j2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 71:b9:51:28:bb:77:e0:93:d0:f1:ce:33 was issued on by GlobalSign nv-sa.

With 116 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:b9:51:28:bb:77:e0:93:d0:f1:ce:33
Serial Number (int): 35195840649504087085656690227
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a8:29:fd:a9:a5:1a:1c:37:0b:20:3b:98:b7:25:39:cc:e5:2f:f4:94
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): ac:a2:af:a4:6b:f8:74:ec:c5:0b:6e:e2:5d:d2:b9:32:a1:df:d0:d9
Fingerprint (sha256): 66:f9:0d:a6:72:ef:e1:7e:fa:cc:2e:82:38:f4:0d:f9:21:28:bf:bc:d7:e4:cb:65:71:53:9e:8e:01:60:4f:f8

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate j2.shared.global.fastly.net

116

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for j2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

j2.shared.global.fastly.net
*.adventistbookcenter.com
*.art.fusestudio.net
*.booktravelbound.com
*.casper.com
*.chakralinux.org
*.demo.gta-travel.com
*.devspaceshipinvest.com.au
*.echl.com
*.emailrenderer.com
*.emailsubscriptionpages.com
*.ezup.com
*.files.coachlogix.com
*.filestack.com
*.filestack.onemob.com
*.fis-ski.com
*.fisski.com
*.fp.brandfolder.com
*.fs.artrepreneur.com
*.fs.enplug.com
*.fs.enplug.in
*.fs.heroine.com
*.fs.heyorca.com
*.fs.learnzillioncdn.com
*.fs.localzillioncdn.com
*.fs.mindflash.com
*.fs.myblueprint.ca
*.fs.opszillioncdn.com
*.fs.pathlms.com
*.fs.pixvana.com
*.fs.qazillioncdn.com
*.fs.storyworth.com
*.fs.testzillioncdn.com
*.fs.topcoder.com
*.gta-travel.com
*.haxx.se
*.idatalink.com
*.idatalinkmaestro.com
*.img-taboola.com
*.informly.co
*.julialang.org
*.kindsnacks.com
*.media.contentcal.io
*.news12.com
*.partidentifier.swisco.com
*.staging.ted.com
*.tedcdn.com
*.travelcube.com
*.up.scienceexchange.com
*.uploads.checkr.com
*.uploads.foliohd.com
*.uploads.orlo.app
*.uploads.parentsquare.com
*.vouchercodes.co.uk
*.xalok.com
adventistbookcenter.com
apis.idatalive.com
app-api.ted.com
casper.com
caspermattressbundle.com
cdn.irsdn.net
chakralinux.org
digiday.com
digiload.co
drive.carimages.com.au
drwp.staging.moo.com
echl.com
eol-repositories.sensuapp.org
filestack.onemob.com
flashlogic.com
fs.enplug.com
fs.learnzillioncdn.com
fs.localzillioncdn.com
fs.opszillioncdn.com
fs.qazillioncdn.com
fs.testzillioncdn.com
idatalink.com
idatalinkmaestro.com
identity-views.sohohousedigital.com
img.triggermail.io
menu.treez.io
news12.com
omnigon.com
prod.cdn-fsty.philo.com
repositories.sensuapp.org
rl.talis.com
staging.moo.com
staging.moo.me
static.plumcache.com
stayingalive.msf.org
topspeed.com
uploads.foliohd.com
us-eu.filestackcontent.com
vcl.casper.tools
vouchercodes.co.uk
womenshealth-jp.com
workerbee.staging.moo.com
www.agf.dk
www.biointeractive.org
www.canstar.co.nz
www.canstarblue.co.nz
www.canstarblue.com.au
www.championshockeyleague.net
www.exterro.com
www.ezup.de
www.ezup.eu
www.ezup.nl
www.flashlogic.com
www.frankbody.com
www.goldcup.org
www.odense-marcipan.dk
www.oneclickdrive.com
www.pfaw.org
www.preview.moo.com
www.ted.com
www.topspeed.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for j2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN6zCCDNOgAwIBAgIMcblRKLt34JPQ8c4zMA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAwMzEyMDkx
OTA5WhcNMjEwMzA3MTc0ODMyWjB3MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5
LCBJbmMuMSQwIgYDVQQDDBtqMi5zaGFyZWQuZ2xvYmFsLmZhc3RseS5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcqJK7yZC14V0ybSf4zHRQHfJ
S03+yHXzMnat+Qginvov/uxsxPUfcMmPB0gxrXUY/AZaT939BTlvIvmtYhqephZI
dY+4BxglGocwsDxv4J2QYyoWHw0Q/AZ+6lHisG1CTCxZ9GuZPoIdCAQvoGM8qg7h
XWcts/QV1hZOqpFFa8Wm7YOv8ddCXpvIOQwGdnq4PhZw9euLM1qpA+15Dq27xPja
k1MqxMka0cNE18bQxqwT47VzOt9UFfu0azY5GLVhEvA3q4FfDOffwcVemWeF/63W
