ssl2500.cloudflare.com

- CloudFlare, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:ea:6d:f1:3d:52:a0:a9:dc:48:2c:ce:66:d8:a6:ca:1a was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:ea:6d:f1:3d:52:a0:a9:dc:48:2c:ce:66:d8:a6:ca:1a
Serial Number (int): 1492449789152605617291871259725103184136730
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ad:e6:31:2e:7c:17:a8:8b:64:41:72:f5:cf:02:b9:25:f4:c0:90:41
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): e7:17:7c:74:31:75:f5:64:ac:a4:c7:ee:bd:f1:1c:a2:90:48:94:09
Fingerprint (sha256): 62:76:2b:1b:8d:0b:c2:81:75:54:ad:03:fa:cf:96:89:56:0d:6d:46:89:43:ed:a8:18:93:26:d9:4d:71:4b:3b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate ssl2500.cloudflare.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2500.cloudflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2500.cloudflare.com
york.fm
*.abelssoft.de
*.abelssoft.net
*.agentlk.com
*.alfareserve.com
*.colettepatterns.com
*.coletterie.com
*.deal-of-the-week.de
*.ehealthforum.com
*.englandford.com
*.ibe.net
*.jacadatest.com
*.lideresacademicos.net
*.molesworthfruit.co.nz
*.mtlaw.net
*.pampaseg.org
*.rtsportscast.com
*.sewalongs.com
*.soberrecovery.com
*.vacationtimesharerentals.com
*.venaltecqueretaro.com
*.visual-ivr.com
*.york.fm
abelssoft.de
abelssoft.net
agentlk.com
alfareserve.com
colettepatterns.com
coletterie.com
deal-of-the-week.de
ehealthforum.com
englandford.com
ibe.net
jacadatest.com
lideresacademicos.net
molesworthfruit.co.nz
mtlaw.net
pampaseg.org
rtsportscast.com
sewalongs.com
soberrecovery.com
vacationtimesharerentals.com
venaltecqueretaro.com
visual-ivr.com

Other certificates including the domain name cloudflare.com

(limited to 100 certificates)
ssl6628.cloudflare.com
ssl2831.cloudflare.com
ssl4246.cloudflare.com
ssl84317.cloudflare.com
ssl2262.cloudflare.com
ssl2812.cloudflare.com
ssl7337.cloudflare.com
ssl7575.cloudflare.com
ssl6377.cloudflare.com
ssl6480.cloudflare.com
ssl2778.cloudflare.com
ssl7159.cloudflare.com
ssl6504.cloudflare.com
ssl2076.cloudflare.com
ssl93554.cloudflare.com
ssl4486.cloudflare.com
ssl2515.cloudflare.com
ssl7543.cloudflare.com
ssl4852.cloudflare.com
ssl7390.cloudflare.com
ssl4333.cloudflare.com
ssl4641.cloudflare.com
ssl7477.cloudflare.com
ssl5571.cloudflare.com
ssl2835.cloudflare.com
ssl2562.cloudflare.com
ssl83992.cloudflare.com
ssl2717.cloudflare.com
ssl2906.cloudflare.com
ssl6704.cloudflare.com
ssl2335.cloudflare.com
ssl4487.cloudflare.com
ssl6813.cloudflare.com
ssl6466.cloudflare.com
ssl6823.cloudflare.com
ssl6292.cloudflare.com
ssl7133.cloudflare.com
ssl3035.cloudflare.com
ssl2736.cloudflare.com
ssl84304.cloudflare.com
ssl2339.cloudflare.com
ssl2571.cloudflare.com
ssl3107.cloudflare.com
ssl2992.cloudflare.com
ssl2652.cloudflare.com
ssl5735.cloudflare.com
ssl6558.cloudflare.com
ssl3033.cloudflare.com
ssl84327.cloudflare.com
ssl3097.cloudflare.com
ssl4011.cloudflare.com
ssl7241.cloudflare.com
ssl86304.cloudflare.com
ssl6657.cloudflare.com
ssl7257.cloudflare.com
ssl6846.cloudflare.com
ssl83886.cloudflare.com
ssl7072.cloudflare.com
ssl6738.cloudflare.com
ssl6466.cloudflare.com
ssl2446.cloudflare.com
ssl2393.cloudflare.com
ssl2387.cloudflare.com
ssl2312.cloudflare.com
ssl4811.cloudflare.com
ssl7348.cloudflare.com
ssl6272.cloudflare.com
ssl93550.cloudflare.com
ssl2071.cloudflare.com
ssl6996.cloudflare.com
ssl84313.cloudflare.com
ssl2920.cloudflare.com
ssl2192.cloudflare.com
ssl82116.cloudflare.com
ssl2556.cloudflare.com
ssl7322.cloudflare.com
ssl6552.cloudflare.com
ssl6598.cloudflare.com
ssl7542.cloudflare.com
ssl2523.cloudflare.com
ssl6953.cloudflare.com
ssl6950.cloudflare.com
ssl85870.cloudflare.com
ssl2531.cloudflare.com
ssl2764.cloudflare.com
ssl4118.cloudflare.com
ssl2113.cloudflare.com
ssl82161.cloudflare.com
ssl2722.cloudflare.com
ssl2084.cloudflare.com
ssl3038.cloudflare.com
ssl4140.cloudflare.com
ssl83885.cloudflare.com
ssl7570.cloudflare.com
ssl6447.cloudflare.com
ssl2734.cloudflare.com
ssl3011.cloudflare.com
ssl8548.cloudflare.com
ssl2113.cloudflare.com
ssl2419.cloudflare.com

