ssl2858.cloudflare.com

Issued by GlobalSign Organization Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:99:66:d6:ba:48:62:2a:77:86:e6:e0:93:f8:b8:be:59 was issued on by GlobalSign nv-sa .

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: CA
Locality: San Francisco
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 11:21:99:66:d6:ba:48:62:2a:77:86:e6:e0:93:f8:b8:be:59
Serial Number (int): 1492342084801144319972962418303938734898777
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: d0:9d:16:62:c5:da:3d:fa:a9:74:bc:70:79:dc:c7:64:b4:dd:7f:0c
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 64:f2:be:53:09:6f:8e:3a:4d:2e:52:94:1f:ca:e0:a0:37:9e:8b:f4
Fingerprint (sha256): 5d:31:1e:c2:a1:1a:df:4e:9b:80:9e:ef:d0:4f:fb:e4:11:80:5e:57:ac:86:fe:4d:f7:b9:69:61:83:7e:62:65

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for the current certificate on ssl2858.cloudflare.com
35
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2858.cloudflare.com
newgrounds.com
gigisgarb.com
*.istpravda.ru
stockpricetoday.com
minecraftserverlijst.nl
*.belaruspartizan.org
organicauthority.com
slungogame.com
*.adbuck.com
adbuck.com
belaruspartizan.org
dmkburgerbar.com
*.newgrounds.com
spacecowboyboots.com
*.stockpricetoday.com
ovisaries.info
*.dmkburgerbar.com
welovegadgets.nl
*.ovisaries.info
*.welovegadgets.nl
forexrate.co.uk
*.grasshopper.com
*.slungogame.com
*.spacecowboyboots.com
*.forexrate.co.uk
*.minecraftserverlijst.nl
istpravda.ru
grasshopper.com
*.nv-online.info
nv-online.info
*.gigisgarb.com
*.organicauthority.com
*.ungrounded.net
ungrounded.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHqTCCBpGgAwIBAgISESGZZta6SGIqd4bm4JP4uL5ZMA0GCSqGSIb3DQEBBQUA MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw HhcNMTQwMjE4MTIzMTA2WhcNMTgwMTE1MTkyNTIzWjBuMQswCQYDVQQGEwJVUzEL MAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGTAXBgNVBAoTEENs b3VkRmxhcmUsIEluYy4xHzAdBgNVBAMTFnNzbDI4NTguY2xvdWRmbGFyZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNp2ls+gal3TaT7b/ZrHr W8VENAMsE9Nyb9aL1kk2ReVs62SsKv3sYeiXW5g87mrx1PiGVK4tnoW5DNTJefeD uXJRKgtXbF/wgMaOLJIDNSaq1TlakNogDZXgxxwPz8crMpIqRjF0sxDLB8DE18fA 4dow3ii/xvcavq07YkoNLvNrr1QwW/7ytAHWEe9UzcL4HO7hRfHEBVyrLV98f09d L81gLRseNaSlEBDTcOVrQlUvlxmyI9ydwCmqU2NqFlHBHvHPOgf/jqvoupGTtdQZ 8jHjM6WZd97ZQuRB2aVjeFeOxM7rpNP+UY7W4AnU+CHamUdD4XRuzfIPv1JVuV+z AgMBAAGjggRQMIIETDAOBgNVHQ8BAf8EBAMCBaAwSQYDVR0gBEIwQDA+BgZngQwB AgIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVw b3NpdG9yeS8wggKjBgNVHREEggKaMIICloIWc3NsMjg1OC5jbG91ZGZsYXJlLmNv bYIObmV3Z3JvdW5kcy5jb22CDWdpZ2lzZ2FyYi5jb22CDiouaXN0cHJhdmRhLnJ1 ghNzdG9ja3ByaWNldG9kYXkuY29tghdtaW5lY3JhZnRzZXJ2ZXJsaWpzdC5ubIIV Ki5iZWxhcnVzcGFydGl6YW4ub3JnghRvcmdhbmljYXV0aG9yaXR5LmNvbYIOc2x1 bmdvZ2FtZS5jb22CDCouYWRidWNrLmNvbYIKYWRidWNrLmNvbYITYmVsYXJ1c3Bh cnRpemFuLm9yZ4IQZG1rYnVyZ2VyYmFyLmNvbYIQKi5uZXdncm91bmRzLmNvbYIU c3BhY2Vjb3dib3lib290cy5jb22CFSouc3RvY2twcmljZXRvZGF5LmNvbYIOb3Zp c2FyaWVzLmluZm+CEiouZG1rYnVyZ2VyYmFyLmNvbYIQd2Vsb3ZlZ2FkZ2V0cy5u bIIQKi5vdmlzYXJpZXMuaW5mb4ISKi53ZWxvdmVnYWRnZXRzLm5sgg9mb3JleHJh dGUuY28udWuCESouZ3Jhc3Nob3BwZXIuY29tghAqLnNsdW5nb2dhbWUuY29tghYq LnNwYWNlY293Ym95Ym9vdHMuY29tghEqLmZvcmV4cmF0ZS5jby51a4IZKi5taW5l Y3JhZnRzZXJ2ZXJsaWpzdC5ubIIMaXN0cHJhdmRhLnJ1gg9ncmFzc2hvcHBlci5j b22CECoubnYtb25saW5lLmluZm+CDm52LW9ubGluZS5pbmZvgg8qLmdpZ2lzZ2Fy Yi5jb22CFioub3JnYW5pY2F1dGhvcml0eS5jb22CECoudW5ncm91bmRlZC5uZXSC DnVuZ3JvdW5kZWQubmV0MAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZ2xvYmFsc2ln bi5jb20vZ3MvZ3Nvcmdhbml6YXRpb252YWxnMi5jcmwwgZYGCCsGAQUFBwEBBIGJ MIGGMEcGCCsGAQUFBzAChjtodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2Nh Y2VydC9nc29yZ2FuaXphdGlvbnZhbGcyLmNydDA7BggrBgEFBQcwAYYvaHR0cDov L29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsZzIwHQYDVR0O BBYEFNCdFmLF2j36qXS8cHncx2S03X8MMB8GA1UdIwQYMBaAFF1Gso3ES3Qcu+31 c7Y6tziPdZ5+MA0GCSqGSIb3DQEBBQUAA4IBAQB9xa7RRVxOpHo8lcy2IAkPsjQu I1wb64BgUal13euSMcDR89uX+PmYYp1wXnOBnjsPhCPBcM63uTfwyFSsg2vIgvN/ 79Su8EbQnQZEJlXIc0dMKe9D0C+rF16uYyddZ6yViWT6zCfkVKCz4T93qZObeKW6 