vpn.nelsonbostock.com

Issued by GlobalSign Organization Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:a1:39:80:b3:fb:83:6c:23:af:fe:9a:c0:79:9a:0a:69 was issued on by GlobalSign nv-sa .

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate subjectAltName '[Lyncdiscover.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[LyncdiscoverInternal.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[autodiscover.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[dialin.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[gateway.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[lync.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[lyncadmin.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[lyncedge.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[mail.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[meet.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[mx1.nbg.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[owa.nbg.local]' contains an internal server name

Nelson Bostock Group Ltd

Organization: Nelson Bostock Group Ltd
Organization unit: PAR62699_nelsonbostock
State / Province: London
Locality: London
Country: gb

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: London
Locality: London
Country: gb

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:a1:39:80:b3:fb:83:6c:23:af:fe:9a:c0:79:9a:0a:69
Serial Number (int): 1492352483226965580202498548522717550348905
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 38:4b:8b:8f:fb:6f:9d:a7:33:2a:67:3a:87:48:67:4a:62:d6:96:c4
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 3e:0a:b6:18:dc:63:7c:ef:df:15:f9:a3:72:2b:d1:a0:dc:27:b7:2f
Fingerprint (sha256): ce:e9:4f:24:4d:03:28:f9:30:5d:85:76:be:2b:50:97:4e:d7:bf:4b:ff:3b:5d:cd:32:55:ff:bc:03:4b:e6:a5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for the current certificate on vpn.nelsonbostock.com
22
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.nelsonbostock.com
autodiscover.nelsonbostock.com
mail.nelsonbostock.com
owa.nelsonbostock.com
Lyncdiscover.nelsonbostock.com
LyncdiscoverInternal.nelsonbostock.com
dialin.nelsonbostock.com
gateway.nelsonbostock.com
meet.nelsonbostock.com
sip.nelsonbostock.com
Lyncdiscover.nbg.local
LyncdiscoverInternal.nbg.local
autodiscover.nbg.local
dialin.nbg.local
gateway.nbg.local
lync.nbg.local
lyncadmin.nbg.local
lyncedge.nbg.local
mail.nbg.local
meet.nbg.local
mx1.nbg.local
owa.nbg.local

