webdir01.lync.oncirque.net
Issued by GlobalSign Domain Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 11:21:e9:76:a7:10:9f:95:62:4d:8e:a1:3e:55:9c:f6:78:ba was issued on by GlobalSign nv-sa.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=webdir01.lync.oncirque.net,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 11:21:e9:76:a7:10:9f:95:62:4d:8e:a1:3e:55:9c:f6:78:baSerial Number (int): 1492448505150841797915732906057540644010170
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: 7a:5c:63:d2:60:3e:b4:74:54:0f:b7:ce:aa:0c:9e:78:6b:ce:c4:76
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f
Fingerprint (sha1): 07:69:c2:b3:96:93:e4:cf:3f:57:4d:e6:9b:34:5f:40:81:e1:d1:2a
Fingerprint (sha256): 3a:a6:5c:74:56:05:a2:6e:df:98:e7:1f:dc:e7:fd:9d:18:7b:68:1e:c5:0d:c6:f2:0c:75:e6:27:5a:31:a6:0a
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
Check the revocation status for certificate webdir01.lync.oncirque.net
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webdir01.lync.oncirque.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webdir01.lync.oncirque.net
lyncdiscover01.lync.oncirque.net
meet.lync.oncirque.net
dialin.lync.oncirque.net
webapp.lync.oncirque.net
lyncdiscover01.lync.oncirque.net
meet.lync.oncirque.net
dialin.lync.oncirque.net
webapp.lync.oncirque.net
Other certificates including the domain name oncirque.net
(limited to 100 certificates)
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync.oncirque.net
webdir01.s4b7.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
edgepool01.lync6.oncirque.net
sipdir01.lync.oncirque.net
medpool01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
medpool01.lync6.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sip01.s4b7.oncirque.net
webdir01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync6.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
medpool01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
l5sba01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
webdir01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync6.oncirque.net
sipdir01.lync.oncirque.net
webdir01.lync.oncirque.net
webdir01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.skype1.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync.oncirque.net
l4eicctest1.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
l5sba01.lync5.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
webapp.lync5.oncirque.net
l4ta57.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync.oncirque.net
webdir01.s4b7.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
edgepool01.lync6.oncirque.net
sipdir01.lync.oncirque.net
medpool01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
medpool01.lync6.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sip01.s4b7.oncirque.net
webdir01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync6.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
medpool01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
l5sba01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
webdir01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync6.oncirque.net
sipdir01.lync.oncirque.net
webdir01.lync.oncirque.net
webdir01.lync5.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.skype1.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
webdir01.lync.oncirque.net
l4eicctest1.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync6.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
l5sba01.lync5.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
sipdir01.lync.oncirque.net
webapp.lync5.oncirque.net
l4ta57.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir01.lync.oncirque.net
Certificate
