*.a.heroku.ssl.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 21:2e:e2:86:4e:a3:f3:97:f1:0c:5b:43 was issued on by GlobalSign nv-sa.
With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 21:2e:e2:86:4e:a3:f3:97:f1:0c:5b:43Serial Number (int): 10269685644162135216924416835
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 04:92:99:76:e7:d1:ef:67:83:df:1e:9a:3c:b9:66:d8:70:03:b3:de
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 46:23:21:72:1d:2c:f7:a3:f5:43:05:a9:a6:45:68:de:b4:60:46:1e
Fingerprint (sha256): 3c:43:0b:39:d6:7c:15:5d:ab:51:4a:8a:e3:5e:00:ca:be:e6:fa:75:e1:6e:1a:f7:f1:1f:f9:46:3b:e5:a9:a1
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate *.a.heroku.ssl.fastly.net
91
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.a.heroku.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.a.heroku.ssl.fastly.net
*.annict.com
*.herokutest.tk
*.resaleai.com
*.swaychat.com
52ltd.com
52ltd.mttr.co
annict.com
annict.jp
annict.review
api-test.lipscore.com
api.adorable.io
api.appjobs.com
api.icouch.co
api.icouch.me
api.lipscore.com
api.recast.fm
api.stattleship.com
app.crmworkspaceqa.com
app.yellowpages.co.za
bitcoinmagazine.com
calcs.widgetworks.com.au
calcsdev.widgetworks.com.au
cdn.crmworkspace.com
cdn.crmworkspaceqa.com
cdn.manba.co.jp
cdn2.funnelenvy.com
connect.ieshil.com
cqcenter.com
creator.ridestore.com
demo.bokukko.moe
dev-fastly.moveon-hotelbb.com
dev.cqcenter.com
dev.democms.site
dev.jetpackworkflow.com
dev.to
development.nurvecloud.com
embed.chatleap.com
embed3.chatleap.com
fast.api.platform.hoodline.com
gridplus.io
hales.ws
id.sportsoasis.co.jp
mattersupply.co
mypage.oasisdev.tech
mypage.sportsoasis.co.jp
nextweb.perdoo.com
preprod-fastly.moveon-hotelbb.com
prod-fastly.moveon-hotelbb.com
realestate.nurvecloud.com
remote.rest.stackmachine.com
rent.nurvecloud.com
rewrites.me
stage-fastly.moveon-hotelbb.com
stage.motorway.co.uk
staging-rent.nurvecloud.com
staging.cqcenter.com
stateofthestates.educationsuperhighway.org
static.equinox.io
swaychat.com
tblaunchpad.com
test.michaelmay.me
try-titan.mancrates.com
v3.jurablogs.com
wapi.lipscore.com
web.perdoo.com
www.9curry.com
www.amitree-staging.com
www.appjobs.com
www.arrivalist.com
www.bosthlm.se
www.edgy.cloud
www.ellevatenetwork.com
www.gridplus.io
www.indiedays.com
www.jurablogs.com
www.kazzam.com
www.kfc.fr
www.lacasadiriposo.it
www.lacentraledusport.fr
www.mittfortum.se
www.openx.com
www.rsng.com
www.seetheseen.com
www.tam-bourine.co.jp
www.tblaunchpad.com
www.therisingman.com
www.trinitymirrorsubscriptions.com
www.venturex.co
www.zaidcrowe.co.uk
a.heroku.ssl.fastly.net
*.annict.com
*.herokutest.tk
*.resaleai.com
*.swaychat.com
52ltd.com
52ltd.mttr.co
annict.com
annict.jp
annict.review
api-test.lipscore.com
api.adorable.io
api.appjobs.com
api.icouch.co
api.icouch.me
api.lipscore.com
api.recast.fm
api.stattleship.com
app.crmworkspaceqa.com
app.yellowpages.co.za
bitcoinmagazine.com
calcs.widgetworks.com.au
calcsdev.widgetworks.com.au
cdn.crmworkspace.com
cdn.crmworkspaceqa.com
cdn.manba.co.jp
cdn2.funnelenvy.com
connect.ieshil.com
cqcenter.com
creator.ridestore.com
demo.bokukko.moe
dev-fastly.moveon-hotelbb.com
dev.cqcenter.com
dev.democms.site
dev.jetpackworkflow.com
dev.to
development.nurvecloud.com
embed.chatleap.com
embed3.chatleap.com
fast.api.platform.hoodline.com
gridplus.io
hales.ws
id.sportsoasis.co.jp
mattersupply.co
mypage.oasisdev.tech
mypage.sportsoasis.co.jp
nextweb.perdoo.com
preprod-fastly.moveon-hotelbb.com
prod-fastly.moveon-hotelbb.com
realestate.nurvecloud.com
remote.rest.stackmachine.com
rent.nurvecloud.com
rewrites.me
stage-fastly.moveon-hotelbb.com
stage.motorway.co.uk
staging-rent.nurvecloud.com
staging.cqcenter.com
stateofthestates.educationsuperhighway.org
static.equinox.io
swaychat.com
tblaunchpad.com
test.michaelmay.me
try-titan.mancrates.com
v3.jurablogs.com
wapi.lipscore.com
web.perdoo.com
www.9curry.com
www.amitree-staging.com
www.appjobs.com
www.arrivalist.com
www.bosthlm.se
www.edgy.cloud
www.ellevatenetwork.com
www.gridplus.io
www.indiedays.com
www.jurablogs.com
www.kazzam.com
www.kfc.fr
www.lacasadiriposo.it
www.lacentraledusport.fr