Certificate

The complete raw certificate details for ssl2500.cloudflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1aN/nUSHrD9JjWB1gzJ
zoxYglRExh8dXCoX7F8TffzVqD52ZRKzdIMLc0XAyNqWh9g4w/2Y4EZ+voxNn2LG
xteYwgD4Nnl6GOfjdgMyTVnqo4YcXVMw2AQEENuYqly63ua4H/y2dPnGDaFrbl1s
X5OjrLDt48DZZOxrNdPu/Wsp7oalAAtkrjp4uFy2UZAhWysqYA5XDvXjju8bAyHv
3ok4YRyH5vO2lOOf23bQAOg/P4uOh/jWTO3ANzy/jOdPHu8Y6IuEcsb0MZmaa3eg
QeNiC0rD2v258kJbU7W6h0AJHPdo5dg53KXMBbpJXO3Et/AgTLuc9qmFUIJUezji
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492449789152605617291871259725103184136730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-21 06:34:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-12 09:55:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2500.cloudflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20619525405034999575666410607169351327542702060619314929671747767038859224663844455357854509360415779334706556611259246792397435110260982878754891789758145233597227591752690683540939398184189583683798070995154918538150840999098931257979751454847651628680134501245773891197921831183691892608285973098005190232389951019976272672677301960963937494605374419748631580488651671727781982041738282076145751933775067395572656197086255280375836085930219784638157224222959484913729461808096774874647467260032442908108075705442452400197349716440132701859276953628852162196051391819899350214826034329177874473585849675984261407387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (828 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2500.cloudflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'york.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abelssoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abelssoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agentlk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfareserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colettepatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coletterie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deal-of-the-week.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehealthforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englandford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacadatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lideresacademicos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.molesworthfruit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pampaseg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtsportscast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sewalongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soberrecovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacationtimesharerentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venaltecqueretaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visual-ivr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.york.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abelssoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abelssoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentlk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfareserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colettepatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coletterie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deal-of-the-week.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehealthforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacadatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lideresacademicos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molesworthfruit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pampaseg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtsportscast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewalongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberrecovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationtimesharerentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venaltecqueretaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visual-ivr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ade6312e7c17a88b644172f5cf02b925f4c09041
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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