sip.cdiscount.com

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:31:12:8a:5a:3c:bb:b2:04:2e:35:66:e2:c1:b6:6f:da was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sip.cdiscount.com,OU=Domain Control Validated,C=FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:31:12:8a:5a:3c:bb:b2:04:2e:35:66:e2:c1:b6:6f:da
Serial Number (int): 1492203407387573932732157461818825355194330
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 9c:58:f7:7a:65:8a:05:70:28:96:16:6d:50:43:00:eb:55:cb:2b:da
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): ce:12:f1:21:88:50:a8:6a:18:fc:04:32:05:9f:d9:5d:04:b7:ae:03
Fingerprint (sha256): 2d:64:57:56:c9:9a:13:ac:87:0d:40:6d:62:0b:d0:99:5c:7e:7e:36:23:22:f0:d9:d9:60:0d:5a:d1:10:a4:a4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate sip.cdiscount.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.cdiscount.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.cdiscount.com
lyncextwebservices.cdiscount.com
lyncextwebservices.ext.cdiscount.com
meet.cdiscount.com
meet.ext.cdiscount.com
lyncdiscover.cdiscount.com
lyncdiscover.ext.cdiscount.com
webconf.cdiscount.com

Other certificates including the domain name cdiscount.com

(limited to 100 certificates)
incapsula.com
1801766494.rsc.cdn77.org
sejour.cdiscount.com
voyages-sur-mesure.cdiscount.com
help.ticketmaster.ch
incapsula.com
smetrics.cdiscount.com
reparation.cdiscount.com
marketplace-cdiscount.com
incapsula.com
webmail.cdiscount.com
incapsula.com
billets.cdiscount.com
app.shippingbo.com
smetrics.cdiscount.com
marketplace-cdiscount.com
docs.transport.cdiscount.com
Webmail.cdiscount.com
incapsula.com
www.campings.com
incapsula.com
incapsula.com
webmail.cdiscount.com
lelab.cdiscount.com
gyvcwd.cdiscount.com
marketplace-cdiscount.com
marketplace-cdiscount.com
*.m.cdiscount.com
marketplace-cdiscount.com
smetrics.cdiscount.com
tr.news6.cdiscount.com
voyages-sur-mesure.cdiscount.com
nextit.cdiscount.com
shippypro.com
www.worldia.com
incapsula.com
docs.transport.cdiscount.com
ipe.ivitrack.com
Webmail.cdiscount.com
reparation.cdiscount.com
incapsula.com
*.cdiscount.com
nextit.cdiscount.com
marketplace-cdiscount.com
i1.cdiscount.com
assistance-energie.cdiscount.com
*.cdiscount.com
order.m.cdiscount.com
sip.cdiscount.com
paymentservices.cdiscount.com
admin-emea.cdiscount.com
selectionloisirs.cdiscount.com
paymentsts.cdiscount.com
www.worldia.com
payment.cdiscount.com
paymentsts.cdiscount.com
incapsula.com
campings.cdiscount.com
lelab.cdiscount.com
incapsula.com
ipe.ivitrack.com
abonnement-magazine.cdiscount.com
marketplace-registration.cdiscount.com
cookieblaster.cdiscount.com
innovation.cdiscount.com
help.ticketmaster.ch
app.shippingbo.com
locations.cdiscount.com
smetrics.cdiscount.com
dropshipping.cdiscount.com
smetrics.cdiscount.com
paymentservices.cdiscount.com
sejour.cdiscount.com
smetrics.cdiscount.com
app.shippingbo.com
incapsula.com
boostit.cdiscount.com
dropshipping.cdiscount.com
pic-billets.cdiscount.com
hotel.cdiscount.com
help.biletix.com
incapsula.com
help.ticketmaster.co.nz
tr.notification.cdiscount.com
smetrics.cdiscount.com
payment.cdiscount.com
tr.news.cdiscount.com
paymentsts.cdiscount.com
sip.cdiscount.com
cookieblaster.cdiscount.com
techblog.cdiscount.com
vol.cdiscount.com
tls.automattic.com
assistance.cdiscount.com
sejour.cdiscount.com
marketplace-cdiscount.com
tickets.cdiscount.com
voyages-sur-mesure.cdiscount.com
cti.cdiscount.com
incapsula.com

