magentocloud32.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 29:c8:09:dd:d5:66:fb:dc:f5:3c:09:72 was issued on by GlobalSign nv-sa.

With 117 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:c8:09:dd:d5:66:fb:dc:f5:3c:09:72
Serial Number (int): 12930717160004114673403955570
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: e1:50:03:a1:c8:2b:03:c3:75:26:38:a5:a7:e2:86:aa:b1:bb:e4:d7
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 55:f4:cc:a2:4a:97:8c:c8:6d:d0:bb:09:27:2f:e9:3d:0a:79:38:94
Fingerprint (sha256): 5a:da:36:cd:b4:92:70:75:69:92:92:d6:80:39:f4:c7:f1:e6:d8:d2:62:21:29:87:8d:1b:02:eb:30:82:75:cb

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate magentocloud32.map.fastly.net

117

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magentocloud32.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magentocloud32.map.fastly.net
*.1-800-shaved-ice.com
*.ahfluidtech.com
*.appliedfluidpower.net
*.b2b2c.unileverservices.com
*.bedbathandbeyond.com.mx
*.bobux.ca
*.bobux.ch
*.bobux.co.il
*.bobux.co.nz
*.bobux.co.uk
*.bobux.com
*.bobux.com.au
*.bobux.de
*.bobux.eu
*.bobux.fr
*.bobux.hk
*.bobux.it
*.bobux.jp
*.bobux.nl
*.bodyglove.eu
*.coyuchi.com
*.cpschaps.com
*.esmi.com.au
*.gamexpress.vg
*.grabagun.com
*.hawaiianshavedice.com
*.heritagepartscenter.com
*.hughesind.com
*.kensie.com
*.kingspan.com
*.lccoins.com
*.lgeonlineshop.com
*.lifepharmacy.ie
*.makeupcartel.com.au
*.mcstaging.worx.com
*.mothercare.pk
*.novemweb.com
*.paulmitchell.com
*.ponicosmetics.com.au
*.precision.cl
*.reginafestas.com.br
*.riteaid.com
*.roseandthorne.co.nz
*.roseandthorne.com
*.roseandthorne.com.au
*.sequencing.roche.com
*.solarisco.com
*.solarisco.com.tr
*.syndicatedistribution.com
*.unlb2bcomm1.unileverservices.com
*.v2kart.com
*.valulots.ca
*.valulots.com
*.valulotsfoodmail.ca
*.wallquest.com
*.woodmizer.pl
*.woodmizerglobal.com
*.worx.com
*.zuiki.it
1-800-shaved-ice.com
ahfluidtech.com
appliedfluidpower.net
b2b2c.unileverservices.com
bedbathandbeyond.com.mx
bobux.ca
bobux.ch
bobux.co.il
bobux.co.nz
bobux.co.uk
bobux.com
bobux.com.au
bobux.de
bobux.eu
bobux.fr
bobux.hk
bobux.it
bobux.jp
bobux.nl
bobux.sg
bodyglove.eu
coyuchi.com
cpschaps.com
esmi.com.au
gamexpress.vg
grabagun.com
hawaiianshavedice.com
heritagepartscenter.com
hughesind.com
kensie.com
kingspan.com
lccoins.com
lgeonlineshop.com
lifepharmacy.ie
makeupcartel.com.au
mothercare.pk
novemweb.com
paulmitchell.com
ponicosmetics.com.au
precision.cl
riteaid.com
roseandthorne.co.nz
roseandthorne.com
roseandthorne.com.au
solarisco.com
solarisco.com.tr
syndicatedistribution.com
unlb2bcomm1.unileverservices.com
v2kart.com
valulots.ca
valulots.com
valulotsfoodmail.ca
wallquest.com
woodmizer.pl
woodmizerglobal.com
worx.com
zuiki.it

Other certificates including the domain name magentocloud32.map.fastly.net

(limited to 100 certificates)
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net
magentocloud32.map.fastly.net

