stage.lululemon.com

- Lululemon Athletica Canada Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:46:e1:67:1b:49:8c:95:bb:7f:61:79:69:57:ba:cb was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lululemon Athletica Canada Inc.

Organization: Lululemon Athletica Canada Inc.
Organization unit: IT Infrastructure
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:46:e1:67:1b:49:8c:95:bb:7f:61:79:69:57:ba:cb
Serial Number (int): 20306452427977747366017679013413632715
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:55:8c:b0:43:a9:a6:5f:ac:46:68:76:31:49:a2:e7:d5:87:21:02
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 07:3d:ac:78:72:b7:0f:89:44:fd:0c:65:0a:2a:fd:65:07:bd:15:0f
Fingerprint (sha256): 23:64:ca:a2:18:d3:61:3a:fe:f3:86:38:58:8e:be:48:9a:a5:63:d6:ee:79:e9:8c:50:0f:09:26:bf:a0:ac:b5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate stage.lululemon.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.lululemon.com
stage10.lululemon.com.au
stage.info.eu.lululemon.com
stage-mobileshopapi.lululemon.co.uk
stage.lululemon.com.hk
fr.stage-gsr.lululemon.com
fr-test-shop.lululemon.com
test-shop.lululemon.com.au
stagegsr.lululemon.ch
stage-partners.lululemon.com.au
stage-register.seawheeze.com
stagegsr.lululemon.co.uk
stage.ivivva.com
stage-mobileshopapi.lululemon.com.hk
stage-mobileshopapi.lululemon.com.au
test-shop.lululemon.com
stagefailover.ivivva.com
test-shop.lululemon.com.hk
stage.info.lululemon.ch
stagefailover-intl.lululemon.com
stage10.ivivva.com
test-shop.ivivva.com
stage.partners.lululemon.com.au
stage62-info.lululemon.cn
stage10.lululemon.co.nz
stage.lululemon.co.uk
test-shop.lululemon.co.uk
stage.info.ivivva.com
stage.lululemon.co.nz
stage-fr.info.lululemon.com
fr.stage.info.lululemon.com
stagefailover-partners.lululemon.com.au
stagegsr-partners.lululemon.com.au
stagegsr.eu.lululemon.com
stage.info.lululemon.com
stage.info.lululemon.co.uk
test-partners.lululemon.com.au
fr.stage.lululemon.com
stage62-info.eu.lululemon.com
stagegsr.lululemon.co.nz
stage-strategicsales.lululemon.com
test-shop.lululemon.ch
stage.info.lululemon.cn
stage62-info.lululemon.co.nz
stage.lululemon.cn
stage-preview-gsr.lululemon.com
stagegsr.partners.lululemon.com.au
stage.info.lululemon.co.nz
stage-preprod.lululemon.com
stage.seawheeze.com
stage-preview.lululemon.cn
stage62-info.lululemon.co.uk
stage.eu.lululemon.com
stagegsr.lululemon.com.au
stage-pnimages.lululemon.com
stage.lululemon.com.au
stage-globalstaticassets.lululemon.com
stage-mobileapi-gsr.lululemon.com
stagegsr.lululemon.com.hk
stage.info.lululemon.com.hk
test-shop.lululemon.co.nz
stage62-info.lululemon.com.au
