firsttactical.com
Issued by GlobalSign Domain Validation CA - SHA256 - G3
About this certificate
This digital certificate with serial number 2f:fc:bd:43:b6:f8:0d:1d:b8:75:cb:f9 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=firsttactical.com,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 2f:fc:bd:43:b6:f8:0d:1d:b8:75:cb:f9Serial Number (int): 14851338544527522414003080185
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: ba:08:a1:32:31:c8:7f:48:43:bd:90:1d:4d:93:2c:0b:64:86:29:b9
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb
Fingerprint (sha1): 7e:66:82:c8:bb:3c:95:f7:56:61:ef:e9:71:c0:ce:57:1c:58:35:da
Fingerprint (sha256): 47:7e:62:91:de:e0:95:09:cc:b8:67:f0:64:57:93:d4:04:ed:cb:90:42:94:7d:85:a7:cb:ab:b1:02:1c:76:09
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl
Check the revocation status for certificate firsttactical.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for firsttactical.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
firsttactical.com
Other certificates including the domain name firsttactical.com
(limited to 100 certificates)
firsttactical.com
l.ssl.shopify.com
www.firsttactical.com
seattlefire.firsttactical.com
www.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
q.ssl.shopify.com
eastforkpd.firsttactical.com
www.firsttactical.com
www.firsttactical.com
l.ssl.shopify.com
www.firsttactical.com
secure7.scene7.com
secure7.scene7.com
centerstone.firsttactical.com
eastforkpd.firsttactical.com
seattlefire.firsttactical.com
fremontpd.firsttactical.com
q.ssl.shopify.com
seattlefire.firsttactical.com
seattlefire.firsttactical.com
q.ssl.shopify.com
dealers.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
acso.firsttactical.com
acso.firsttactical.com
www.firsttactical.com
secure7s.scene7.com
l.ssl.shopify.com
gssc.firsttactical.com
gssc.firsttactical.com
centerstone.firsttactical.com
firsttactical.com
www.firsttactical.com
eastforkpd.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
gssc.firsttactical.com
nvdoc.firsttactical.com
l.ssl.shopify.com
seattlefire.firsttactical.com
gssc.firsttactical.com
acso.firsttactical.com
fpoa.firsttactical.com
centerstone.firsttactical.com
www.firsttactical.com
firsttactical.com
dealers.firsttactical.com
secure7.scene7.com
firsttactical.com
seattlefire.firsttactical.com
centerstone.firsttactical.com
firsttactical.com
firsttactical.com
www.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
secure7.scene7.com
secure7s.scene7.com
sales.firsttactical.com
seattlefire.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
centerstone.firsttactical.com
eastforkpd.firsttactical.com
l.ssl.shopify.com
secure7.scene7.com
q.ssl.shopify.com
secure7s.scene7.com
firsttactical.com
l.ssl.shopify.com
firsttactical.com
acso.firsttactical.com
firsttactical.com
firsttactical.com
acso.firsttactical.com
fpoa.firsttactical.com
fremontpd.firsttactical.com
eastforkpd.firsttactical.com
fpoa.firsttactical.com
l.ssl.shopify.com
seattlefire.firsttactical.com
firsttactical.com
q.ssl.shopify.com
seattlefire.firsttactical.com
www.firsttactical.com
www.firsttactical.com
seattlefire.firsttactical.com
firsttactical.com
fremontpd.firsttactical.com
firsttactical.com
www.firsttactical.com
firsttactical.com
www.firsttactical.com
secure7.scene7.com
secure7.scene7.com
www.firsttactical.com
fpoa.firsttactical.com
l.ssl.shopify.com
www.firsttactical.com
seattlefire.firsttactical.com
www.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
q.ssl.shopify.com
eastforkpd.firsttactical.com
www.firsttactical.com
www.firsttactical.com
l.ssl.shopify.com
www.firsttactical.com
secure7.scene7.com
secure7.scene7.com
centerstone.firsttactical.com
eastforkpd.firsttactical.com
seattlefire.firsttactical.com
fremontpd.firsttactical.com
q.ssl.shopify.com
seattlefire.firsttactical.com
seattlefire.firsttactical.com
q.ssl.shopify.com
dealers.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
acso.firsttactical.com
acso.firsttactical.com
www.firsttactical.com
secure7s.scene7.com
l.ssl.shopify.com
gssc.firsttactical.com
gssc.firsttactical.com
centerstone.firsttactical.com
firsttactical.com
www.firsttactical.com
eastforkpd.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
gssc.firsttactical.com
nvdoc.firsttactical.com
l.ssl.shopify.com
seattlefire.firsttactical.com
gssc.firsttactical.com
acso.firsttactical.com
fpoa.firsttactical.com
centerstone.firsttactical.com
www.firsttactical.com
firsttactical.com
dealers.firsttactical.com
secure7.scene7.com
firsttactical.com
