fr.eldoradogold.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number e8:5f:38:25:c4:2d:18:a7 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=fr.eldoradogold.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e8:5f:38:25:c4:2d:18:a7
Serial Number (int): 16744163674443028647
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 9d:e8:ab:5c:98:20:8a:61:cd:3a:d4:a5:0d:2f:97:9d:05:55:f6:dd
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): b2:8f:68:e6:6c:3b:bc:3e:2e:9e:04:10:47:7a:d0:34:dd:70:78:38
Fingerprint (sha256): 20:7e:1b:98:f1:c8:96:e5:3f:dd:6a:69:50:9b:61:25:86:39:82:86:cf:64:36:b3:44:a5:3f:08:3b:8e:6f:a7

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-13795.crl

Check the revocation status for certificate fr.eldoradogold.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fr.eldoradogold.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr.eldoradogold.com
www.fr.eldoradogold.com

Other certificates including the domain name eldoradogold.com

(limited to 100 certificates)
servicedesk.weareavidity.com
*.eldoradogold.com
servicedesk.vretigas.it
*.gr.eldoradogold.com
fr.eldoradogold.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
webmail.efemcukuru.com
cn.eldoradogold.com
ictportal.linkfinancial.eu
gr.eldoradogold.com
helpdesk.bedes.org
*.eldoradogold.com
*.gr.eldoradogold.com
fr.eldoradogold.com
helpdesk.hambroperks.com
itservicedesk.eldoradogold.com
helpdesk.bedes.org
kmail.kisladag.com
mail.eldoradogold.com
mail.eldoradogold.com
eroom.eldoradogold.com
assist.pentest.partners
doc.eldoradogold.com
kmail.kisladag.com
*.eldoradogold.com
webmail.efemcukuru.com
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
strvpn.gr.eldoradogold.com
sslvpn.eldoradogold.com
servicedesk.weareavidity.com
*.gr.eldoradogold.com
sslvpn.eldoradogold.com
helpdesk.bedes.org
sslvpn.eldoradogold.com
kmail.kisladag.com
webmail.efemcukuru.com
helpdesk.coulisse.com
strvpn.gr.eldoradogold.com
mail.eldoradogold.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
mail.eldoradogold.com
assist.pentest.partners
mail.gr.eldoradogold.com
itservicedesk.eldoradogold.com
sslvpn.eldoradogold.com
strvpn.gr.eldoradogold.com
blog.eldoradogold.com
gr.eldoradogold.com
kmail.kisladag.com
*.eldoradogold.com
ictportal.linkfinancial.eu
fr.eldoradogold.com
mail.gr.eldoradogold.com
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
*.eldoradogold.com
mail.gr.eldoradogold.com
fr.eldoradogold.com
ictportal.linkfinancial.eu
assist.pentest.partners
athvpn.gr.eldoradogold.com
mail.gr.eldoradogold.com
kmail.kisladag.com
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
sslvpn.eldoradogold.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
eroom.eldoradogold.com
assist.pentest.partners
sdmsslvpn.eldoradogold.com
isovision.eldoradogold.com
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
mail.gr.eldoradogold.com
assist.pentest.partners
strvpn.gr.eldoradogold.com
helpdesk.wentworthclub.com
kmail.kisladag.com
sslvpn.eldoradogold.com
helpdesk.wentworthclub.com
athvpn.gr.eldoradogold.com
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
athvpn.gr.eldoradogold.com
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
mail.eldoradogold.com
mail.eldoradogold.com

Certificate

The complete raw certificate details for fr.eldoradogold.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIJAOhfOCXELRinMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMTIxODE4MjUwOVoX
DTI1MDExODE4MjUwOVowHjEcMBoGA1UEAxMTZnIuZWxkb3JhZG9nb2xkLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALn3AQTn9/0Qu7ItsRt6TaGW
6sIJz3pyCMk5iFa54xToqVWCGE1rtliLQN4nAfvTfx0vDH6gnZuIELapuhfPBZVO
4mjkcPJCvNcjLFz62uztoTrVQffaBicz70I088NkhmnL9D5biqSpdyJWHDfjvR/L
vggVV/Bn7QY6qFRMregAPZSfL1z/tvsip2gfqHyYBNnmWsS30U1niVZG38juLUyg
Y4lcYx8uHX19XBSbPUHV/p5kFEyQvqKurTW1x6FtuFfm/ByFsX3LzB4tdFh9QgJd
MYHq0RLPlXSGrB3TnJaCXUrDWtRj3CyBmwBR/J4xmYCaO6+D/GI92QMs7Q7yKS0C
AwEAAaOCAeEwggHdMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAqhihodHRw
Oi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTM3OTUuY3JsMF0GA1UdIARWMFQw
SAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRl
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEE
ajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYB
BQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9y
eS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wNwYD
VR0RBDAwLoITZnIuZWxkb3JhZG9nb2xkLmNvbYIXd3d3LmZyLmVsZG9yYWRvZ29s
ZC5jb20wHQYDVR0OBBYEFJ3oq1yYIIphzTrUpQ0vl50FVfbdMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX/CO0J4+OG5fk0p0oUizE5LcA
51TtQ8croHIqNHxvTW9+LGo1KFNZY7H+sJc8uvTSZY6yEdjYWZzrL+WstRp6iJmX
zBweoeAfmfliClFzkv/k8zF6fRXBGuMPW7HBMJBLi3cWlCK8mvMOMVyWoWujYTmL
EVz3L5p9a5d/zjUzmHDAx6nBF8t9NNPNf3aFsCAuJUew3o/6J4AJcpakEoyfbRyS
ayC5rxsPVNXqp4Lw0hDQe0OJPG9tgbz/og/FnXQJtsrgftv5hkAhOKwjB7SJ+wzh
eWk9B+2jLj49O68m2k/KNowb52UsYhPFKaQXPziCl6+NEI9/oCv83fBHw4ry
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufcBBOf3/RC7si2xG3pN
oZbqwgnPenIIyTmIVrnjFOipVYIYTWu2WItA3icB+9N/HS8MfqCdm4gQtqm6F88F
lU7iaORw8kK81yMsXPra7O2hOtVB99oGJzPvQjTzw2SGacv0PluKpKl3IlYcN+O9
H8u+CBVX8GftBjqoVEyt6AA9lJ8vXP+2+yKnaB+ofJgE2eZaxLfRTWeJVkbfyO4t
TKBjiVxjHy4dfX1cFJs9QdX+nmQUTJC+oq6tNbXHoW24V+b8HIWxfcvMHi10WH1C
Al0xgerREs+VdIasHdOcloJdSsNa1GPcLIGbAFH8njGZgJo7r4P8Yj3ZAyztDvIp
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16744163674443028647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 18:25:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 18:25:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr.eldoradogold.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23475888621437223130984672053221944652653726086778731775709243180574227962174337271166711394790673252650064627317822682667312825435265663117960368149986675361085741784495259424733079305663149455187747560684853261280596058104298836773530497194779108855107545692972677601423144350165934198477847596326290641621301310593241227262468743508531345050252907566900098218170570736393593284787724456631101906523441044331164361807666027504110692069740090421842198337658632527893115672494261155014512059288290181552255065196091038300755700069725395863195100045930025189554644493263118746384610106570624013103879179749361607387437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-13795.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.eldoradogold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.eldoradogold.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9de8ab5c98208a61cd3ad4a50d2f979d0555f6dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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