ggkfJ+UyUhjsNS9syeaHzjD22gQ/pYoMrluw7Cmb7o9SHuJWGUWAPAJXXFLZAgMB
AAGjggqVMIIKkTAOBgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggr
BgEFBQcwAoY2aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xv
dWRzc2xzaGEyZzMuY3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFs
c2lnbi5jb20vY2xvdWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwggkZBgNVHREEggkQMIIJDIIbajIu
c2hhcmVkLmdsb2JhbC5mYXN0bHkubmV0ghkqLmFkdmVudGlzdGJvb2tjZW50ZXIu
Y29tghQqLmFydC5mdXNlc3R1ZGlvLm5ldIIVKi5ib29rdHJhdmVsYm91bmQuY29t
ggwqLmNhc3Blci5jb22CESouY2hha3JhbGludXgub3JnghUqLmRlbW8uZ3RhLXRy
YXZlbC5jb22CGyouZGV2c3BhY2VzaGlwaW52ZXN0LmNvbS5hdYIKKi5lY2hsLmNv
bYITKi5lbWFpbHJlbmRlcmVyLmNvbYIcKi5lbWFpbHN1YnNjcmlwdGlvbnBhZ2Vz
LmNvbYIKKi5lenVwLmNvbYIWKi5maWxlcy5jb2FjaGxvZ2l4LmNvbYIPKi5maWxl
c3RhY2suY29tghYqLmZpbGVzdGFjay5vbmVtb2IuY29tgg0qLmZpcy1za2kuY29t
ggwqLmZpc3NraS5jb22CFCouZnAuYnJhbmRmb2xkZXIuY29tghUqLmZzLmFydHJl
cHJlbmV1ci5jb22CDyouZnMuZW5wbHVnLmNvbYIOKi5mcy5lbnBsdWcuaW6CECou
ZnMuaGVyb2luZS5jb22CECouZnMuaGV5b3JjYS5jb22CGCouZnMubGVhcm56aWxs
aW9uY2RuLmNvbYIYKi5mcy5sb2NhbHppbGxpb25jZG4uY29tghIqLmZzLm1pbmRm
bGFzaC5jb22CEyouZnMubXlibHVlcHJpbnQuY2GCFiouZnMub3BzemlsbGlvbmNk
bi5jb22CECouZnMucGF0aGxtcy5jb22CECouZnMucGl4dmFuYS5jb22CFSouZnMu
cWF6aWxsaW9uY2RuLmNvbYITKi5mcy5zdG9yeXdvcnRoLmNvbYIXKi5mcy50ZXN0
emlsbGlvbmNkbi5jb22CESouZnMudG9wY29kZXIuY29tghAqLmd0YS10cmF2ZWwu
Y29tggkqLmhheHguc2WCDyouaWRhdGFsaW5rLmNvbYIWKi5pZGF0YWxpbmttYWVz
dHJvLmNvbYIRKi5pbWctdGFib29sYS5jb22CDSouaW5mb3JtbHkuY2+CDyouanVs
aWFsYW5nLm9yZ4IQKi5raW5kc25hY2tzLmNvbYIVKi5tZWRpYS5jb250ZW50Y2Fs
LmlvggwqLm5ld3MxMi5jb22CGyoucGFydGlkZW50aWZpZXIuc3dpc2NvLmNvbYIR
Ki5zdGFnaW5nLnRlZC5jb22CDCoudGVkY2RuLmNvbYIQKi50cmF2ZWxjdWJlLmNv
bYIYKi51cC5zY2llbmNlZXhjaGFuZ2UuY29tghQqLnVwbG9hZHMuY2hlY2tyLmNv
bYIVKi51cGxvYWRzLmZvbGlvaGQuY29tghIqLnVwbG9hZHMub3Jsby5hcHCCGiou
dXBsb2Fkcy5wYXJlbnRzcXVhcmUuY29tghQqLnZvdWNoZXJjb2Rlcy5jby51a4IL
Ki54YWxvay5jb22CF2FkdmVudGlzdGJvb2tjZW50ZXIuY29tghJhcGlzLmlkYXRh
bGl2ZS5jb22CD2FwcC1hcGkudGVkLmNvbYIKY2FzcGVyLmNvbYIYY2FzcGVybWF0
dHJlc3NidW5kbGUuY29tgg1jZG4uaXJzZG4ubmV0gg9jaGFrcmFsaW51eC5vcmeC
C2RpZ2lkYXkuY29tggtkaWdpbG9hZC5jb4IWZHJpdmUuY2FyaW1hZ2VzLmNvbS5h
dYIUZHJ3cC5zdGFnaW5nLm1vby5jb22CCGVjaGwuY29tgh1lb2wtcmVwb3NpdG9y
aWVzLnNlbnN1YXBwLm9yZ4IUZmlsZXN0YWNrLm9uZW1vYi5jb22CDmZsYXNobG9n
aWMuY29tgg1mcy5lbnBsdWcuY29tghZmcy5sZWFybnppbGxpb25jZG4uY29tghZm
cy5sb2NhbHppbGxpb25jZG4uY29tghRmcy5vcHN6aWxsaW9uY2RuLmNvbYITZnMu
cWF6aWxsaW9uY2RuLmNvbYIVZnMudGVzdHppbGxpb25jZG4uY29tgg1pZGF0YWxp
bmsuY29tghRpZGF0YWxpbmttYWVzdHJvLmNvbYIjaWRlbnRpdHktdmlld3Muc29o
b2hvdXNlZGlnaXRhbC5jb22CEmltZy50cmlnZ2VybWFpbC5pb4INbWVudS50cmVl
ei5pb4IKbmV3czEyLmNvbYILb21uaWdvbi5jb22CF3Byb2QuY2RuLWZzdHkucGhp
bG8uY29tghlyZXBvc2l0b3JpZXMuc2Vuc3VhcHAub3JnggxybC50YWxpcy5jb22C
D3N0YWdpbmcubW9vLmNvbYIOc3RhZ2luZy5tb28ubWWCFHN0YXRpYy5wbHVtY2Fj
aGUuY29tghRzdGF5aW5nYWxpdmUubXNmLm9yZ4IMdG9wc3BlZWQuY29tghN1cGxv
YWRzLmZvbGlvaGQuY29tghp1cy1ldS5maWxlc3RhY2tjb250ZW50LmNvbYIQdmNs
LmNhc3Blci50b29sc4ISdm91Y2hlcmNvZGVzLmNvLnVrghN3b21lbnNoZWFsdGgt
anAuY29tghl3b3JrZXJiZWUuc3RhZ2luZy5tb28uY29tggp3d3cuYWdmLmRrghZ3
d3cuYmlvaW50ZXJhY3RpdmUub3JnghF3d3cuY2Fuc3Rhci5jby5ueoIVd3d3LmNh
bnN0YXJibHVlLmNvLm56ghZ3d3cuY2Fuc3RhcmJsdWUuY29tLmF1gh13d3cuY2hh
bXBpb25zaG9ja2V5bGVhZ3VlLm5ldIIPd3d3LmV4dGVycm8uY29tggt3d3cuZXp1
cC5kZYILd3d3LmV6dXAuZXWCC3d3dy5lenVwLm5sghJ3d3cuZmxhc2hsb2dpYy5j
b22CEXd3dy5mcmFua2JvZHkuY29tgg93d3cuZ29sZGN1cC5vcmeCFnd3dy5vZGVu
c2UtbWFyY2lwYW4uZGuCFXd3dy5vbmVjbGlja2RyaXZlLmNvbYIMd3d3LnBmYXcu
b3JnghN3d3cucHJldmlldy5tb28uY29tggt3d3cudGVkLmNvbYIQd3d3LnRvcHNw
ZWVkLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw
FoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwHQYDVR0OBBYEFKgp/amlGhw3CyA7mLcl
OczlL/SUMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAd
A/VlF8QRSR7Gi+RaoGyoRY2vanVQRdQxna6ngevguHZ6PwBjtN7Q2w7AmkTpeIv6