Certificate

The complete raw certificate details for magentocloud32.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINrDCCDJSgAwIBAgIMKcgJ3dVm+9z1PAlyMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAwMTE0MTUw
MzM0WhcNMjEwMTE0MTUwMzM0WjB5MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMSYwJAYDVQQDEx1tYWdlbnRvY2xvdWQzMi5tYXAuZmFzdGx5Lm5ldDCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJRTnREa6Qv6fv01BSGlkSZ
AGN+kf2VpMGsKlBbv2R0LgjBZQC5JkL4gBCzO6wU9KI7BQGIiopJVIGXKnbKdRUh
MD1i34thuPCLRkD7hwseCOJyKrRKdtREd/OzyRL2KRFarLC1CDFmyZd5DyADHh3i
FxVAXmurveip1tH+mBo0guuUu0rEAWpeujvIW5WqFGaKhevDPfCkQgzCCJq7NQ2q
P5ziD+NWxJzkBryHFfCcewM5eheaEY8AzfPKleYEukxoOU0b6Y1ET4l8Nl71Qn/n
ERfn9JuYZt1V9n3INtzTOY2v7+QlSDBQFg0ulNEKWYd69IFV7rvNZEjmeQlcN2sC
AwEAAaOCClQwggpQMA4GA1UdDwEB/wQEAwIFoDCBigYIKwYBBQUHAQEEfjB8MEIG
CCsGAQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9j
bG91ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwMi5nbG9i
YWxzaWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNVHSAETzBNMEEGCSsGAQQBoDIB
FDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBv
c2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADCCB+UGA1UdEQSCB9wwggfYgh1t
YWdlbnRvY2xvdWQzMi5tYXAuZmFzdGx5Lm5ldIIWKi4xLTgwMC1zaGF2ZWQtaWNl
LmNvbYIRKi5haGZsdWlkdGVjaC5jb22CFyouYXBwbGllZGZsdWlkcG93ZXIubmV0
ghwqLmIyYjJjLnVuaWxldmVyc2VydmljZXMuY29tghkqLmJlZGJhdGhhbmRiZXlv
bmQuY29tLm14ggoqLmJvYnV4LmNhggoqLmJvYnV4LmNogg0qLmJvYnV4LmNvLmls
gg0qLmJvYnV4LmNvLm56gg0qLmJvYnV4LmNvLnVrggsqLmJvYnV4LmNvbYIOKi5i
b2J1eC5jb20uYXWCCiouYm9idXguZGWCCiouYm9idXguZXWCCiouYm9idXguZnKC
CiouYm9idXguaGuCCiouYm9idXguaXSCCiouYm9idXguanCCCiouYm9idXgubmyC
DiouYm9keWdsb3ZlLmV1gg0qLmNveXVjaGkuY29tgg4qLmNwc2NoYXBzLmNvbYIN
Ki5lc21pLmNvbS5hdYIPKi5nYW1leHByZXNzLnZngg4qLmdyYWJhZ3VuLmNvbYIX
Ki5oYXdhaWlhbnNoYXZlZGljZS5jb22CGSouaGVyaXRhZ2VwYXJ0c2NlbnRlci5j
b22CDyouaHVnaGVzaW5kLmNvbYIMKi5rZW5zaWUuY29tgg4qLmtpbmdzcGFuLmNv
bYINKi5sY2NvaW5zLmNvbYITKi5sZ2VvbmxpbmVzaG9wLmNvbYIRKi5saWZlcGhh
cm1hY3kuaWWCFSoubWFrZXVwY2FydGVsLmNvbS5hdYIUKi5tY3N0YWdpbmcud29y
eC5jb22CDyoubW90aGVyY2FyZS5wa4IOKi5ub3ZlbXdlYi5jb22CEioucGF1bG1p
dGNoZWxsLmNvbYIWKi5wb25pY29zbWV0aWNzLmNvbS5hdYIOKi5wcmVjaXNpb24u
Y2yCFSoucmVnaW5hZmVzdGFzLmNvbS5icoINKi5yaXRlYWlkLmNvbYIVKi5yb3Nl
YW5kdGhvcm5lLmNvLm56ghMqLnJvc2VhbmR0aG9ybmUuY29tghYqLnJvc2VhbmR0
aG9ybmUuY29tLmF1ghYqLnNlcXVlbmNpbmcucm9jaGUuY29tgg8qLnNvbGFyaXNj
by5jb22CEiouc29sYXJpc2NvLmNvbS50coIbKi5zeW5kaWNhdGVkaXN0cmlidXRp
b24uY29tgiIqLnVubGIyYmNvbW0xLnVuaWxldmVyc2VydmljZXMuY29tggwqLnYy
a2FydC5jb22CDSoudmFsdWxvdHMuY2GCDioudmFsdWxvdHMuY29tghUqLnZhbHVs
b3RzZm9vZG1haWwuY2GCDyoud2FsbHF1ZXN0LmNvbYIOKi53b29kbWl6ZXIucGyC
FSoud29vZG1pemVyZ2xvYmFsLmNvbYIKKi53b3J4LmNvbYIKKi56dWlraS5pdIIU
MS04MDAtc2hhdmVkLWljZS5jb22CD2FoZmx1aWR0ZWNoLmNvbYIVYXBwbGllZGZs
dWlkcG93ZXIubmV0ghpiMmIyYy51bmlsZXZlcnNlcnZpY2VzLmNvbYIXYmVkYmF0
aGFuZGJleW9uZC5jb20ubXiCCGJvYnV4LmNhgghib2J1eC5jaIILYm9idXguY28u
aWyCC2JvYnV4LmNvLm56ggtib2J1eC5jby51a4IJYm9idXguY29tggxib2J1eC5j
b20uYXWCCGJvYnV4LmRlgghib2J1eC5ldYIIYm9idXguZnKCCGJvYnV4Lmhrgghi
b2J1eC5pdIIIYm9idXguanCCCGJvYnV4Lm5sgghib2J1eC5zZ4IMYm9keWdsb3Zl
LmV1ggtjb3l1Y2hpLmNvbYIMY3BzY2hhcHMuY29tggtlc21pLmNvbS5hdYINZ2Ft
ZXhwcmVzcy52Z4IMZ3JhYmFndW4uY29tghVoYXdhaWlhbnNoYXZlZGljZS5jb22C
F2hlcml0YWdlcGFydHNjZW50ZXIuY29tgg1odWdoZXNpbmQuY29tggprZW5zaWUu
Y29tggxraW5nc3Bhbi5jb22CC2xjY29pbnMuY29tghFsZ2VvbmxpbmVzaG9wLmNv
bYIPbGlmZXBoYXJtYWN5LmllghNtYWtldXBjYXJ0ZWwuY29tLmF1gg1tb3RoZXJj
YXJlLnBrggxub3ZlbXdlYi5jb22CEHBhdWxtaXRjaGVsbC5jb22CFHBvbmljb3Nt
ZXRpY3MuY29tLmF1ggxwcmVjaXNpb24uY2yCC3JpdGVhaWQuY29tghNyb3NlYW5k
dGhvcm5lLmNvLm56ghFyb3NlYW5kdGhvcm5lLmNvbYIUcm9zZWFuZHRob3JuZS5j
b20uYXWCDXNvbGFyaXNjby5jb22CEHNvbGFyaXNjby5jb20udHKCGXN5bmRpY2F0
ZWRpc3RyaWJ1dGlvbi5jb22CIHVubGIyYmNvbW0xLnVuaWxldmVyc2VydmljZXMu
Y29tggp2MmthcnQuY29tggt2YWx1bG90cy5jYYIMdmFsdWxvdHMuY29tghN2YWx1
bG90c2Zvb2RtYWlsLmNhgg13YWxscXVlc3QuY29tggx3b29kbWl6ZXIucGyCE3dv