www.mittfortum.se
www.openx.com
www.rsng.com
www.seetheseen.com
www.tam-bourine.co.jp
www.tblaunchpad.com
www.therisingman.com
www.trinitymirrorsubscriptions.com
www.venturex.co
www.zaidcrowe.co.uk
a.heroku.ssl.fastly.net
Other certificates including the domain name fastly.net
(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net
Certificate
The complete raw certificate details for *.a.heroku.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINGTCCDAGgAwIBAgIMIS7ihk6j85fxDFtDMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwNDI3MDI1 OTA5WhcNMTkwMjAxMjE0ODU3WjB1MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMSIwIAYDVQQDDBkqLmEuaGVyb2t1LnNzbC5mYXN0bHkubmV0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W6dJM4DZdFzn7+UAYHJ0DraX6w+ WWPe9JtDjbd+Z0npIzBsL5nmg89hZfdHoAFKLXeBv5VikDhrdx4OAjoZHDfGnUgL HtjIRP0n5RDwU5EDcM5kS2roktu3AMXa9ec4FJBscL5ER9bjb0Mk+5ISkFZb+1PC H7DlK5dn6kT/C49/iNal2d2K3SiG6pt5EU78VEDLrfUufXHAg77gjPaZOBrseak9 KLqZD7o2HSyX6lYwSgfey569+12ZoB4Ygs+FxSvffJe7+oYR9l8xy1ciuD9DUbNA 6L3CelYolnWzd+uRX1qaqYbfJOhBvVveYrwuQTDVOfhGYqAKAmSFPLy6CwIDAQAB o4IJxTCCCcEwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYB BQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vk c3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNp Z24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQw MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRv cnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIIHVQYDVR0RBIIHTDCCB0iCGSouYS5o ZXJva3Uuc3NsLmZhc3RseS5uZXSCDCouYW5uaWN0LmNvbYIPKi5oZXJva3V0ZXN0 LnRrgg4qLnJlc2FsZWFpLmNvbYIOKi5zd2F5Y2hhdC5jb22CCTUybHRkLmNvbYIN NTJsdGQubXR0ci5jb4IKYW5uaWN0LmNvbYIJYW5uaWN0Lmpwgg1hbm5pY3QucmV2 aWV3ghVhcGktdGVzdC5saXBzY29yZS5jb22CD2FwaS5hZG9yYWJsZS5pb4IPYXBp LmFwcGpvYnMuY29tgg1hcGkuaWNvdWNoLmNvgg1hcGkuaWNvdWNoLm1lghBhcGku bGlwc2NvcmUuY29tgg1hcGkucmVjYXN0LmZtghNhcGkuc3RhdHRsZXNoaXAuY29t ghZhcHAuY3Jtd29ya3NwYWNlcWEuY29tghVhcHAueWVsbG93cGFnZXMuY28uemGC E2JpdGNvaW5tYWdhemluZS5jb22CGGNhbGNzLndpZGdldHdvcmtzLmNvbS5hdYIb Y2FsY3NkZXYud2lkZ2V0d29ya3MuY29tLmF1ghRjZG4uY3Jtd29ya3NwYWNlLmNv bYIWY2RuLmNybXdvcmtzcGFjZXFhLmNvbYIPY2RuLm1hbmJhLmNvLmpwghNjZG4y LmZ1bm5lbGVudnkuY29tghJjb25uZWN0Lmllc2hpbC5jb22CDGNxY2VudGVyLmNv bYIVY3JlYXRvci5yaWRlc3RvcmUuY29tghBkZW1vLmJva3Vra28ubW9lgh1kZXYt ZmFzdGx5Lm1vdmVvbi1ob3RlbGJiLmNvbYIQZGV2LmNxY2VudGVyLmNvbYIQZGV2 LmRlbW9jbXMuc2l0ZYIXZGV2LmpldHBhY2t3b3JrZmxvdy5jb22CBmRldi50b4Ia ZGV2ZWxvcG1lbnQubnVydmVjbG91ZC5jb22CEmVtYmVkLmNoYXRsZWFwLmNvbYIT ZW1iZWQzLmNoYXRsZWFwLmNvbYIeZmFzdC5hcGkucGxhdGZvcm0uaG9vZGxpbmUu Y29tggtncmlkcGx1cy5pb4IIaGFsZXMud3OCFGlkLnNwb3J0c29hc2lzLmNvLmpw gg9tYXR0ZXJzdXBwbHkuY2+CFG15cGFnZS5vYXNpc2Rldi50ZWNoghhteXBhZ2Uu c3BvcnRzb2FzaXMuY28uanCCEm5leHR3ZWIucGVyZG9vLmNvbYIhcHJlcHJvZC1m YXN0bHkubW92ZW9uLWhvdGVsYmIuY29tgh5wcm9kLWZhc3RseS5tb3Zlb24taG90 ZWxiYi5jb22CGXJlYWxlc3RhdGUubnVydmVjbG91ZC5jb22CHHJlbW90ZS5yZXN0 LnN0YWNrbWFjaGluZS5jb22CE3JlbnQubnVydmVjbG91ZC5jb22CC3Jld3JpdGVz Lm1lgh9zdGFnZS1mYXN0bHkubW92ZW9uLWhvdGVsYmIuY29tghRzdGFnZS5tb3Rv cndheS5jby51a4Ibc3RhZ2luZy1yZW50Lm51cnZlY2xvdWQuY29tghRzdGFnaW5n LmNxY2VudGVyLmNvbYIqc3RhdGVvZnRoZXN0YXRlcy5lZHVjYXRpb25zdXBlcmhp Z2h3YXkub3JnghFzdGF0aWMuZXF1aW5veC5pb4IMc3dheWNoYXQuY29tgg90Ymxh dW5jaHBhZC5jb22CEnRlc3QubWljaGFlbG1heS5tZYIXdHJ5LXRpdGFuLm1hbmNy YXRlcy5jb22CEHYzLmp1cmFibG9ncy5jb22CEXdhcGkubGlwc2NvcmUuY29tgg53 ZWIucGVyZG9vLmNvbYIOd3d3LjljdXJyeS5jb22CF3d3dy5hbWl0cmVlLXN0YWdp bmcuY29tgg93d3cuYXBwam9icy5jb22CEnd3dy5hcnJpdmFsaXN0LmNvbYIOd3d3 LmJvc3RobG0uc2WCDnd3dy5lZGd5LmNsb3Vkghd3d3cuZWxsZXZhdGVuZXR3b3Jr LmNvbYIPd3d3LmdyaWRwbHVzLmlvghF3d3cuaW5kaWVkYXlzLmNvbYIRd3d3Lmp1 cmFibG9ncy5jb22CDnd3dy5rYXp6YW0uY29tggp3d3cua2ZjLmZyghV3d3cubGFj YXNhZGlyaXBvc28uaXSCGHd3dy5sYWNlbnRyYWxlZHVzcG9ydC5mcoIRd3d3Lm1p dHRmb3J0dW0uc2WCDXd3dy5vcGVueC5jb22CDHd3dy5yc25nLmNvbYISd3d3LnNl ZXRoZXNlZW4uY29tghV3d3cudGFtLWJvdXJpbmUuY28uanCCE3d3dy50YmxhdW5j aHBhZC5jb22CFHd3dy50aGVyaXNpbmdtYW4uY29tgiJ3d3cudHJpbml0eW1pcnJv cnN1YnNjcmlwdGlvbnMuY29tgg93d3cudmVudHVyZXguY2+CE3d3dy56YWlkY3Jv d2UuY28udWuCF2EuaGVyb2t1LnNzbC5mYXN0bHkubmV0MB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUBJKZdufR72eD3x6aPLlm2HADs94w HwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWMF ClNDAAAEAwBHMEUCIQDnS9lYrhn3Tnuq153evgPDqozICFuz2+yhYbkeZ9oU3QIg cqZVj7fjxNoZaMLbMxEWHFxy139obvQIMYxYLUZU+tUAdwBvU3asMfAxGdiZAKRR Ff93FRwR2QLBACkGjbIImjfZEwAAAWMFClMFAAAEAwBIMEYCIQD7ajPwQ62VsWRq DEolhV2Vt+MEmeG0ZphlrPudIDgMnwIhALB0ccLkYDdrnabxKg/sTfKJq/WO450S QpTdQKtZzbYBMA0GCSqGSIb3DQEBCwUAA4IBAQCBz6AMmVDmiKpxTA3rD/HARv6C AYGJZRLH4gi+aX6H5jspf3pYJ8q0mKO3OMxPmBS4izAhzXU7HOv4q6i7bYQYB7/y ySVaqk+axDn42rFNJaWivguEVFWSa+0QQFysXoDCKdpv/AiQweTvrnJ+wP9t38oT yIu/eGDKQ2QhRnjPIfDz5/RcJeiCarhrxXeQH/FcnaUIJA8AedFmHDL/YkBn69PH H351ZSQc78ohB6DD/5Sj0f8rqDuIwKYkwnueqB2h+eCeRy16zqqHv8eCuSTupuvC 9KqdulWyC+EnuWgKM6eZO+B9XqNUORvaVv6dfckIhmHO6xcuqCtZq2UZFCX2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W6dJM4DZdFzn7+UAYHJ 0DraX6w+WWPe9JtDjbd+Z0npIzBsL5nmg89hZfdHoAFKLXeBv5VikDhrdx4OAjoZ HDfGnUgLHtjIRP0n5RDwU5EDcM5kS2roktu3AMXa9ec4FJBscL5ER9bjb0Mk+5IS kFZb+1PCH7DlK5dn6kT/C49/iNal2d2K3SiG6pt5EU78VEDLrfUufXHAg77gjPaZ OBrseak9KLqZD7o2HSyX6lYwSgfey569+12ZoB4Ygs+FxSvffJe7+oYR9l8xy1ci uD9DUbNA6L3CelYolnWzd+uRX1qaqYbfJOhBvVveYrwuQTDVOfhGYqAKAmSFPLy6 CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10269685644162135216924416835 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-27 02:59:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 21:48:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.a.heroku.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26943304676624509966950546498094803281644404932442483689053847500015250952592081170380021347983806206464892945123390987163679418627322310837586651187744334921551688362384085049604309169400381901292316539485293792953697712205737087101175518584557629274430208717163656424631895469592893335080754054325000179480298497595849342906804170427352422398489508092437653484887367960903462244144279407685870068266745681586526826874648329177526265673675104227401427499641800054516482256802911838620046555010808284704852121012680762380331414608574710897631717695285106021966491280921165285142590887890894901882435444469417063004683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a.heroku.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annict.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herokutest.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resaleai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swaychat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52ltd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52ltd.mttr.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annict.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annict.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annict.review' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.lipscore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.adorable.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.appjobs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.icouch.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.icouch.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lipscore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.recast.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stattleship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.crmworkspaceqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yellowpages.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcs.widgetworks.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcsdev.widgetworks.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.crmworkspace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.crmworkspaceqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.manba.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.funnelenvy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ieshil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creator.ridestore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.bokukko.moe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-fastly.moveon-hotelbb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cqcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.democms.site' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jetpackworkflow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.to' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.nurvecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.chatleap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed3.chatleap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.api.platform.hoodline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gridplus.