stage-mobileshopapi.lululemon.co.nz
test-shop.eu.lululemon.com
stage.lululemon.ch
stage62-info.lululemon.com.hk
stage10.lululemon.com
stage-search-gsr.lululemon.com
stage-preview.lululemon.com
stage62-info.lululemon.ch
stage-mobileshopapi.lululemon.ch
stage-gsr.lululemon.com
stage.info.lululemon.com.au
register-dev.seawheeze.com
stage-mobileshopapi.eu.lululemon.com
stage62-info.lululemon.com

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for stage.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOljCCDX6gAwIBAgIQD0bhZxtJjJW7f2F5aVe6yzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA5MDQwMDAwMDBaFw0xOTA5MDcxMjAwMDBaMIGgMQswCQYDVQQGEwJDQTEZ
MBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTESMBAGA1UEBxMJVmFuY291dmVyMSgw
JgYDVQQKEx9MdWx1bGVtb24gQXRobGV0aWNhIENhbmFkYSBJbmMuMRowGAYDVQQL
ExFJVCBJbmZyYXN0cnVjdHVyZTEcMBoGA1UEAxMTc3RhZ2UubHVsdWxlbW9uLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALAXW5e6zHogFGN+6BEq
LzV1tR5QfzBZNP/Srzjqbnx353ugaCJkPz6cM2smXDLLnUkDPLkQMfGC1sJWLOjJ
o937nbzEXfTx6CHK8rdlC+6M6I7JC5WXMt9R77LXvmYxfSWMOAJ+Y6YqtVjZGW0e
VcUNZK+MrXrSHCcJVb5IHmUcL8X0Hzk6bQ2agfNeGjfhZ2pTEfT5UA2turB2dxPb
LojxKH0rIyZ4TNRMSLSIPP2oQFAl+by811O0Y1kVjj+eCxrcOWJYst2qaFQIyaKg
RDcXRJhRIU00lYoynbQXlsjrpV4URmT1IZ2fdIl5DZlPzqn8P/sO2Xhn7jkwo0MO
v38CAwEAAaOCCwswggsHMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzF
MB0GA1UdDgQWBBSqVYywQ6mmX6xGaHYxSaLn1YchAjCCCH0GA1UdEQSCCHQwgghw
ghNzdGFnZS5sdWx1bGVtb24uY29tghhzdGFnZTEwLmx1bHVsZW1vbi5jb20uYXWC
G3N0YWdlLmluZm8uZXUubHVsdWxlbW9uLmNvbYIjc3RhZ2UtbW9iaWxlc2hvcGFw
aS5sdWx1bGVtb24uY28udWuCFnN0YWdlLmx1bHVsZW1vbi5jb20uaGuCGmZyLnN0
YWdlLWdzci5sdWx1bGVtb24uY29tghpmci10ZXN0LXNob3AubHVsdWxlbW9uLmNv
bYIadGVzdC1zaG9wLmx1bHVsZW1vbi5jb20uYXWCFXN0YWdlZ3NyLmx1bHVsZW1v
bi5jaIIfc3RhZ2UtcGFydG5lcnMubHVsdWxlbW9uLmNvbS5hdYIcc3RhZ2UtcmVn
aXN0ZXIuc2Vhd2hlZXplLmNvbYIYc3RhZ2Vnc3IubHVsdWxlbW9uLmNvLnVrghBz
dGFnZS5pdml2dmEuY29tgiRzdGFnZS1tb2JpbGVzaG9wYXBpLmx1bHVsZW1vbi5j
b20uaGuCJHN0YWdlLW1vYmlsZXNob3BhcGkubHVsdWxlbW9uLmNvbS5hdYIXdGVz
dC1zaG9wLmx1bHVsZW1vbi5jb22CGHN0YWdlZmFpbG92ZXIuaXZpdnZhLmNvbYIa
dGVzdC1zaG9wLmx1bHVsZW1vbi5jb20uaGuCF3N0YWdlLmluZm8ubHVsdWxlbW9u
LmNogiBzdGFnZWZhaWxvdmVyLWludGwubHVsdWxlbW9uLmNvbYISc3RhZ2UxMC5p
dml2dmEuY29tghR0ZXN0LXNob3AuaXZpdnZhLmNvbYIfc3RhZ2UucGFydG5lcnMu
bHVsdWxlbW9uLmNvbS5hdYIZc3RhZ2U2Mi1pbmZvLmx1bHVsZW1vbi5jboIXc3Rh
Z2UxMC5sdWx1bGVtb24uY28ubnqCFXN0YWdlLmx1bHVsZW1vbi5jby51a4IZdGVz
dC1zaG9wLmx1bHVsZW1vbi5jby51a4IVc3RhZ2UuaW5mby5pdml2dmEuY29tghVz
dGFnZS5sdWx1bGVtb24uY28ubnqCG3N0YWdlLWZyLmluZm8ubHVsdWxlbW9uLmNv
bYIbZnIuc3RhZ2UuaW5mby5sdWx1bGVtb24uY29tgidzdGFnZWZhaWxvdmVyLXBh