Certificate

The complete raw certificate details for sip.cdiscount.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISESExEopaPLuyBC41ZuLBtm/aMA0GCSqGSIb3DQEBBQUA
MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD
VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTMw
MzEyMTY1NDU0WhcNMTQwMzEzMTY1NDU0WjBMMQswCQYDVQQGEwJGUjEhMB8GA1UE
CxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRowGAYDVQQDDBFzaXAuY2Rpc2Nv
dW50LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/+D498JTh0
8oKSNK+2w99Rmb7CGoShcppq/1YO5JgeCmKrv7PBPg9DkpW2Nf6Dvoj1wqPwC31W
qVevhO1RAK8Mg7M4zFLSqDVCU2brvNYsgfrC4HqGl2bFCoMI8py5WUiuT7SOx0Z/
lJDJM0ErJxsLsiV6qZMtul7xbDqBC1bpGGDInC8sofNVkoEMoVgPIuV8+7CMDXxH
7xyArAbt5cmZUO+numbIjGwdep21tyYurYOzpisZexJzvfeuvwy5OlcwRDt1jFzk
lCgIDPmApE4qLy6BgFSp2pOTKe78mzuAvEI6WRI6YwEh+fyof7OzcSj/r+Ov7sC+
DsHck4zPZysCAwEAAaOCAoAwggJ8MA4GA1UdDwEB/wQEAwIFoDBMBgNVHSAERTBD
MEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzCB5QYDVR0RBIHdMIHaghFzaXAuY2Rpc2NvdW50
LmNvbYIgbHluY2V4dHdlYnNlcnZpY2VzLmNkaXNjb3VudC5jb22CJGx5bmNleHR3
ZWJzZXJ2aWNlcy5leHQuY2Rpc2NvdW50LmNvbYISbWVldC5jZGlzY291bnQuY29t
ghZtZWV0LmV4dC5jZGlzY291bnQuY29tghpseW5jZGlzY292ZXIuY2Rpc2NvdW50
LmNvbYIebHluY2Rpc2NvdmVyLmV4dC5jZGlzY291bnQuY29tghV3ZWJjb25mLmNk
aXNjb3VudC5jb20wCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNv
bS9ncy9nc2RvbWFpbnZhbGcyLmNybDCBiAYIKwYBBQUHAQEEfDB6MEEGCCsGAQUF
BzAChjVodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2RvbWFp
bnZhbGcyLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u
Y29tL2dzZG9tYWludmFsZzIwHQYDVR0OBBYEFJxY93pligVwKJYWbVBDAOtVyyva
MB8GA1UdIwQYMBaAFJat+rBbuYNkKnbCHIpp2kLc/v0oMA0GCSqGSIb3DQEBBQUA
A4IBAQAwTDxQemv2LbmqLz85yW+a1MHylCRLbWEVh9kFq2LrjXhVayXCnqhD9H6I
BcjbS3lAZ/rQmSJfR8WNuLu4nSsb1/xVwFs42kL+59lcg19ghrfq+pt2qm5KuKb+
MRAFYwm3g79k4rV9z4tPm8ZDvUyHnrFSdoYCFudknIkD4cMkgOXG7Y6MMpsoULgO
zFwR8XJIEz2xpIGKA1rAObe3nkhvvTUHtBD2XoymkQmskmbaXNoo1WMpgZVzGbwG
fW5nSyC6mApthtxXxlQAj290OmeujkRsb/8btAxtECbhIUB3/NBlRRwKt/uR68RI
tNmD4TENP1xROh8GUS0qlUs0Jj+J
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/4Pj3wlOHTygpI0r7bD
31GZvsIahKFymmr/Vg7kmB4KYqu/s8E+D0OSlbY1/oO+iPXCo/ALfVapV6+E7VEA
rwyDszjMUtKoNUJTZuu81iyB+sLgeoaXZsUKgwjynLlZSK5PtI7HRn+UkMkzQSsn
GwuyJXqpky26XvFsOoELVukYYMicLyyh81WSgQyhWA8i5Xz7sIwNfEfvHICsBu3l
yZlQ76e6ZsiMbB16nbW3Ji6tg7OmKxl7EnO9966/DLk6VzBEO3WMXOSUKAgM+YCk
TiovLoGAVKnak5Mp7vybO4C8QjpZEjpjASH5/Kh/s7NxKP+v46/uwL4OwdyTjM9n
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492203407387573932732157461818825355194330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-12 16:54:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-13 16:54:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.cdiscount.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22216985410560349349224814390495503016543565625831720034251636302364770558223606615712598950084189847229330669957626706919325467970137699926226418722597178522620144320206988003782622911696695779527826875124566214532288085555997703612069504882113511050372738837427811746961349184506669064505851163325241413732550622712581316406380494926997386570956089112172740771347052981146510328031053527324010763628854215699688708406828448446969943236428160947861190427652866461264328732364530726351607533532526505166194096067106982821953521944636829890324777976343807050057402216009371698444351281841517167480307470657658553329451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncextwebservices.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncextwebservices.ext.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ext.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ext.cdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.cdiscount.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c58f77a658a05702896166d504300eb55cb2bda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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