*.a.ssl.fastly.net
- Fastly, Inc. -
Issued by DigiCert High Assurance CA-3
About this certificate
This digital certificate with serial number 01:0b:a8:80:cb:d2:d6:74:43:07:5b:13:d6:25:d4:98 was issued on by DigiCert Inc.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:0b:a8:80:cb:d2:d6:74:43:07:5b:13:d6:25:d4:98Serial Number (int): 1389760910327358430215774630079485080
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: cc:69:24:a5:0a:c1:e4:bd:36:1b:6e:55:2b:e1:87:8d:d6:f0:33:ed
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7
Fingerprint (sha1): 0f:88:1d:70:f3:a5:26:67:a6:72:48:a8:a8:ef:10:df:80:ad:f1:b7
Fingerprint (sha256): 66:42:cc:aa:68:da:64:4e:37:ec:96:51:da:36:3c:cc:10:06:fa:0c:1a:81:e4:e7:5c:a7:78:97:11:00:22:ce
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ca3-g24.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g24.crl
Check the revocation status for certificate *.a.ssl.fastly.net
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.a.ssl.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.a.ssl.fastly.net
fast.wistia.com
purge.fastly.net
app.fastly.com
api.fastly.com
www.fastly.com
blog.fastly.com
mirrors.fastly.net
*.imgix.net
api.metacpan.org
www.metacpan.org
signin.epek.com
*.parsecdn.com
*.fastssl.net
voxer.com
www.voxer.com
*.firebase.com
sites.yammer.com
sites.staging.yammer.com
*.skimlinks.com
*.skimresources.com
assets.wantful.com
cdn.shazam.com
cdn.thinglink.me
*.fitbit.com
beta.fastly.com
*.hosts.fastly.net
control.fastly.net
*.perfectaudience.com
api.foursquare.com
*.wikia-inc.com
*.wikia.com
f.cloud.github.com
*.digitalscirocco.net
*.etsy.com
*.etsystatic.com
*.addthis.com
*.addthiscdn.com
fast.wistia.net
raw.github.com
www.userfox.com
www.shazam.com
*.assets-yammer.com
*.staging.assets-yammer.com
assets.huggies-cdn.net
beacon.fastly.com
api.kinja.com
orbit.shazamid.com
about.jstor.org
*.global.ssl.fastly.net
web.voxer.com
pypi.python.org
*.12wbt.com
www.holderdeord.no
secured.resources.infolinks.com
secured.indn.infolinks.com
play.vidyard.com
play-staging.vidyard.com
secure.img.wfrcdn.com
secure.img.josscdn.com
*.gocardless.com
widgets.pinterest.com
debug.fastly.com
maintenance.fastly.com
*.7digital.com
*.7static.com
p.datadoghq.com
*.plan3.se
new.mulberry.com
www.safariflow.com
*.stelladot.com
*.stelladotstg.com
api.altmetric.com
cdn.contentful.com
tools.fastly.net
tools.fastly.com
*.huevosbuenos.com
*.goodeggs.com
www.onelogin.com
staging.www.onelogin.com
*.fastly.picmonkey.com
*.cdn.whipplehill.net
*.whipplehill.net
cdn.media34.whipplehill.net
cdn.media56.whipplehill.net
cdn.media78.whipplehill.net
cdn.media910.whipplehill.net
*.modcloth.com
*.disquscdn.com
*.jstor.org
www.flinto.com
*.dreamhost.com
*.chartbeat.com
*.hipmunk.com
content.beaverbrooks.co.uk
*.vsco.co
secure.common.csnstores.com
www.joinos.com
staging-mobile-collector.newrelic.com
fast.wistia.com
purge.fastly.net
app.fastly.com
api.fastly.com
www.fastly.com
blog.fastly.com
mirrors.fastly.net
*.imgix.net
api.metacpan.org
www.metacpan.org
signin.epek.com
*.parsecdn.com
*.fastssl.net
voxer.com
www.voxer.com
*.firebase.com
sites.yammer.com
sites.staging.yammer.com
*.skimlinks.com
*.skimresources.com
assets.wantful.com
cdn.shazam.com
cdn.thinglink.me
*.fitbit.com
beta.fastly.com
*.hosts.fastly.net
control.fastly.net
*.perfectaudience.com
api.foursquare.com
*.wikia-inc.com
*.wikia.com
f.cloud.github.com
*.digitalscirocco.net
*.etsy.com
*.etsystatic.com
*.addthis.com
*.addthiscdn.com
fast.wistia.net
raw.github.com
www.userfox.com
www.shazam.com
*.assets-yammer.com
*.staging.assets-yammer.com
assets.huggies-cdn.net
beacon.fastly.com
api.kinja.com
orbit.shazamid.com
about.jstor.org
*.global.ssl.fastly.net
web.voxer.com
pypi.python.org
*.12wbt.com
www.holderdeord.no
secured.resources.infolinks.com
secured.indn.infolinks.com
play.vidyard.com
play-staging.vidyard.com
secure.img.wfrcdn.com
secure.img.josscdn.com
*.gocardless.com
widgets.pinterest.com
debug.fastly.com
maintenance.fastly.com
*.7digital.com
*.7static.com
p.datadoghq.com
*.plan3.se
new.mulberry.com
www.safariflow.com