b2RtaXplcmdsb2JhbC5jb22CCHdvcnguY29tggh6dWlraS5pdDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJV
nQ2UWOYwHQYDVR0OBBYEFOFQA6HIKwPDdSY4pafihqqxu+TXMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA
AAFvpJTjNQAABAMASDBGAiEA+nUQMHUwzClhwxUDW0gVqYC9ZYZ4csjt/QmaAHWL
yTcCIQCT0CKrvIPSoBsSZvDA+i7L4xU2OQQJNdVUOd1JNhBdAAB1AO7Ale6NcmQP
kuPDuRvHEqNpagl7S2oaFDjmR7LL7cX5AAABb6SU4vUAAAQDAEYwRAIgIAGCxaqV
jfKXyxHSBaw5xGCj103XX1SQmBktioh9UTACIEVeSOSnY6CbXTW4YbWhd76NE/st
xLJS1DfVqZkOhfRdMA0GCSqGSIb3DQEBCwUAA4IBAQBH12BusNZxUPf1E6aPU3Z1
KjWvRzdoIraGCaIXjDgkf0w67nxcT41ySk9GcrLWe1Gm4N++UJizEokesBRmXssh
G6e1oMuqV8fVqpaiPJ1C0c2eGeDjeEX37dnO9NDQQCqPN2hdyKLQHVi3/SPQuQJJ
KVaOMlHDI5hL3MI8W7wp+DQm3tDRU/MFzbeKdFwfMXreZPYjE00+20iyvVw/GLdS
FJHfq9LFuqhyUzxyPvKt2oAB8GntIsYRdUQveJsphWsyBEXWgPYm4k/v/ZjBOPHd
3P2Vo3UfFlF6AAvi2vMBfjjfNGfD/+LTa8yR7pkz+lgAbuVFc3UBrft+dvi/myOi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlFOdERrpC/p+/TUFIaW
RJkAY36R/ZWkwawqUFu/ZHQuCMFlALkmQviAELM7rBT0ojsFAYiKiklUgZcqdsp1
FSEwPWLfi2G48ItGQPuHCx4I4nIqtEp21ER387PJEvYpEVqssLUIMWbJl3kPIAMe
HeIXFUBea6u96KnW0f6YGjSC65S7SsQBal66O8hblaoUZoqF68M98KRCDMIImrs1
Dao/nOIP41bEnOQGvIcV8Jx7Azl6F5oRjwDN88qV5gS6TGg5TRvpjURPiXw2XvVC
f+cRF+f0m5hm3VX2fcg23NM5ja/v5CVIMFAWDS6U0QpZh3r0gVXuu81kSOZ5CVw3
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12930717160004114673403955570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 15:03:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 15:03:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magentocloud32.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24530324873942258504096346748498578352184921331265401378552159288735131077634774315728162996940962788589111813766318105798326647744122209965683685355676051708612705435160707181949095181352078569698465071106975784512414628333614883676650815899029289062802959195721500634569155909453399405099625826506847415547056953831028424092536458194714078871670904433839135176959451158387826643485762166047673078232322774151526242706415971941439982798038314555973331189031460822469968104743073128967463674681479694227131816905054131584745368187218295084811758897795950572452005854841251115132166013434405098029500477957527291311979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2012 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentocloud32.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1-800-shaved-ice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahfluidtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appliedfluidpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2b2c.unileverservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedbathandbeyond.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodyglove.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coyuchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpschaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esmi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamexpress.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grabagun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiianshavedice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagepartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hughesind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kensie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lccoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgeonlineshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifepharmacy.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeupcartel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcstaging.worx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mothercare.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novemweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulmitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponicosmetics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precision.