ssl4344.cloudflare.com

Issued by GlobalSign Organization Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:49:37:39:20:8d:09:2e:5a:bb:51:6d:1b:29:92:97:2b was issued on by GlobalSign nv-sa .

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: CA
Locality: San Francisco
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 11:21:49:37:39:20:8d:09:2e:5a:bb:51:6d:1b:29:92:97:2b
Serial Number (int): 1492235499327010977655360622703500850272043
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 50:64:b3:bc:f2:ef:85:bc:f5:37:73:20:9e:d8:a8:c6:35:5f:ee:74
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 08:45:d6:b3:a7:e8:46:bb:ac:71:f9:58:c6:bc:37:d7:cb:51:75:b0
Fingerprint (sha256): d4:7b:17:50:7f:06:dc:b8:cb:78:6d:21:81:28:0d:99:d4:bb:7b:31:81:48:67:e6:c8:97:c4:85:80:6a:53:90

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for the current certificate on ssl4344.cloudflare.com
39
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl4344.cloudflare.com
*.ivywriting.com
ivywriting.com
euclidendo.com
*.euclidendo.com
*.athena-project.net
anonymous-rs.org
*.customstamps.com
*.personalendo.com
screaminpeach.com
*.crystalcoutureinc.com
*.engagesmarter.com
*.hinoperu.com.pe
*.gaudiumpress.org
betgol33.com
gaudiumpress.org
castlerockendodontics.com
deepcoverage.com
engagesmarter.com
*.castlerockendodontics.com
*.sidelinesizzle.com
personalendo.com
*.btc-trade.ru
*.screaminpeach.com
hinoperu.com.pe
btc-trade.ru
*.smart-pos.ca
smart-pos.ca
cuk.pw
*.anonymous-rs.org
*.betgol33.com
crystalcoutureinc.com
litecoin.org
*.deepcoverage.com
customstamps.com
*.litecoin.org
athena-project.net
sidelinesizzle.com
*.cuk.pw

