*.qmatic.com

- Q-MATIC AB -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:b0:ff:b7:13:9e:36:45:07:94:a6:22:e8:57:6f:ed:8c was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Q-MATIC AB

Organization: Q-MATIC AB
Organization unit: IT
State / Province: Vastra Gotaland
Locality: Molndal
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:b0:ff:b7:13:9e:36:45:07:94:a6:22:e8:57:6f:ed:8c
Serial Number (int): 1492373450824507490657129866428601697561996
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 87:4b:b0:7c:85:f0:61:3f:bd:47:97:0c:dd:ae:81:1d:e4:2e:85:10
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 0e:76:ef:8a:ce:c9:64:bd:39:00:01:e4:b9:5a:e0:2a:05:e4:93:9e
Fingerprint (sha256): 4d:0d:f1:2a:4d:16:98:3f:e8:0a:16:41:5c:78:a4:70:e4:9d:25:42:43:99:28:b5:08:16:51:51:0c:72:1d:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.qmatic.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.qmatic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.qmatic.com
mail.qmatic.com
autodiscover.qmatic.com
qmatic.com

Other certificates including the domain name qmatic.com

(limited to 100 certificates)
event.qmatic.com
s2.shared.global.fastly.net
joinus.qmatic.com
*.portal.qmatic.com
*.portal.qmatic.com
s2.shared.global.fastly.net
joinus.qmatic.com
s2.shared.global.fastly.net
joinus.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
event.qmatic.com
s2.shared.global.fastly.net
joinus.qmatic.com
joinus.qmatic.com
joinus.qmatic.com
joinus.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
event.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
joinus.qmatic.com
joinus.qmatic.com
joinus.qmatic.com
*.portal.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
lp.qmatic.com
lp.qmatic.com
s2.shared.global.fastly.net
secure0160.hubspot.com
*.qmatic.com
s2.shared.global.fastly.net
lp.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
joinus.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
mail.qmatic.com
secure0160.hubspot.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.qmatic.com
s2.shared.global.fastly.net
www.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
lp.qmatic.com
joinus.qmatic.com
joinus.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
event.qmatic.com
event.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
event.qmatic.com
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
joinus.qmatic.com
s2.shared.global.fastly.net

Certificate

The complete raw certificate details for *.qmatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISESGw/7cTnjZFB5SmIuhXb+2MMA0GCSqGSIb3DQEBCwUA
MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD
VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB
MjU2IC0gRzIwHhcNMTUxMDA2MDk0ODMxWhcNMTgxMTMwMjM1OTU5WjByMQswCQYD
VQQGEwJTRTEYMBYGA1UECAwPVmFzdHJhIEdvdGFsYW5kMRAwDgYDVQQHDAdNb2xu
ZGFsMQswCQYDVQQLDAJJVDETMBEGA1UECgwKUS1NQVRJQyBBQjEVMBMGA1UEAwwM
Ki5xbWF0aWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mPy
fPgt8p2TZJcRbPddv1NzC7B783uVNkXotrBzGgO1p9+gEdGVav9feX57e0u2Meoe
JrtYxzu0ekZt90ZvZPj3Gcci6TRo3vJA306iAtOFdzUPNFwIfYfpOd2iqrceJzvX
+8LV/fkLaglOFG//9cxSPJblzhFPLKjjbnCMyAyhZlAtYmRy+cKrsfvEatPtILD0
k67UGH/ccKhO3k88CVSmFTlGP+WOrAom6EAOSWTnZAx6+XdNB5aCt+3pUx/TDLEN
CK0VUTtoc9BcMPD2jp7mS57bWCrACaDJ4rbxVuygc0t8TRFKJC8SMifBfLnuf2uA
n/aWQ4dyy7KqT/K3hwIDAQABo4ICBjCCAgIwDgYDVR0PAQH/BAQDAgWgMEkGA1Ud
IARCMEAwPgYGZ4EMAQICMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh
bHNpZ24uY29tL3JlcG9zaXRvcnkvME0GA1UdEQRGMESCDCoucW1hdGljLmNvbYIP
bWFpbC5xbWF0aWMuY29tghdhdXRvZGlzY292ZXIucW1hdGljLmNvbYIKcW1hdGlj
LmNvbTAJBgNVHRMEAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJ
BgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dz
b3JnYW5pemF0aW9udmFsc2hhMmcyLmNybDCBoAYIKwYBBQUHAQEEgZMwgZAwTQYI
KwYBBQUHMAKGQWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dz
b3JnYW5pemF0aW9udmFsc2hhMmcycjEuY3J0MD8GCCsGAQUFBzABhjNodHRwOi8v
b2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIwHQYD
VR0OBBYEFIdLsHyF8GE/vUeXDN2ugR3kLoUQMB8GA1UdIwQYMBaAFJbeYfG9HBYp
UxzAzH07gwBA5hp8MA0GCSqGSIb3DQEBCwUAA4IBAQAnofmulJn4nAVMtVUiwNTE
55bRVjPCs+yb+6FMvceBmx+8c+bJSD/enh2nQ1ndJ72PXIsUUMfECO6hEx5W75uv
GFW3xdXHsRT+zwQul1E6pUOy1/TUcLUSDUEgCmWuZhx9twl5KxZdmtEHNWI/dFSW
xbpk3ek2VZnVNHVDSTYhIUz2pwZOQ2ID+bZM/6Huqon2I8F/tf8+3yybN1Jc2W2a
mFbOe4IraW1+n9QAdd7ymIlq072hSJzu3qxEqwnaCZUyT/XJiIdjbdL2PSf65kqU
LCRsQp29soba1dYmEptgM3vrc6G1bKrcTc9S/3DkkYD5eu7JHF3B+C6ycu48qL1Y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mPyfPgt8p2TZJcRbPdd
v1NzC7B783uVNkXotrBzGgO1p9+gEdGVav9feX57e0u2MeoeJrtYxzu0ekZt90Zv
ZPj3Gcci6TRo3vJA306iAtOFdzUPNFwIfYfpOd2iqrceJzvX+8LV/fkLaglOFG//
9cxSPJblzhFPLKjjbnCMyAyhZlAtYmRy+cKrsfvEatPtILD0k67UGH/ccKhO3k88
CVSmFTlGP+WOrAom6EAOSWTnZAx6+XdNB5aCt+3pUx/TDLENCK0VUTtoc9BcMPD2
jp7mS57bWCrACaDJ4rbxVuygc0t8TRFKJC8SMifBfLnuf2uAn/aWQ4dyy7KqT/K3
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492373450824507490657129866428601697561996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-06 09:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vastra Gotaland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Molndal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Q-MATIC AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qmatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30094002392706783365014562302288977281875288331392613100484195126739856518901072249670689449900299106631631972887620208713333552598607072609820757381575625852392261279881662969517767355097407682085419406892668228776536618814533587137502434654297134702963598578752516979953832407055343330001026253680937231950918679292739393439602194515069182493513588606440652716288489949934757661358228248105375786466599416185220154449546629116788892828834107696765028462707369232438940303508617113267924694929257855610891491128138183722826647623928726968073589929084034380474519886767987055069389350895260417165417218966767994582919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.qmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.qmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							874bb07c85f0613fbd47970cddae811de42e8510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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