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgISESGhOYCz+4NsI6/+msB5mgppMA0GCSqGSIb3DQEBBQUA MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw HhcNMTIwNzI1MDc0MjA4WhcNMTUwMzIzMTAxMDEwWjCBkzELMAkGA1UEBhMCZ2Ix DzANBgNVBAgTBkxvbmRvbjEPMA0GA1UEBxMGTG9uZG9uMR8wHQYDVQQLDBZQQVI2 MjY5OV9uZWxzb25ib3N0b2NrMSEwHwYDVQQKExhOZWxzb24gQm9zdG9jayBHcm91 cCBMdGQxHjAcBgNVBAMTFXZwbi5uZWxzb25ib3N0b2NrLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAK/9g8X8zKgzIazdh2XDe+Oeszuek5d63ax8 ehJX5BV57KzV2Vf3S98TH42Wq4rTPCV0XpRpsgaY9oDHzfmx42B7RfkwAsqI+afH KtLt6w/p71t2WQa0ZUWQ93fl6/eYMefqvt11Y5eN432pFSt2qMybbH5l9yrmgM3n vS2mH4oHOsKNqcfflaMjP01YV2izAlhVOOtnyWh/GBRH5o4l010YS0Pxb5KoF+tC /LyyK28i4WcxOaFhFnH3TFadTBgtwTyPoTL1If+YgQ7lDr4ayDsbnH4kVppqc166 muwvIevxcmT+C1wUHh03ivutWbhB4fNNFlZ5+kwIFhKe6zXmgfcCAwEAAaOCA7sw ggO3MA4GA1UdDwEB/wQEAwIFoDBMBgNVHSAERTBDMEEGCSsGAQQBoDIBFDA0MDIG CCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5 LzCCAgsGA1UdEQSCAgIwggH+ghV2cG4ubmVsc29uYm9zdG9jay5jb22CHmF1dG9k aXNjb3Zlci5uZWxzb25ib3N0b2NrLmNvbYIWbWFpbC5uZWxzb25ib3N0b2NrLmNv bYIVb3dhLm5lbHNvbmJvc3RvY2suY29tgh5MeW5jZGlzY292ZXIubmVsc29uYm9z dG9jay5jb22CJkx5bmNkaXNjb3ZlckludGVybmFsLm5lbHNvbmJvc3RvY2suY29t ghhkaWFsaW4ubmVsc29uYm9zdG9jay5jb22CGWdhdGV3YXkubmVsc29uYm9zdG9j ay5jb22CFm1lZXQubmVsc29uYm9zdG9jay5jb22CFXNpcC5uZWxzb25ib3N0b2Nr LmNvbYIWTHluY2Rpc2NvdmVyLm5iZy5sb2NhbIIeTHluY2Rpc2NvdmVySW50ZXJu YWwubmJnLmxvY2FsghZhdXRvZGlzY292ZXIubmJnLmxvY2FsghBkaWFsaW4ubmJn LmxvY2FsghFnYXRld2F5Lm5iZy5sb2NhbIIObHluYy5uYmcubG9jYWyCE2x5bmNh ZG1pbi5uYmcubG9jYWyCEmx5bmNlZGdlLm5iZy5sb2NhbIIObWFpbC5uYmcubG9j YWyCDm1lZXQubmJnLmxvY2Fsgg1teDEubmJnLmxvY2Fsgg1vd2EubmJnLmxvY2Fs MAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEUGA1Ud HwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3Nvcmdh bml6YXRpb252YWxnMi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMEcGCCsGAQUFBzAC hjtodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc29yZ2FuaXph dGlvbnZhbGcyLmNydDA7BggrBgEFBQcwAYYvaHR0cDovL29jc3AyLmdsb2JhbHNp Z24uY29tL2dzb3JnYW5pemF0aW9udmFsZzIwHQYDVR0OBBYEFDhLi4/7b52nMypn OodIZ0pi1pbEMB8GA1UdIwQYMBaAFF1Gso3ES3Qcu+31c7Y6tziPdZ5+MA0GCSqG SIb3DQEBBQUAA4IBAQB3LOnb34BoeaScha2zy8ELTmTweVIzkfNtND15jpe5WPMQ Q7xENOCD0UoxpJxgBPkhphxK4KMmHDXMojlD5Q+nBQYA/gXpujLZDUuSNdX/px0n dRdXglFDrayCNgnVsj/Y6AX4kp4mqL0vwfk3Be4C8C11eb636sOJ2k3fU3CZAiR+ dCPL4COKRZ32Iy+jZIChvGZYEnu9XAwda5R5E2/KxyAKP3r+W1gVkYqh/ewTamaG zqNVF9I2WntxTqsu5416DVs81aO6fDoAUvQznea4RbE+Ld+jijybSh9yVKEYK70s ker4Rf0Hu1WpIrxs/iVqgFwgM/8VOCWAw+nUkcMW -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/2DxfzMqDMhrN2HZcN7 456zO56Tl3rdrHx6ElfkFXnsrNXZV/dL3xMfjZaritM8JXRelGmyBpj2gMfN+bHj YHtF+TACyoj5p8cq0u3rD+nvW3ZZBrRlRZD3d+Xr95gx5+q+3XVjl43jfakVK3ao zJtsfmX3KuaAzee9LaYfigc6wo2px9+VoyM/TVhXaLMCWFU462fJaH8YFEfmjiXT XRhLQ/FvkqgX60L8vLIrbyLhZzE5oWEWcfdMVp1MGC3BPI+hMvUh/5iBDuUOvhrI OxucfiRWmmpzXrqa7C8h6/FyZP4LXBQeHTeK+61ZuEHh800WVnn6TAgWEp7rNeaB 9wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492352483226965580202498548522717550348905 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-25 07:42:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-23 10:10:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gb' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PAR62699_nelsonbostock' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nelson Bostock Group Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.nelsonbostock.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22216716146545399586326956789207260894167820377842936722337474881599277614550566379283201665350065859781229357667741593848539971881573145163482611601131831000033603991748514749108722787260262311339873325333074014910221919742851176322433119854601626844842833518767468053059319161154393254051407367652248032747566989853210396252487685897952564437542232905291872306229383469524751614106593057216905713017765059175345770167878118298177696566964084749886322723683589087660133138752699412529023871340395081976570552081206116941000537073221493196544212832966114582072940595308353365704027964371902759957372777191126430286327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nelsonbostock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncadmin.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncedge.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.nbg.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.nbg.local' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 384b8b8ffb6f9da7332a673a8748674a62d696c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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