seattlefire.firsttactical.com
centerstone.firsttactical.com
firsttactical.com
firsttactical.com
www.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
secure7.scene7.com
secure7s.scene7.com
sales.firsttactical.com
seattlefire.firsttactical.com
firsttactical.com
seattlefire.firsttactical.com
centerstone.firsttactical.com
eastforkpd.firsttactical.com
l.ssl.shopify.com
secure7.scene7.com
q.ssl.shopify.com
secure7s.scene7.com
firsttactical.com
l.ssl.shopify.com
firsttactical.com
acso.firsttactical.com
firsttactical.com
firsttactical.com
acso.firsttactical.com
fpoa.firsttactical.com
fremontpd.firsttactical.com
eastforkpd.firsttactical.com
fpoa.firsttactical.com
l.ssl.shopify.com
seattlefire.firsttactical.com
firsttactical.com
q.ssl.shopify.com
seattlefire.firsttactical.com
www.firsttactical.com
www.firsttactical.com
seattlefire.firsttactical.com
firsttactical.com
fremontpd.firsttactical.com
firsttactical.com
www.firsttactical.com
firsttactical.com
www.firsttactical.com
secure7.scene7.com
secure7.scene7.com
www.firsttactical.com
fpoa.firsttactical.com
Certificate
The complete raw certificate details for firsttactical.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIML/y9Q7b4DR24dcv5MA0GCSqGSIb3DQEBCwUAMGAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzMwHhcN MjAwMjA4MDgxOTI5WhcNMjEwMjA4MDgxOTI5WjA/MSEwHwYDVQQLExhEb21haW4g Q29udHJvbCBWYWxpZGF0ZWQxGjAYBgNVBAMTEWZpcnN0dGFjdGljYWwuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LR9OM0Wp9EhlQcaVsmBN4OL yLS1hJ14W01WpWqOnHi/X13Cz1AsQLVGWbhGADzXItqxM59g60bSrPY1ROIWSmg1 HxhAvc+AETee/R84/8TPdLnZEBCN4TJCHHsCs+wI6RhbiYs0gNJSwj5S82hsvHMt 3V9MJ9WXAE7vSCMxvc13snXOCzSN9IhaYuXx9XLj76PuIvMTf4ciX2Uihf/UJk37 sLoB3p0EeRes7WsidGjSvJ5wfkl1i2D5eLvuAzZNgqbqAMMgLr+be4Zf7vlBb9YI Pu/YMhZ2+jRpsqjgsAv49BEOpQ0mo90O6owSSzf686Yq1Yt7nuuhF7pk8ferpQID AQABo4IB4DCCAdwwDgYDVR0PAQH/BAQDAgWgMIGSBggrBgEFBQcBAQSBhTCBgjBF BggrBgEFBQcwAoY5aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQv Z3Nkb21haW52YWxzaGEyZzMuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIu Z2xvYmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzMwVgYDVR0gBE8wTTBBBgkr BgEEAaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j b20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQAYDVR0fBDkwNzA1 oDOgMYYvaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2RvbWFpbnZhbHNoYTJn My5jcmwwHAYDVR0RBBUwE4IRZmlyc3R0YWN0aWNhbC5jb20wHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFD2AgnnFSIKjwxLu35kPVzVI ntDLMB0GA1UdDgQWBBS6CKEyMch/SEO9kB1NkywLZIYpuTATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtagDvhmba2BLBD8N6sGbJH4iNzz 0uRG9DAFmu8IntWXRFq3QIV2r6sjpLQrrdpqa6KciJYwIHZuuYuk0Qf4OQuJA6UA Z9vMnU9boizJcYnclVMFOdavwxSLj73SRt0k8hW4bqmC34Jz1gaDtWpj+KQQKGVG TZSNh2iIZLXnVh/H3tAkkCQkyDvExHzOFoFLqYVs0IyYbBVUYRhTzbWZVt0SZNnb CAUhv8Xm/CxIVmA9S0eVnmzQFNuwVFb7nGDuUlMuzOfLP8U5kh4o4Vcv9I2mghcz 1aXPsKefx72y+RXwcazWTtA3oTKMPpLO9na/WRBK9O7ndPFSILmVWGunVQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LR9OM0Wp9EhlQcaVsmB N4OLyLS1hJ14W01WpWqOnHi/X13Cz1AsQLVGWbhGADzXItqxM59g60bSrPY1ROIW Smg1HxhAvc+AETee/R84/8TPdLnZEBCN4TJCHHsCs+wI6RhbiYs0gNJSwj5S82hs vHMt3V9MJ9WXAE7vSCMxvc13snXOCzSN9IhaYuXx9XLj76PuIvMTf4ciX2Uihf/U Jk37sLoB3p0EeRes7WsidGjSvJ5wfkl1i2D5eLvuAzZNgqbqAMMgLr+be4Zf7vlB b9YIPu/YMhZ2+jRpsqjgsAv49BEOpQ0mo90O6owSSzf686Yq1Yt7nuuhF7pk8fer pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14851338544527522414003080185 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 08:19:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 08:19:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'firsttactical.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26346569948971632195015456930366585130528250515695578503562120680105662387368113783824201010860120274091088639085765351652352642327717016914939638093827514904088045366379359212070950028918436662752053088854167685298006355404737713592765073962599976608977476217788255699465220373417661653802971757920025991447101016457725087379707377181228708309007265642637003797120049908501296842849086287514499501113728417240082679452834497339376167764054717615866716962457052037019398152419680303599863892552952228679740150439930226619703995418405924327838657277685806921339068766989811966903764784170176583484801162929711688952741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttactical.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba08a13231c87f4843bd901d4d932c0b648629b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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