crm.salesforce-qa.afirmeprod.myshn.net

- Skyhigh Security -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 16:5f:b7:0f:fe:2e:ce:ed:17:75:c2:c1 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Skyhigh Security

Organization: Skyhigh Security
State / Province: Texas
Locality: Plano
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 16:5f:b7:0f:fe:2e:ce:ed:17:75:c2:c1
Serial Number (int): 6924382657016311786518201025
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 8f:8a:ad:63:84:41:2e:e6:53:3d:3c:97:d2:d0:c2:8a:6d:20:65:cf
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fa:a6:98:98:fd:73:38:2b:d8:ce:f8:8a:f7:75:62:03:4a:3a:cd:f7
Fingerprint (sha256): 7e:f7:6f:66:80:68:a0:1f:1a:08:58:38:23:9c:3d:2c:51:b3:2e:f8:b8:5d:dd:bc:70:97:6a:2e:60:24:47:c4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate crm.salesforce-qa.afirmeprod.myshn.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.salesforce-qa.afirmeprod.myshn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.salesforce-qa.afirmeprod.myshn.net
*.salesforce-qa.afirmeprod.myshn.net

Other certificates including the domain name myshn.net

(limited to 100 certificates)
t78079-xsj-mvisioncc.do.myshn.net
t72343-409726963.do.myshn.net
o365.s4585o365.skyhigh4585.myshn.net
workday1.workdaytest1.nemours.myshn.net
office.nbty.myshn.net
crm.eon.myshn.net
t5520-964032600.do.myshn.net
mcc-hkdemo-jl01.do.myshn.net
t72888-1904490346.do.myshn.net
t76855-1472346173.do.myshn.net
t79753-new-1137375508.do.myshn.net
t72552-2111266501.do.myshn.net
t72677-1312413802.do.myshn.net
t4796-623545441.do.myshn.net
t5532-1630822464.do.myshn.net
t74663-728778351.do.myshn.net
office.default.abbviedev.myshn.net
t5199-992542498.do.myshn.net
mfe.gui.ms-o365-email01.mfe9492.myshn.net
crm.commercial--sit.citizensbank.myshn.net
t77198-471296032.do.myshn.net
t74477-765075361.do.myshn.net
crm.proxyqamell.myshn.net
t7824-2038128097.do.myshn.net
t72583-921975423.do.myshn.net
crm.auprodtest.myshn.net
t13027-126544263.do.myshn.net
t2642-1050991080.do.myshn.net
t72689-995464259.do.myshn.net
t5076-1101003752.do.myshn.net
t72589-320214915.do.myshn.net
t77757-1919129877.do.myshn.net
t77410-2001875668.do.myshn.net
t76176-2063674477.do.myshn.net
t76246-556747390.do.myshn.net
pwcnetwork.test.pwcstg.myshn.net
t78184-1013299322.do.myshn.net
t78080-50060135.do.myshn.net
t73050-113795943.do.myshn.net
jivehosted.cisco.myshn.net
t80712-2003582001.do.myshn.net
t72861-1690756306.do.myshn.net
t51524-514727457.do.myshn.net
t74631-1627889508.do.myshn.net
t2398-601984674.do.myshn.net
dev.snowp.madhukar.myshn.net
t5269-174639147.do.myshn.net
t72851-257481377.do.myshn.net
t76925-439768084.do.myshn.net
t74098-2098047544.do.myshn.net
t2876-1088812204.do.myshn.net
office.prod.pvhcorp.myshn.net
t72351-1154603012.do.myshn.net
t5269-1091396108.do.myshn.net
t10991-172600829.do.myshn.net
crm.frontrowmarketing.myshn.net
casbapp.box-production.gmfinancial.myshn.net
t76648-1049008643.do.myshn.net
t77001-643367231.do.myshn.net
t72691-733760933.do.myshn.net
t85238-1811292942.do.myshn.net
crm.aetnacrm.myshn.net
office.reverseproxy.vvalley.myshn.net
t171141-1685059814.do.myshn.net
office.honeywell.myshn.net
yammer.yammer.westpacnz.myshn.net
t76207-989343043.do.myshn.net
hydps.snow-demo.psdemo1.myshn.net
test.linkedin.tesfg.myshn.net
ey.guest-connect.etihad.myshn.net
crm.skyhighdemo74-sfdc.skyhighdemo74.myshn.net
office.skyhigh4889.skyhigh4889.myshn.net
t4745-1834430994.do.myshn.net
crm.molinana10.myshn.net
t73234-1762910929.do.myshn.net
t72861-1206833752.do.myshn.net
office.ug1.raksnorthca.myshn.net
pwc-skyhigh-ec2.do.myshn.net
t72583-801060241.do.myshn.net
t73622-1143574197.do.myshn.net
t75634-543890585.do.myshn.net
t72861-1601203955.do.myshn.net
t72861-ec-perf.do.myshn.net
t75186-1942021182.do.myshn.net
t72498-1810981306.do.myshn.net
success.myshn.net
t72888-265371221.do.myshn.net
workday.pnc7.pncsandbox.myshn.net
iaispace.iaispace-proxyo365.nfrmin01.myshn.net
t13537-1718809249.do.myshn.net
t78155-1373928739.do.myshn.net
servicenowdemandmanagement.proxyqaiad.myshn.net
t72583-41468110.do.myshn.net
crm.asda.proxyqaiad.myshn.net
t74581-612349684.do.myshn.net
t78172-485346196.do.myshn.net
successfactorstest.com.ypfpoc.myshn.net
t72850-1190599272.do.myshn.net
t77394-1474742912.do.myshn.net
office.o365-and-onedrive.keven.myshn.net