y23pihjYGLjGoumLguEe5rsbM7cViNzsVCrKabf2Qd4pwzqVDGW1UE6/L2DLdvfh
eIIaCKu5L8d7tyeJkEArUFKfPn8rWewIXcg7HJV7ad1xznTbtfGlxA7XcbXykxyf
wP4euWHaxSm6St9be8Q+ACsixhAhu7MoqTpm4ftpQnwCQMAEVfl0USw9b1nPcMLL
5MB3Bl+wbGMiGDAOkef1lbbCq5r+M64TcuHr9VfduavzRLFBEimxBELIWdU4hDIW
H56TqdQKFlu27kLAX5Iq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKiSu8mQteFdMm0n+Mx
0UB3yUtN/sh18zJ2rfkIIp76L/7sbMT1H3DJjwdIMa11GPwGWk/d/QU5byL5rWIa
nqYWSHWPuAcYJRqHMLA8b+CdkGMqFh8NEPwGfupR4rBtQkwsWfRrmT6CHQgEL6Bj
PKoO4V1nLbP0FdYWTqqRRWvFpu2Dr/HXQl6byDkMBnZ6uD4WcPXrizNaqQPteQ6t
u8T42pNTKsTJGtHDRNfG0MasE+O1czrfVBX7tGs2ORi1YRLwN6uBXwzn38HFXpln
hf+t1oIJHyflMlIY7DUvbMnmh84w9toEP6WKDK5bsOwpm+6PUh7iVhlFgDwCV1xS
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35195840649504087085656690227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 09:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 17:48:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'j2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24546759273903564148208007142261293013500665161244434226085728285476768021861968352143972046956193996499275437169973406799675830877243401582422718600368815826616934327713002456044971778328831939228360236537312428384854276955376407989707747442575912887737613385817823017093676665340453504329539808656969828664837444541188006099058298265543004835070423343137972951982543676256708152612489147628275595125720954358420369476872774035226942011381752250012159342951111001601543714261844094596744458172983225875743446115533021107882447331704391032061858598670850898430789526474838933600202421112137928175120721296098636616409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventistbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art.fusestudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booktravelbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chakralinux.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.gta-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devspaceshipinvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailrenderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailsubscriptionpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.coachlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestack.onemob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fis-ski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.brandfolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.artrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.enplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.enplug.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.heroine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.heyorca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.learnzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.localzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.mindflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.myblueprint.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.opszillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pathlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.pixvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.qazillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.storyworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.testzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.topcoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gta-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haxx.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idatalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idatalinkmaestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.img-taboola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julialang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.contentcal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partidentifier.swisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelcube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.up.scienceexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.checkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.foliohd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.orlo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploads.parentsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vouchercodes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventistbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.idatalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-api.ted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caspermattressbundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.irsdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chakralinux.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiload.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.carimages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drwp.staging.moo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eol-repositories.sensuapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestack.onemob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.enplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.learnzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.localzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.opszillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.qazillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.testzillioncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idatalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idatalinkmaestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-views.sohohousedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.triggermail.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.treez.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnigon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cdn-fsty.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repositories.sensuapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rl.talis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.moo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.moo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.plumcache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayingalive.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topspeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.foliohd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-eu.filestackcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcl.casper.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchercodes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealth-jp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workerbee.staging.moo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biointeractive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstar.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstarblue.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canstarblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshockeyleague.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exterro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odense-marcipan.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneclickdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preview.moo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topspeed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a829fda9a51a1c370b203b98b72539cce52ff494
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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