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reginafestas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riteaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseandthorne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseandthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseandthorne.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sequencing.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarisco.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syndicatedistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlb2bcomm1.unileverservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2kart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valulots.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valulots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valulotsfoodmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmizer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmizerglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuiki.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-800-shaved-ice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahfluidtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedfluidpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b2c.unileverservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedbathandbeyond.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobux.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyglove.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coyuchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpschaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamexpress.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grabagun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianshavedice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagepartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hughesind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lccoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgeonlineshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepharmacy.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeupcartel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mothercare.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novemweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulmitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponicosmetics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precision.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riteaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseandthorne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseandthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseandthorne.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarisco.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndicatedistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlb2bcomm1.unileverservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2kart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valulots.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valulots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valulotsfoodmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmizer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmizerglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuiki.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e15003a1c82b03c3752638a5a7e286aab1bbe4d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016fa494e3350000040300483046022100fa7510307530cc2961c315035b4815a980bd65867872c8edfd099a00758bc93702210093d022abbc83d2a01b1266f0c0fa2ecbe3153639040935d55439dd4936105d00007500eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000016fa494e2f500000403004630440220200182c5aa958df297cb11d205ac39c460a3d74dd75f549098192d8a887d51300220455e48e4a763a09b5d35b861b5a177be8d13fb2dc4b252d437d5a9990e85f45d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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