51
a4IPdGlja2V0bWFzdGVyLmllggd0bW9sLmNvghR0c3QudGlja2V0bWFzdGVyLmNv
bYIadmVyaWZpZWRmYW4ubGl2ZW5hdGlvbi5jb22CG3ZlcmlmaWVkZmFuLnRpY2tl
dG1hc3Rlci5jYYIedmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmNvLm56gh52ZXJp
ZmllZGZhbi50aWNrZXRtYXN0ZXIuY28udWuCH3ZlcmlmaWVkZmFuLnRpY2tldG1h
c3Rlci5jb20uYXWCG3ZlcmlmaWVkZmFuLnRpY2tldG1hc3Rlci5pZYIgd3d3LnZl
cmlmaWVkZmFuLnRpY2tldG1hc3Rlci5jb22CGXd3dzEtaW50LnRpY2tldG1hc3Rl
ci5uZXQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQu
0DaJF0iYvShzDsfQYcCGMulEOjAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3AlWd
DZRY5jATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePPq
ltW+TWaV9N0rfYFYZOa3X6wGAcAyL7hi+ArmA0sT/4z9Uat1pQe5O9MBjsuroEjY
lgmXq6BHSLVdznc1/LTincU/S59URSvLBQJjOvnNWiFYesDQWbbb0yGK/Max/PBg
otQgQe7mXd4gAZ3Lf5GK/jV/xU6Z34+d2FbN/F1Y5Q2uqZZv06NgeG+CPBW2oHP/
tixBih/mQeT35hU9PzUuEH1jJTK1WjEyEuDt2hPPwzxCBJ9F7FptaIj/d37Lev4w
+v67jT5ixtLbdTbtQSPUkJeGUFNa3cby1t29arX16kxYmS3QBdiMr3XCxUOjkHLj
vJ4SAt8Opyi3Qq9n0g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQlUcXJtI6uxaOXpd0TO
b55svOCx7E0Ca8szE8Ebpo6Uw2alORiK/o8Yy1GYIuo1kabEGZAWGXRY2oQFZEqH
KfD+QES2vFHpDd+B7seZAHoY4pdomWx+lP3gXDg/IUhP5MeLku2uOA1zT0l7Kefm
4CQuouB+QbCrmOssc+7BbOseYsryMFUlXO4YHR/v/zNMxY2pEMMBtDNQzSxhZk60
zFEYHyRvQfdh2av+yUBL56+evZHgzt093uQMSZDuHdJyndmMqotSt0hsCYwhGJg2
sPrMhzoSGHdsbYQF0cXFA1amAYAy+yrlkUYtiGPgBA+GtPaPGfp8aASWxcuVO8Pl
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23017801710715534078074387012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-27 16:09:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 12:37:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ticketmaster4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20328967823031665210606131206655474883307116349537176041156267219732201289714796198529272011401606482233838984404653483790718992468132548853906721675367578594123101777684987444337074423804719336620215581478564239812339164751564836577787224583501904355741501232794236250788956096427359422900557362222467262179925563775989910503106804736073771574166230231920577779785027553054362348313717232793662163741521071044847324692542536545049092878398158389556264919101759201434112464863957081661763596980570970889749188034772197143157888640112561971843687165340789653783606161385531908157745511921706355008909369190958869243251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biletix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lne.nonprod.public.tmaws.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketweb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preprod-verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-prod-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-01.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-01.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-02.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-03.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-04.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-common-content.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.taylorswifttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketmaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ticketweb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.ticketmaster.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.eventinventory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-checkout.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro-au.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mw.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schles.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-nogateway.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ed03689174898bd28730ec7d061c08632e9443a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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