magentocloud35.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 52:57:39:d4:ff:11:df:b0:ea:e8:7b:e8 was issued on by GlobalSign nv-sa.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 52:57:39:d4:ff:11:df:b0:ea:e8:7b:e8
Serial Number (int): 25483220455635753075057654760
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c9:f7:b2:de:1d:69:9d:8e:b1:db:8b:56:ee:cf:32:97:0e:1a:da:52
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 4d:34:bc:89:58:11:3b:ff:44:ad:3b:d9:70:5e:26:22:9d:65:c0:32
Fingerprint (sha256): 75:40:d9:fc:ed:9e:c7:d0:42:dc:60:b1:a4:c4:04:65:1b:6a:85:94:06:93:65:7d:e9:16:fc:76:f3:37:ea:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate magentocloud35.map.fastly.net

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magentocloud35.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magentocloud35.map.fastly.net
*.asprey.co.uk
*.asprey.com.cn
*.asprey.jp
*.chocolate.lindt.com
*.farming-program.com
*.fraser-hart.com
*.fraserhart.com
*.gearleather.com
*.hksasa.cn
*.kaiusa.com
*.lindt.at
*.lindt.bg
*.lindt.ca
*.lindt.ch
*.lindt.com.br
*.lindt.com.mx
*.military1st.at
*.mr-s-leather.com
*.swiftoptical.com
asprey.co.uk
asprey.com.cn
asprey.jp
chocolate.lindt.com
farming-program.com
fraser-hart.com
fraserhart.com
gearleather.com
hksasa.cn
kaiusa.com
lindt.at
lindt.bg
lindt.ca
lindt.ch
lindt.com.br
lindt.com.mx
lovebonito.com
military1st.at
mr-s-leather.com
swiftoptical.com

Other certificates including the domain name magentocloud35.map.fastly.net

(limited to 100 certificates)
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net
magentocloud35.map.fastly.net

Certificate

The complete raw certificate details for magentocloud35.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VsEwpa0WYCLoR02v6TJ
pnm8lRB/+F63mMLBdh+tXZJISGm8oacoeElCe5jMYi4pTOHc2luDMGjulzFK7Bm8
QR0FZcGgQJM2mqV7JVT54RZv68dPNzkdD9eBQuxfwLcaDEWeKATnaJwr01tf+Ujh
vKxtZmGK0lixQTC/I+VNSGf6tPbUTVFiVaGfPOZZnm0pimgaT9m+ivbBxfL9LUgE
WEjNj+s55BgWfjvRn5eZV6WWMg0YlZO24vEVnPrwX3H7sKN9XCcnntj7c2jjOuUw
JeOa/4s1RSrL1QS3AGRIfSz8nvTnH8DgWdJGpFxovo0V+NjSykUawtZVahaKcmlO
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25483220455635753075057654760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 20:18:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 19:22:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magentocloud35.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26428688679510381369146543131387339307592768861171616906409770292509958086495207423366703558908319346809178474293024540604702817393455733360367072608708133914430588422144617627036530960994269244352896262791885024945477914191115688065926048746142365908282746686859642462349071758869200357626227158041989111983774245559541393568826951447487053989005290207065159517518169405745580116615957839547890540187247652638911241950657128496577631374550872023352509958956854265079941321624109224054948512606651161908774456403776164029629571383873552728621334265686619349050353746980244201038755869142478405174719881502384668102357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (639 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentocloud35.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asprey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asprey.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asprey.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolate.lindt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farming-program.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraser-hart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraserhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hksasa.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaiusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.military1st.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mr-s-leather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swiftoptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asprey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asprey.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asprey.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolate.lindt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farming-program.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraser-hart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraserhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hksasa.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovebonito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military1st.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr-s-leather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiftoptical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9f7b2de1d699d8eb1db8b56eecf32970e1ada52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001c3d545835dcb2704319aa06c9022d61b06db2fb8cebafa08f08748740aa6c0395b76f1f7ea93516e2c5941326372e9ab40133b1f3d567fa8b971c2b37c6aaddee6fc48f8c54bbcafbc57301f3e746d5b48af0d1ff4fbe84b6c20445384c3bd676d785b7b370473835f01e10db8778cbc4f68c01693f91675f4e0dbd085b274f103e9362742b3805d6af30c1e53e6516fdecf2479e3f014f253bed4875aadaf6d13a5fb3842a83480841793b7454a3da9ec116252778a70ef6efbc49439abb931a9797905f02fd9447300b35dfa02604474169f92288fd10a64a7bd7509e2b9192622c79bb24ad2badc44a800399fc6b7b2738472836ef30fc95d950ea595496