The complete raw certificate details for webdir01.lync.oncirque.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISESHpdqcQn5ViTY6hPlWc9ni6MA0GCSqGSIb3DQEBCwUA MGAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYD VQQDEy1HbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMTQwNDEwMTIxNzAzWhcNMTYwNDEwMTIxNzAzWjBIMSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxIzAhBgNVBAMMGndlYmRpcjAxLmx5bmMu b25jaXJxdWUubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcq vXNxHa13EiDOwLL2ktDVMUic81gdGKn5IsWyCZLtho/4LzPjzIkLPnJlWBLmu2Sc l4ZTqF8QW7d9SeXianImOI2syvVF360P0nolRIYFLhZSmsKTONUOXWr5C41f91sl ExTal/UTzx1gHRk8aikCW6vQtR67+S+7/tDCM7J2vmfhXkPQt8qId/LSBhXefpfW TT9ynrNjGey9xzI1J+4o+cZGy6B/knvLirnHlpdWLP+0XmOd4mPem2B2TWXxTp2y GkeipMh5nRBZ3QyPm0ZMX7nH6XkhwAkjpMGVXWrquiqG5Xp+hIFnTFQ6wKPaxXzy Klq8EIUFzWSw410XNwIDAQABo4ICPTCCAjkwDgYDVR0PAQH/BAQDAgWgMEkGA1Ud IARCMEAwPgYGZ4EMAQIBMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh bHNpZ24uY29tL3JlcG9zaXRvcnkvMIGVBgNVHREEgY0wgYqCGndlYmRpcjAxLmx5 bmMub25jaXJxdWUubmV0giBseW5jZGlzY292ZXIwMS5seW5jLm9uY2lycXVlLm5l dIIWbWVldC5seW5jLm9uY2lycXVlLm5ldIIYZGlhbGluLmx5bmMub25jaXJxdWUu bmV0ghh3ZWJhcHAubHluYy5vbmNpcnF1ZS5uZXQwCQYDVR0TBAIwADAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDov L2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZhbHNoYTJnMi5jcmwwgZQG CCsGAQUFBwEBBIGHMIGEMEcGCCsGAQUFBzAChjtodHRwOi8vc2VjdXJlLmdsb2Jh bHNpZ24uY29tL2NhY2VydC9nc2RvbWFpbnZhbHNoYTJnMnIxLmNydDA5BggrBgEF BQcwAYYtaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzZG9tYWludmFsc2hh MmcyMB0GA1UdDgQWBBR6XGPSYD60dFQPt86qDJ54a87EdjAfBgNVHSMEGDAWgBTq TnzUgC3lFYGGJoyCbcCYpM+XDzANBgkqhkiG9w0BAQsFAAOCAQEAAEXrEuryoQ7v oaa2bsP/cX13zwSct5tCb50K5V6peIGGsxJvZl/WNBbZizSJvVoF9VcZuDrrjhoZ 4n7UOSmbvvFPXy5XM3ynSxjUigkosZgEYRwdR3kaKenLDkgVySD6vDNfY7VQkSH1 7nH8UU0lbZOjmVcWTN8fSJqV6/MgNBHSiezKSJ+NhEgXe9PB2fblj49hBOjD5auJ d6tNv4lPvjb4SVk/TefYbva7NFueQ37ekirphhvD08hG62drUT6+pECbgi/Q7X1J TyK5k//kGzKW7UFHMRt8T/nMP7denota00HT/P+rhW84kwB/V6/gwxv6KFMW4fBw eGT8+vkARg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcqvXNxHa13EiDOwLL2 ktDVMUic81gdGKn5IsWyCZLtho/4LzPjzIkLPnJlWBLmu2Scl4ZTqF8QW7d9SeXi anImOI2syvVF360P0nolRIYFLhZSmsKTONUOXWr5C41f91slExTal/UTzx1gHRk8 aikCW6vQtR67+S+7/tDCM7J2vmfhXkPQt8qId/LSBhXefpfWTT9ynrNjGey9xzI1 J+4o+cZGy6B/knvLirnHlpdWLP+0XmOd4mPem2B2TWXxTp2yGkeipMh5nRBZ3QyP m0ZMX7nH6XkhwAkjpMGVXWrquiqG5Xp+hIFnTFQ6wKPaxXzyKlq8EIUFzWSw410X NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492448505150841797915732906057540644010170 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-10 12:17:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-10 12:17:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webdir01.lync.oncirque.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24643673306950666847763467807360643094756722957119012126177370365970171791800142962478072500603230369116019447267194136060859138045387285182050610415628495287866164934399311328873347472387392733164053018251494125453313393467272467989568757379040695215514135200668990745457009660939486633960832307387033058184270688167196873233755798771112079892668948635802754764685919582979323896711586394341202332267758685136315782701388215720518623626285397938746144716362445970937570064149988477114930773798041774024180478826608438181893575944440646790231692222134416583377813004562710845056430326708473014541905651838262456424247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdir01.lync.oncirque.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover01.lync.oncirque.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.lync.oncirque.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.lync.oncirque.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.lync.oncirque.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7a5c63d2603eb474540fb7ceaa0c9e786bcec476 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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