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIH5zCCBs+gAwIBAgISESFJNzkgjQkuWrtRbRspkpcrMA0GCSqGSIb3DQEBBQUA MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw HhcNMTMxMDI3MjExNDA3WhcNMTgwNjA1MTQyNjU0WjBuMQswCQYDVQQGEwJVUzEL MAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGTAXBgNVBAoTEENs b3VkRmxhcmUsIEluYy4xHzAdBgNVBAMTFnNzbDQzNDQuY2xvdWRmbGFyZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfymUiN8GMJ1kDuLyh5IJ aWeYCUedZeEd8sQBtGNop3k1yaptSh6dasbeNNxClzBIepCH7aZdPp8DAnCF/HL+ DBdpaZOblkIwRsV3yQcsHSHbJFU3DAQpSpKhJdnCZQ9h+fUPDp6EY/msoXcdu2JA Il4s1EkYJRiRIrXeAn0GFx4yHmChtuqsMxYF/mVyLjrZxmltGMwKT7nig5/pHGGy 0GtY6M4aPVgrsqbkQI/D8nvijS0klbAy64lCzG94sSZa56QtdBrcLXpx9MqkG/As OkCwysqdvz5Mv1+Z/HuRfRIgQQYrXOn2tnKFHvmxsidG6dI8Ar7aUABylU5uvkb7 AgMBAAGjggSOMIIEijAOBgNVHQ8BAf8EBAMCBaAwSQYDVR0gBEIwQDA+BgZngQwB AgIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVw b3NpdG9yeS8wggLhBgNVHREEggLYMIIC1IIWc3NsNDM0NC5jbG91ZGZsYXJlLmNv bYIQKi5pdnl3cml0aW5nLmNvbYIOaXZ5d3JpdGluZy5jb22CDmV1Y2xpZGVuZG8u Y29tghAqLmV1Y2xpZGVuZG8uY29tghQqLmF0aGVuYS1wcm9qZWN0Lm5ldIIQYW5v bnltb3VzLXJzLm9yZ4ISKi5jdXN0b21zdGFtcHMuY29tghIqLnBlcnNvbmFsZW5k by5jb22CEXNjcmVhbWlucGVhY2guY29tghcqLmNyeXN0YWxjb3V0dXJlaW5jLmNv bYITKi5lbmdhZ2VzbWFydGVyLmNvbYIRKi5oaW5vcGVydS5jb20ucGWCEiouZ2F1 ZGl1bXByZXNzLm9yZ4IMYmV0Z29sMzMuY29tghBnYXVkaXVtcHJlc3Mub3Jnghlj YXN0bGVyb2NrZW5kb2RvbnRpY3MuY29tghBkZWVwY292ZXJhZ2UuY29tghFlbmdh Z2VzbWFydGVyLmNvbYIbKi5jYXN0bGVyb2NrZW5kb2RvbnRpY3MuY29tghQqLnNp ZGVsaW5lc2l6emxlLmNvbYIQcGVyc29uYWxlbmRvLmNvbYIOKi5idGMtdHJhZGUu cnWCEyouc2NyZWFtaW5wZWFjaC5jb22CD2hpbm9wZXJ1LmNvbS5wZYIMYnRjLXRy YWRlLnJ1gg4qLnNtYXJ0LXBvcy5jYYIMc21hcnQtcG9zLmNhggZjdWsucHeCEiou YW5vbnltb3VzLXJzLm9yZ4IOKi5iZXRnb2wzMy5jb22CFWNyeXN0YWxjb3V0dXJl aW5jLmNvbYIMbGl0ZWNvaW4ub3JnghIqLmRlZXBjb3ZlcmFnZS5jb22CEGN1c3Rv bXN0YW1wcy5jb22CDioubGl0ZWNvaW4ub3JnghJhdGhlbmEtcHJvamVjdC5uZXSC EnNpZGVsaW5lc2l6emxlLmNvbYIIKi5jdWsucHcwCQYDVR0TBAIwADAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDov L2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZhbGcyLmNybDCB lgYIKwYBBQUHAQEEgYkwgYYwRwYIKwYBBQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xv YmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsZzIuY3J0MDsGCCsG AQUFBzABhi9odHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRp b252YWxnMjAdBgNVHQ4EFgQUUGSzvPLvhbz1N3MgntioxjVf7nQwHwYDVR0jBBgw FoAUXUayjcRLdBy77fVztjq3OI91nn4wDQYJKoZIhvcNAQEFBQADggEBALRxj9DW IbdNqWni1aXPuMzwq9cW+u3kQLaWos0rvfW2Mur0NcqMeSsnwNpqj7YqCWgr6ZHH 4nyTjCEuajp994EwvmSP1sgUz1USC8oWEs70bFkuJD6C4/wLGwL4ZiyKBgtAM9cK xFLd6wqWFbg+IV69UNRC9V5BRe/TkSfmxkTMcPHdTnT5+87YGW70vAs5BKfnJ6gH +2FIBU0pybENydY117IdExT+crOevFIUQOrwhxDgNbHAvvyQ0wvMmf4a2XN1mFnS r5cfCY6cfJNCBlVbIHEbXZfoWioHTskffepnAuHsxXNJZxDrSTHUYTl5mSXwcnVr dDEUpGvFtt0rJTg= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH8plIjfBjCdZA7i8oeS CWlnmAlHnWXhHfLEAbRjaKd5NcmqbUoenWrG3jTcQpcwSHqQh+2mXT6fAwJwhfxy /gwXaWmTm5ZCMEbFd8kHLB0h2yRVNwwEKUqSoSXZwmUPYfn1Dw6ehGP5rKF3Hbti QCJeLNRJGCUYkSK13gJ9BhceMh5gobbqrDMWBf5lci462cZpbRjMCk+54oOf6Rxh stBrWOjOGj1YK7Km5ECPw/J74o0tJJWwMuuJQsxveLEmWuekLXQa3C16cfTKpBvw LDpAsMrKnb8+TL9fmfx7kX0SIEEGK1zp9rZyhR75sbInRunSPAK+2lAAcpVObr5G +wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492235499327010977655360622703500850272043 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-27 21:14:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 14:26:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4344.cloudflare.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22280647801753481586482684860187074699096566927031029860245889513427909322002493915919397926130652988305779280960137775375175718179484255282810818514952885529736638922163486830066155536714895404024378475915897665461292441429850422247329366639046036530266138902991606894146340776939405396223374530738087406012265427153554242757593164871606872022282663298561546502392096210133911234762104207906776541967275592203922306376587453550599407046798737737391726442848941028637432484910958107349383545177745171700049456874470780840661076141228620709838760813216126503738297967760032652379778538683224374123676116199985821665019 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4344.cloudflare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivywriting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivywriting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euclidendo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euclidendo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athena-project.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anonymous-rs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customstamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalendo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screaminpeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystalcoutureinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engagesmarter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hinoperu.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaudiumpress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betgol33.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaudiumpress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlerockendodontics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepcoverage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagesmarter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castlerockendodontics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidelinesizzle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalendo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btc-trade.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screaminpeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinoperu.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btc-trade.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smart-pos.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-pos.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuk.pw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anonymous-rs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betgol33.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalcoutureinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litecoin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepcoverage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customstamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litecoin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena-project.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidelinesizzle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuk.pw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5064b3bcf2ef85bcf53773209ed8a8c6355fee74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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