V5DUDhtl+yMWSl0C+W2enTng6zJHk9vjbJYhUz9vpNu7Iw0iHehk4dTq/P3xGjJN bXaSv/d16Ws+E1j9fsqAk3oSgZdI0Zyrqe/35w/Lsanucagr6RKvF8Z6BeVxvhhe rcL48ntXUBFUL4r0wXnhkH9aE4713o5s/wGFY7gjHuz4PAL2RV9LH3nR6Y6P -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DadpbPoGpd02k+2/2ax 61vFRDQDLBPTcm/Wi9ZJNkXlbOtkrCr97GHol1uYPO5q8dT4hlSuLZ6FuQzUyXn3 g7lyUSoLV2xf8IDGjiySAzUmqtU5WpDaIA2V4MccD8/HKzKSKkYxdLMQywfAxNfH wOHaMN4ov8b3Gr6tO2JKDS7za69UMFv+8rQB1hHvVM3C+Bzu4UXxxAVcqy1ffH9P XS/NYC0bHjWkpRAQ03Dla0JVL5cZsiPcncApqlNjahZRwR7xzzoH/46r6LqRk7XU GfIx4zOlmXfe2ULkQdmlY3hXjsTO66TT/lGO1uAJ1Pgh2plHQ+F0bs3yD79SVblf swIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492342084801144319972962418303938734898777 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-18 12:31:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-15 19:25:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2858.cloudflare.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26789452712326019406032110471995629338384360175049154881389834516764648425597300416184708615321263736174790399586817621639574168890673260919884958214722768125382029158445788386879727271368560743969372162894068846916487496490185386489310081493046119674920877875094945060596333630733624325483319249037102150715566967695144976056164590836151732881385120073199734291215404213260409227587858640400488061214300562899600935382588376108053854775537315753025375108451949248913103190568587941463822090274582025493674879652684526279294909918624929219196272950549915299646425605082709368239596507928043033236756570651809268981683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (666 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2858.cloudflare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgrounds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigisgarb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istpravda.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockpricetoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftserverlijst.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belaruspartizan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicauthority.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slungogame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adbuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adbuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belaruspartizan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmkburgerbar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newgrounds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacecowboyboots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockpricetoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovisaries.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmkburgerbar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovegadgets.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovisaries.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welovegadgets.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexrate.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grasshopper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slungogame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacecowboyboots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexrate.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftserverlijst.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istpravda.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grasshopper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nv-online.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nv-online.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigisgarb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organicauthority.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ungrounded.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ungrounded.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d09d1662c5da3dfaa974bc7079dcc764b4dd7f0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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