cnRuZXJzLmx1bHVsZW1vbi5jb20uYXWCInN0YWdlZ3NyLXBhcnRuZXJzLmx1bHVs
ZW1vbi5jb20uYXWCGXN0YWdlZ3NyLmV1Lmx1bHVsZW1vbi5jb22CGHN0YWdlLmlu
Zm8ubHVsdWxlbW9uLmNvbYIac3RhZ2UuaW5mby5sdWx1bGVtb24uY28udWuCHnRl
c3QtcGFydG5lcnMubHVsdWxlbW9uLmNvbS5hdYIWZnIuc3RhZ2UubHVsdWxlbW9u
LmNvbYIdc3RhZ2U2Mi1pbmZvLmV1Lmx1bHVsZW1vbi5jb22CGHN0YWdlZ3NyLmx1
bHVsZW1vbi5jby5ueoIic3RhZ2Utc3RyYXRlZ2ljc2FsZXMubHVsdWxlbW9uLmNv
bYIWdGVzdC1zaG9wLmx1bHVsZW1vbi5jaIIXc3RhZ2UuaW5mby5sdWx1bGVtb24u
Y26CHHN0YWdlNjItaW5mby5sdWx1bGVtb24uY28ubnqCEnN0YWdlLmx1bHVsZW1v
bi5jboIfc3RhZ2UtcHJldmlldy1nc3IubHVsdWxlbW9uLmNvbYIic3RhZ2Vnc3Iu
cGFydG5lcnMubHVsdWxlbW9uLmNvbS5hdYIac3RhZ2UuaW5mby5sdWx1bGVtb24u
Y28ubnqCG3N0YWdlLXByZXByb2QubHVsdWxlbW9uLmNvbYITc3RhZ2Uuc2Vhd2hl
ZXplLmNvbYIac3RhZ2UtcHJldmlldy5sdWx1bGVtb24uY26CHHN0YWdlNjItaW5m
by5sdWx1bGVtb24uY28udWuCFnN0YWdlLmV1Lmx1bHVsZW1vbi5jb22CGXN0YWdl
Z3NyLmx1bHVsZW1vbi5jb20uYXWCHHN0YWdlLXBuaW1hZ2VzLmx1bHVsZW1vbi5j
b22CFnN0YWdlLmx1bHVsZW1vbi5jb20uYXWCJnN0YWdlLWdsb2JhbHN0YXRpY2Fz
c2V0cy5sdWx1bGVtb24uY29tgiFzdGFnZS1tb2JpbGVhcGktZ3NyLmx1bHVsZW1v
bi5jb22CGXN0YWdlZ3NyLmx1bHVsZW1vbi5jb20uaGuCG3N0YWdlLmluZm8ubHVs
dWxlbW9uLmNvbS5oa4IZdGVzdC1zaG9wLmx1bHVsZW1vbi5jby5ueoIdc3RhZ2U2
Mi1pbmZvLmx1bHVsZW1vbi5jb20uYXWCI3N0YWdlLW1vYmlsZXNob3BhcGkubHVs
dWxlbW9uLmNvLm56ghp0ZXN0LXNob3AuZXUubHVsdWxlbW9uLmNvbYISc3RhZ2Uu
bHVsdWxlbW9uLmNogh1zdGFnZTYyLWluZm8ubHVsdWxlbW9uLmNvbS5oa4IVc3Rh
Z2UxMC5sdWx1bGVtb24uY29tgh5zdGFnZS1zZWFyY2gtZ3NyLmx1bHVsZW1vbi5j
b22CG3N0YWdlLXByZXZpZXcubHVsdWxlbW9uLmNvbYIZc3RhZ2U2Mi1pbmZvLmx1
bHVsZW1vbi5jaIIgc3RhZ2UtbW9iaWxlc2hvcGFwaS5sdWx1bGVtb24uY2iCF3N0
YWdlLWdzci5sdWx1bGVtb24uY29tghtzdGFnZS5pbmZvLmx1bHVsZW1vbi5jb20u
YXWCGnJlZ2lzdGVyLWRldi5zZWF3aGVlemUuY29tgiRzdGFnZS1tb2JpbGVzaG9w
YXBpLmV1Lmx1bHVsZW1vbi5jb22CGnN0YWdlNjItaW5mby5sdWx1bGVtb24uY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
PgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZaah
38YAAAQDAEYwRAIgDaq9hhyOMPE/YoHmnhCXCA8u8s3Z+Qkt1uMXAoNcHaUCIGXl
DRYqr+0MGHNpXcvEUwv1IIAlxHnHChKnNSZBOa0GAHYAh3W/51l8+IxDmV+9827/
Vo1HVjb/SrVgwbTq/16ggw8AAAFlpqHfvQAABAMARzBFAiBfBMhCkf9Fa7RQ72Z5
DjoxAXuiPO//8lzNKthqWxGW6wIhAIqO8l7K3vcArzt+HPGsWpivscB6jPM9mhIL
gcxhoUiWMA0GCSqGSIb3DQEBCwUAA4IBAQBmWl/8XARQs4YbG8EFisEPAuN7JkIr
2qRoFaxU05qMIlzlL/hP6MT5/DAq8LRG7kJe8wvR4Qw4TOzPr5lYptZpITzwhB5g
Yma3pElYeS0SYm+kw2dGg4hFEWp57Ft+txbN4zM2oWvus0Ogfmvf5lIhBKCgJ5Yx
o9H4YM1M5C01f8ADkmnDVuEWvB07bJDdNC9CpuFNm7dXrzwx2te7klXpRFr5l3Bj
74rE3Yyct2Cw5BGD8ve05cr23Mlo4xBCDbEkbxbgGZHZ2gQudDwzqI6g1Tmu3nGR
MbHK3QMReV9wilV4+nKf5MdNq0P9yo2WSsIN0wBaO888n7HMHiffi9la
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBdbl7rMeiAUY37oESov
NXW1HlB/MFk0/9KvOOpufHfne6BoImQ/PpwzayZcMsudSQM8uRAx8YLWwlYs6Mmj
