ssl7024.cloudflare.com

- CloudFlare, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:02:1e:7a:22:55:6f:bd:88:8c:8e:f7:0b:92:d7:5b:2e was issued on by GlobalSign nv-sa.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:02:1e:7a:22:55:6f:bd:88:8c:8e:f7:0b:92:d7:5b:2e
Serial Number (int): 1492140995650386658646108038632367722027822
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ee:6b:28:28:aa:15:7e:2e:66:33:da:15:d3:a9:a9:10:fa:55:bf:00
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 94:d1:ef:7b:09:1e:5d:27:fd:48:e9:70:4c:c3:cc:93:cd:41:6a:49
Fingerprint (sha256): 1f:24:23:44:fa:6e:8e:35:82:a5:1e:7e:20:48:98:91:0a:99:86:f4:02:ea:b0:f2:e8:2c:28:83:76:99:78:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate ssl7024.cloudflare.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl7024.cloudflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl7024.cloudflare.com
collinlove.com
*.collinlove.com
*.microstorms.com
casemagic.net
prezydent.pl
*.ptcleaning.com.au
*.ascently.com
*.prezydent.pl
*.casemagic.net
microstorms.com
*.pokerproshop.com
ascently.com
ptcleaning.com.au
*.hosted.ie
hosted.ie
rome2rio.com
*.rome2rio.com
pokerproshop.com

Other certificates including the domain name cloudflare.com

(limited to 100 certificates)
ssl6628.cloudflare.com
ssl2831.cloudflare.com
ssl4246.cloudflare.com
ssl84317.cloudflare.com
ssl2262.cloudflare.com
ssl2812.cloudflare.com
ssl7337.cloudflare.com
ssl7575.cloudflare.com
ssl6377.cloudflare.com
ssl6480.cloudflare.com
ssl2778.cloudflare.com
ssl7159.cloudflare.com
ssl6504.cloudflare.com
ssl2076.cloudflare.com
ssl93554.cloudflare.com
ssl4486.cloudflare.com
ssl2515.cloudflare.com
ssl7543.cloudflare.com
ssl4852.cloudflare.com
ssl7390.cloudflare.com
ssl4333.cloudflare.com
ssl4641.cloudflare.com
ssl7477.cloudflare.com
ssl5571.cloudflare.com
ssl2835.cloudflare.com
ssl2562.cloudflare.com
ssl83992.cloudflare.com
ssl2717.cloudflare.com
ssl2906.cloudflare.com
ssl6704.cloudflare.com
ssl2335.cloudflare.com
ssl4487.cloudflare.com
ssl6813.cloudflare.com
ssl6466.cloudflare.com
ssl6823.cloudflare.com
ssl6292.cloudflare.com
ssl7133.cloudflare.com
ssl3035.cloudflare.com
ssl2736.cloudflare.com
ssl84304.cloudflare.com
ssl2339.cloudflare.com
ssl2571.cloudflare.com
ssl3107.cloudflare.com
ssl2992.cloudflare.com
ssl2652.cloudflare.com
ssl5735.cloudflare.com
ssl6558.cloudflare.com
ssl3033.cloudflare.com
ssl84327.cloudflare.com
ssl3097.cloudflare.com
ssl4011.cloudflare.com
ssl7241.cloudflare.com
ssl86304.cloudflare.com
ssl6657.cloudflare.com
ssl7257.cloudflare.com
ssl6846.cloudflare.com
ssl83886.cloudflare.com
ssl7072.cloudflare.com
ssl6738.cloudflare.com
ssl6466.cloudflare.com
ssl2446.cloudflare.com
ssl2393.cloudflare.com
ssl2387.cloudflare.com
ssl2312.cloudflare.com
ssl4811.cloudflare.com
ssl7348.cloudflare.com
ssl6272.cloudflare.com
ssl93550.cloudflare.com
ssl2071.cloudflare.com
ssl6996.cloudflare.com
ssl84313.cloudflare.com
ssl2920.cloudflare.com
ssl2192.cloudflare.com
ssl82116.cloudflare.com
ssl2556.cloudflare.com
ssl7322.cloudflare.com
ssl6552.cloudflare.com
ssl6598.cloudflare.com
ssl7542.cloudflare.com
ssl2523.cloudflare.com
ssl6953.cloudflare.com
ssl6950.cloudflare.com
ssl85870.cloudflare.com
ssl2531.cloudflare.com
ssl2764.cloudflare.com
ssl4118.cloudflare.com
ssl2113.cloudflare.com
ssl82161.cloudflare.com
ssl2722.cloudflare.com
ssl2084.cloudflare.com
ssl3038.cloudflare.com
ssl4140.cloudflare.com
ssl83885.cloudflare.com
ssl7570.cloudflare.com
ssl6447.cloudflare.com
ssl2734.cloudflare.com
ssl3011.cloudflare.com
ssl8548.cloudflare.com
ssl2113.cloudflare.com
ssl2419.cloudflare.com

Certificate

The complete raw certificate details for ssl7024.cloudflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV88XsspiaUeQ43c4g3I
NGfuK7pe+ue/eP4H6sIDLbnXRTyIfJpJugYB0aUAwCk8W6zjqHac7mowGu0W76Yz
B2R6V/amysVuR4y4fFRsXUS1g1Dlav19IGsLKdIEU4s71cW9E3Is0+njNkrCRvrh
HwCDJ/MjBqU8dJS/EV4149n4VwTpmNHL40xQebA3VnY0ZxmBmPpnu4h0OkbzdLsn
jouoeO0lmRGU/s7VnULonk5F4W/izypGMepZIMqWwQR014Iz2NunI4xxnuMdaQZl
0Iu0l9Ev/UkvUSHfvFoJBMx5AEHiDKekH58PYeya1veQkGKM0JG1XRcvDElbL/wq
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492140995650386658646108038632367722027822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-05 12:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-07 21:52:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl7024.cloudflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22391142512859870709346591091754089046290622498743436754896967538148130876796019012254813962572973231598586612169309324151847050840563528800905644966404153488198172451286759719711474090414006283022629614059855350633415042415129858471654215920764045855149233806558271340154171558843869909727364739459333954276880951944843703440068369081118040871008921320974998467835257965800730047003199761068862897628635457098441068756215972445896877163129767612252048572469383802194624214650119304221603054626012902091512351817126292026014275612668102404010987452452528316286301200889968786636239364127179177620079724457710675831347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl7024.cloudflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collinlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collinlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microstorms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casemagic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prezydent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptcleaning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascently.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prezydent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casemagic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microstorms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokerproshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascently.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptcleaning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosted.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rome2rio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rome2rio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerproshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee6b2828aa157e2e6633da15d3a9a910fa55bf00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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