*.stelladot.com
*.stelladotstg.com
api.altmetric.com
cdn.contentful.com
tools.fastly.net
tools.fastly.com
*.huevosbuenos.com
*.goodeggs.com
www.onelogin.com
staging.www.onelogin.com
*.fastly.picmonkey.com
*.cdn.whipplehill.net
*.whipplehill.net
cdn.media34.whipplehill.net
cdn.media56.whipplehill.net
cdn.media78.whipplehill.net
cdn.media910.whipplehill.net
*.modcloth.com
*.disquscdn.com
*.jstor.org
www.flinto.com
*.dreamhost.com
*.chartbeat.com
*.hipmunk.com
content.beaverbrooks.co.uk
*.vsco.co
secure.common.csnstores.com
www.joinos.com
staging-mobile-collector.newrelic.com
Certificate
The complete raw certificate details for *.a.ssl.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIODjCCDPagAwIBAgIQAQuogMvS1nRDB1sT1iXUmDANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTEzMDExODAwMDAwMFoXDTE0MDEyMzEyMDAwMFowbjELMAkGA1UE BhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xFTATBgNVBAoTDEZhc3RseSwgSW5jLjEbMBkGA1UEAwwSKi5hLnNzbC5mYXN0 bHkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujKyocwFcRkx Vl+39ynGUHbGJWDwgDJlDfqkXQFC0ThmY5eWW/3I/2ne1MOUT0LRQBRbMeyVWZiC hJ2vNFxLEELfogC6ShGEqWjtcLUE3To2oMFOpXHlpq97vK460Kj5WhC86QQ+tmBJ VWuWLTvmBJtwQNTwrFuo0zMZaRMawHGHc9I1nukpErxK/1yDCDMrEO6tqmhd0T6L sfFrxsMXTkaDNb/dSLB21Cr1U6eS5hUJDm7F9Yhoo0KRKeZEm+wlNAIblXs5pf/j nOkT8vgJtpmHL6aeUWFjZGHEghzSrS/tr227yMQwYj7J1ENdF7R5kPlBtvJnrZ0X 08SaSdU3/wIDAQABo4IKrjCCCqowHwYDVR0jBBgwFoAUUOpzidsp+xCPnuUBINTe eZlIg/cwHQYDVR0OBBYEFMxpJKUKweS9NhtuVSvhh43W8DPtMIIHgQYDVR0RBIIH eDCCB3SCEiouYS5zc2wuZmFzdGx5Lm5ldIIPZmFzdC53aXN0aWEuY29tghBwdXJn ZS5mYXN0bHkubmV0gg5hcHAuZmFzdGx5LmNvbYIOYXBpLmZhc3RseS5jb22CDnd3 dy5mYXN0bHkuY29tgg9ibG9nLmZhc3RseS5jb22CEm1pcnJvcnMuZmFzdGx5Lm5l dIILKi5pbWdpeC5uZXSCEGFwaS5tZXRhY3Bhbi5vcmeCEHd3dy5tZXRhY3Bhbi5v cmeCD3NpZ25pbi5lcGVrLmNvbYIOKi5wYXJzZWNkbi5jb22CDSouZmFzdHNzbC5u ZXSCCXZveGVyLmNvbYINd3d3LnZveGVyLmNvbYIOKi5maXJlYmFzZS5jb22CEHNp dGVzLnlhbW1lci5jb22CGHNpdGVzLnN0YWdpbmcueWFtbWVyLmNvbYIPKi5za2lt bGlua3MuY29tghMqLnNraW1yZXNvdXJjZXMuY29tghJhc3NldHMud2FudGZ1bC5j b22CDmNkbi5zaGF6YW0uY29tghBjZG4udGhpbmdsaW5rLm1lggwqLmZpdGJpdC5j b22CD2JldGEuZmFzdGx5LmNvbYISKi5ob3N0cy5mYXN0bHkubmV0ghJjb250cm9s LmZhc3RseS5uZXSCFSoucGVyZmVjdGF1ZGllbmNlLmNvbYISYXBpLmZvdXJzcXVh cmUuY29tgg8qLndpa2lhLWluYy5jb22CCyoud2lraWEuY29tghJmLmNsb3VkLmdp dGh1Yi5jb22CFSouZGlnaXRhbHNjaXJvY2NvLm5ldIIKKi5ldHN5LmNvbYIQKi5l dHN5c3RhdGljLmNvbYINKi5hZGR0aGlzLmNvbYIQKi5hZGR0aGlzY2RuLmNvbYIP ZmFzdC53aXN0aWEubmV0gg5yYXcuZ2l0aHViLmNvbYIPd3d3LnVzZXJmb3guY29t gg53d3cuc2hhemFtLmNvbYITKi5hc3NldHMteWFtbWVyLmNvbYIbKi5zdGFnaW5n LmFzc2V0cy15YW1tZXIuY29tghZhc3NldHMuaHVnZ2llcy1jZG4ubmV0ghFiZWFj b24uZmFzdGx5LmNvbYINYXBpLmtpbmphLmNvbYISb3JiaXQuc2hhemFtaWQuY29t gg9hYm91dC5qc3Rvci5vcmeCFyouZ2xvYmFsLnNzbC5mYXN0bHkubmV0gg13ZWIu dm94ZXIuY29tgg9weXBpLnB5dGhvbi5vcmeCCyouMTJ3YnQuY29tghJ3d3cuaG9s ZGVyZGVvcmQubm+CH3NlY3VyZWQucmVzb3VyY2VzLmluZm9saW5rcy5jb22CGnNl Y3VyZWQuaW5kbi5pbmZvbGlua3MuY29tghBwbGF5LnZpZHlhcmQuY29tghhwbGF5 LXN0YWdpbmcudmlkeWFyZC5jb22CFXNlY3VyZS5pbWcud2ZyY2RuLmNvbYIWc2Vj dXJlLmltZy5qb3NzY2RuLmNvbYIQKi5nb2NhcmRsZXNzLmNvbYIVd2lkZ2V0cy5w aW50ZXJlc3QuY29tghBkZWJ1Zy5mYXN0bHkuY29tghZtYWludGVuYW5jZS5mYXN0 bHkuY29tgg4qLjdkaWdpdGFsLmNvbYINKi43c3RhdGljLmNvbYIPcC5kYXRhZG9n aHEuY29tggoqLnBsYW4zLnNlghBuZXcubXVsYmVycnkuY29tghJ3d3cuc2FmYXJp Zmxvdy5jb22CDyouc3RlbGxhZG90LmNvbYISKi5zdGVsbGFkb3RzdGcuY29tghFh cGkuYWx0bWV0cmljLmNvbYISY2RuLmNvbnRlbnRmdWwuY29tghB0b29scy5mYXN0 bHkubmV0ghB0b29scy5mYXN0bHkuY29tghIqLmh1ZXZvc2J1ZW5vcy5jb22CDiou Z29vZGVnZ3MuY29tghB3d3cub25lbG9naW4uY29tghhzdGFnaW5nLnd3dy5vbmVs b2dpbi5jb22CFiouZmFzdGx5LnBpY21vbmtleS5jb22CFSouY2RuLndoaXBwbGVo aWxsLm5ldIIRKi53aGlwcGxlaGlsbC5uZXSCG2Nkbi5tZWRpYTM0LndoaXBwbGVo aWxsLm5ldIIbY2RuLm1lZGlhNTYud2hpcHBsZWhpbGwubmV0ghtjZG4ubWVkaWE3 OC53aGlwcGxlaGlsbC5uZXSCHGNkbi5tZWRpYTkxMC53aGlwcGxlaGlsbC5uZXSC DioubW9kY2xvdGguY29tgg8qLmRpc3F1c2Nkbi5jb22CCyouanN0b3Iub3Jngg53 d3cuZmxpbnRvLmNvbYIPKi5kcmVhbWhvc3QuY29tgg8qLmNoYXJ0YmVhdC5jb22C DSouaGlwbXVuay5jb22CGmNvbnRlbnQuYmVhdmVyYnJvb2tzLmNvLnVrggkqLnZz Y28uY2+CG3NlY3VyZS5jb21tb24uY3Nuc3RvcmVzLmNvbYIOd3d3LmpvaW5vcy5j b22CJXN0YWdpbmctbW9iaWxlLWNvbGxlY3Rvci5uZXdyZWxpYy5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8E WjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyNC5jcmww KqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9jYTMtZzI0LmNybDCCAcQG A1UdIASCAbswggG3MIIBswYJYIZIAYb9bAEBMIIBpDA6BggrBgEFBQcCARYuaHR0 cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5Lmh0bTCCAWQG CCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMA IABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMA IABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMA ZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkA bgBnACAAUABhAHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgA IABsAGkAbQBpAHQAIABsAGkAYQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUA IABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAgAGgAZQByAGUAaQBuACAAYgB5ACAA cgBlAGYAZQByAGUAbgBjAGUALjB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGG GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBFBggrBgEFBQcwAoY5aHR0cDovL2Nh Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUNBLTMuY3J0 MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEFBQADggEBAKRf0MoBq0YaNn0m7pon WnLXZkAppVQ1OsOkLAdsw2aqcUT5hcb29vIzFaMM+HylnLXnsfu1qWIzioyIn8eI SBFp4QFvYGNutXvmqP3jZVwHxh80wM48TduS2i5KsdrNDNwdu6KRNbwf3sEahv3W J1kMyHUt5C0IJOPWbwahv4ZMtClOpmxNVKVoFzei1BNj6vUE+zRaLm8NNbyWISpQ gPu7P/lXemuk1uRaWVWDksXcbXzEq16BuaLg8la7IsV3Xb0JHPGswmZI4AAQIphK ppRQZfqn+eX87dYMb6On5nU8B/5mfKeWFv+OQVL2SUtFFFAksxhrkSXdyrMOY0hW E5w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujKyocwFcRkxVl+39ynG UHbGJWDwgDJlDfqkXQFC0ThmY5eWW/3I/2ne1MOUT0LRQBRbMeyVWZiChJ2vNFxL EELfogC6ShGEqWjtcLUE3To2oMFOpXHlpq97vK460Kj5WhC86QQ+tmBJVWuWLTvm BJtwQNTwrFuo0zMZaRMawHGHc9I1nukpErxK/1yDCDMrEO6tqmhd0T6LsfFrxsMX TkaDNb/dSLB21Cr1U6eS5hUJDm7F9Yhoo0KRKeZEm+wlNAIblXs5pf/jnOkT8vgJ tpmHL6aeUWFjZGHEghzSrS/tr227yMQwYj7J1ENdF7R5kPlBtvJnrZ0X08SaSdU3 /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1389760910327358430215774630079485080 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.a.ssl.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23505324731421631915706817946213862223314153175943305829684892096519128757394395476859282243270337991120452263674623513485450917258621012510898374093942817720336524697907355501581351023038500383638868490610218196050282375728343793774468199505353676575253696668776776548705654536671834110122552978849347811519952331688099489235043738442814989722295862859842145227667993676757159259307457202865777284938540566884470053739499578562936751216820624078218121163519615180307481042140652821780133508645495953253500815454684437166202022742598220503889424521766793044147720107798073556213273786015272647121252500671369139533823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc6924a50ac1e4bd361b6e552be1878dd6f033ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.wistia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purge.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirrors.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgix.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacpan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metacpan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.epek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parsecdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastssl.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebase.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.yammer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.staging.yammer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimlinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimresources.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.wantful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shazam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thinglink.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosts.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectaudience.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.foursquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikia-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cloud.github.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalscirocco.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etsy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etsystatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addthis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addthiscdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.wistia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raw.github.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.userfox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shazam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets-yammer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.assets-yammer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.huggies-cdn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beacon.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kinja.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbit.shazamid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.jstor.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global.ssl.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.voxer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pypi.python.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12wbt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holderdeord.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.resources.infolinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.indn.infolinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.vidyard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-staging.vidyard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.img.wfrcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.img.josscdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gocardless.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.pinterest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debug.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7digital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7static.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.datadoghq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plan3.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.mulberry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safariflow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stelladot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stelladotstg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.altmetric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.contentful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.fastly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huevosbuenos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodeggs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onelogin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.onelogin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.picmonkey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.media34.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.media56.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.media78.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.media910.whipplehill.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modcloth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disquscdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jstor.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flinto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamhost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chartbeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipmunk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.beaverbrooks.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vsco.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.common.csnstores.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-mobile-collector.newrelic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g24.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g24.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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