Certificate

The complete raw certificate details for crm.salesforce-qa.afirmeprod.myshn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIMFl+3D/4uzu0XdcLBMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjEyMDIyMzUwMzlaFw0y
NDAxMDMyMzUwMzhaMHkxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczEOMAwG
A1UEBxMFUGxhbm8xGTAXBgNVBAoTEFNreWhpZ2ggU2VjdXJpdHkxLzAtBgNVBAMT
JmNybS5zYWxlc2ZvcmNlLXFhLmFmaXJtZXByb2QubXlzaG4ubmV0MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OQsB7+nrETdslFpaON/WHHYThVEipRY
UC3It40UvAkxrml527Nz/CfaJ0169TA+fbuKJ8Kd5aalgxKSY4rkV18+0bkwyGjP
5WcNyOD+D3wURcsuoCbVzpVdILK2rKq8DloJ+Q8yz+wwQEOxUxuaEByVxjPtDRmz
dN2tx+A5ry1ISiy222ldSyEpxhsYsoi+7FNUsJzUyJx/Zh9LL/IVmpC0CuSrizZ1
VSa7MxVZpPmjwuOkrtup6Me0d98o0sDKpj5W2i2GAaJBHY+yryoX9LLz3dU79FoZ
iAxRxd1nixg97cLcQ9DXAGycvslF+5WyzPajbCgOWrm7fASbIvFhCwIDAQABo4IC
FjCCAhIwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUF
BzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92
c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMFcGA1Ud
EQRQME6CJmNybS5zYWxlc2ZvcmNlLXFhLmFmaXJtZXByb2QubXlzaG4ubmV0giQq
LnNhbGVzZm9yY2UtcWEuYWZpcm1lcHJvZC5teXNobi5uZXQwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcD
ArPrMB0GA1UdDgQWBBSPiq1jhEEu5lM9PJfS0MKKbSBlzzATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/CeFkvc9sWjUH1D8OMwZuhJ7TeR
7TvWbs6v/E9GLXIPS5Jsob+N1eEoxDaUALEdW2X/niTcspjJkJ/aVuzbm7BBuatk
qsZ9vt5JJoA3bpUl0rISNUZ8no4MGRzqtz7T4VS71W1MhALYrco9VJb3Vx/UsCVP
gyCuokN4J+ZRNugf3ajKYBMdQ2EQVV/d3u406wXdrsChnYTadpgi9wLhJ9peR+CK
NZFGUeLE150KugJJwp+aXyYc8RRx/XqnCqSkHEvbiY5BeD8oTAsjnzbLrcSBsB3l
/E+4t6RJ6WEvpy11rpkghGOPQZl+E+jCqds/5L6Oz8c6cpEZ8XBzSpreHg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OQsB7+nrETdslFpaON/
WHHYThVEipRYUC3It40UvAkxrml527Nz/CfaJ0169TA+fbuKJ8Kd5aalgxKSY4rk
V18+0bkwyGjP5WcNyOD+D3wURcsuoCbVzpVdILK2rKq8DloJ+Q8yz+wwQEOxUxua
EByVxjPtDRmzdN2tx+A5ry1ISiy222ldSyEpxhsYsoi+7FNUsJzUyJx/Zh9LL/IV
mpC0CuSrizZ1VSa7MxVZpPmjwuOkrtup6Me0d98o0sDKpj5W2i2GAaJBHY+yryoX
9LLz3dU79FoZiAxRxd1nixg97cLcQ9DXAGycvslF+5WyzPajbCgOWrm7fASbIvFh
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6924382657016311786518201025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 23:50:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:50:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skyhigh Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28894849335646989724333094502588416945362045758012235117702785095109685453064229520640685824063777467975607180721886669339694628550981956446624990776813542702123128263095123770214941126985919938745264176800521840827673349742943028707884540847253567789355552726747912184812217989633519196704458945398407790376566633340274610965371365936737930432866538364969278218277072645840746471767110512954358425878416046364896170475012449202602954402931436992802019879324243086417289810103519619445546484116135331013248779826753200881091345120308972102134390650882462185095885844032032793371020879314984511093113589919409220182283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f8aad6384412ee6533d3c97d2d0c28a6d2065cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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