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hales.ws' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.sportsoasis.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattersupply.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypage.oasisdev.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypage.sportsoasis.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextweb.perdoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-fastly.moveon-hotelbb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-fastly.moveon-hotelbb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.nurvecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.rest.stackmachine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rent.nurvecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewrites.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-fastly.moveon-hotelbb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.motorway.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-rent.nurvecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cqcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofthestates.educationsuperhighway.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.equinox.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swaychat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tblaunchpad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.michaelmay.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-titan.mancrates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v3.jurablogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapi.lipscore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.perdoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9curry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitree-staging.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appjobs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrivalist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosthlm.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgy.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellevatenetwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gridplus.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiedays.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurablogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kazzam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfc.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacasadiriposo.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacentraledusport.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mittfortum.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seetheseen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tam-bourine.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tblaunchpad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therisingman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinitymirrorsubscriptions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturex.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaidcrowe.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.heroku.ssl.fastly.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04929976e7d1ef6783df1e9a3cb966d87003b3de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163050a53430000040300473045022100e74bd958ae19f74e7baad79ddebe03c3aa8cc8085bb3dbeca161b91e67da14dd022072a6558fb7e3c4da1968c2db3311161c5c72d77f686ef408318c582d4654fad50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000163050a53050000040300483046022100fb6a33f043ad95b1646a0c4a25855d95b7e30499e1b4669865acfb9d20380c9f022100b07471c2e460376b9da6f12a0fec4df289abf58ee39d124294dd40ab59cdb601 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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