3fudvMRd9PHoIcryt2UL7ozojskLlZcy31Hvste+ZjF9JYw4An5jpiq1WNkZbR5V
xQ1kr4ytetIcJwlVvkgeZRwvxfQfOTptDZqB814aN+FnalMR9PlQDa26sHZ3E9su
iPEofSsjJnhM1ExItIg8/ahAUCX5vLzXU7RjWRWOP54LGtw5Yliy3apoVAjJoqBE
NxdEmFEhTTSVijKdtBeWyOulXhRGZPUhnZ90iXkNmU/Oqfw/+w7ZeGfuOTCjQw6/
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20306452427977747366017679013413632715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22229459826585020313905223763520760461049704604913076220197879661538449810171168619589217342620260662996895896190071786760797376573933451184983128626832566848089602152581756039135248910774625106872113589407467669289249897721528699845762693616127057161465891150618908697939187424295724585528806694215922983876142841652008111810968898112164117501968727274121362175178184326292018117187666927920253244732335573291752798773190302551712585890148305454093016367254880693252375778308774323410590498135257287846414942986637146713326772013153766296922015811333263392557627144308434756930817342237432323613888605188541530423167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa558cb043a9a65fac4668763149a2e7d5872102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-register.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-intl.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-fr.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-strategicsales.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preprod.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileapi-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-search-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register-dev.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165a6a1dfc6000004030046304402200daabd861c8e30f13f6281e69e1097080f2ef2cdd9f9092dd6e31702835c1da5022065e50d162aafed0c1873695dcbc4530bf5208025c479c70a12a735264139ad060076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165a6a1dfbd000004030047304502205f04c84291ff456bb450ef66790e3a31017ba23ceffff25ccd2ad86a5b1196eb0221008a8ef25ecadef700af3b7e1cf1ac5a98afb1c07a8cf33d9a120b81cc61a14896
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00665a5ffc5c0450b3861b1bc1058ac10f02e37b26422bdaa46815ac54d39a8c225ce52ff84fe8c4f9fc302af0b446ee425ef30bd1e10c384ceccfaf9958a6d669213cf0841e606266b7a44958792d12626fa4c36746838845116a79ec5b7eb716cde33336a16beeb343a07e6bdfe6522104a0a0279631a3d1f860cd4ce42d357fc0039269c356e116bc1d3b6c90dd342f42a6e14d9bb757af3c31dad7bb9255e9445af9977063ef8ac4dd8c9cb760b0e41183f2f7b4e5caf6dcc968e310420db1246f16e01991d9da042e743c33a88ea0d539aede719131b1cadd0311795f708a5578fa729fe4c74dab43fdca8d964ac20dd3005a3bcf3c9fb1cc1e27df8bd95a