ssl2054.cloudflare.com

- CloudFlare, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:85:85:0f:12:1b:b6:55:54:7d:91:01:5c:0f:e4:a6:d1 was issued on by GlobalSign nv-sa.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:85:85:0f:12:1b:b6:55:54:7d:91:01:5c:0f:e4:a6:d1
Serial Number (int): 1492315657152907568732824340659323330143953
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 4b:e2:0a:62:31:43:9d:42:27:5a:17:8c:36:47:37:54:75:b9:6a:3b
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): bb:d6:e7:c7:40:b5:2a:59:8d:72:50:00:13:4f:e0:fa:95:d8:41:c0
Fingerprint (sha256): 9d:35:34:ef:39:49:d9:e8:0b:5c:fe:76:e6:f9:4d:41:47:84:dd:10:6a:72:f6:5a:9d:af:fb:b2:f3:a9:70:6f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate ssl2054.cloudflare.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2054.cloudflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2054.cloudflare.com
vimjo.com
audiblemedia.co.uk
efabsrv.com
serverdm.net
smloud.ru
*.actuanimaux.com
*.aristacomputers.com
*.audiblemedia.co.uk
*.efabsrv.com
*.serverdm.net
*.smloud.ru
*.vimjo.com
actuanimaux.com
aristacomputers.com

Other certificates including the domain name cloudflare.com

(limited to 100 certificates)
ssl6628.cloudflare.com
ssl2831.cloudflare.com
ssl4246.cloudflare.com
ssl84317.cloudflare.com
ssl2262.cloudflare.com
ssl2812.cloudflare.com
ssl7337.cloudflare.com
ssl7575.cloudflare.com
ssl6377.cloudflare.com
ssl6480.cloudflare.com
ssl2778.cloudflare.com
ssl7159.cloudflare.com
ssl6504.cloudflare.com
ssl2076.cloudflare.com
ssl93554.cloudflare.com
ssl4486.cloudflare.com
ssl2515.cloudflare.com
ssl7543.cloudflare.com
ssl4852.cloudflare.com
ssl7390.cloudflare.com
ssl4333.cloudflare.com
ssl4641.cloudflare.com
ssl7477.cloudflare.com
ssl5571.cloudflare.com
ssl2835.cloudflare.com
ssl2562.cloudflare.com
ssl83992.cloudflare.com
ssl2717.cloudflare.com
ssl2906.cloudflare.com
ssl6704.cloudflare.com
ssl2335.cloudflare.com
ssl4487.cloudflare.com
ssl6813.cloudflare.com
ssl6466.cloudflare.com
ssl6823.cloudflare.com
ssl6292.cloudflare.com
ssl7133.cloudflare.com
ssl3035.cloudflare.com
ssl2736.cloudflare.com
ssl84304.cloudflare.com
ssl2339.cloudflare.com
ssl2571.cloudflare.com
ssl3107.cloudflare.com
ssl2992.cloudflare.com
ssl2652.cloudflare.com
ssl5735.cloudflare.com
ssl6558.cloudflare.com
ssl3033.cloudflare.com
ssl84327.cloudflare.com
ssl3097.cloudflare.com
ssl4011.cloudflare.com
ssl7241.cloudflare.com
ssl86304.cloudflare.com
ssl6657.cloudflare.com
ssl7257.cloudflare.com
ssl6846.cloudflare.com
ssl83886.cloudflare.com
ssl7072.cloudflare.com
ssl6738.cloudflare.com
ssl6466.cloudflare.com
ssl2446.cloudflare.com
ssl2393.cloudflare.com
ssl2387.cloudflare.com
ssl2312.cloudflare.com
ssl4811.cloudflare.com
ssl7348.cloudflare.com
ssl6272.cloudflare.com
ssl93550.cloudflare.com
ssl2071.cloudflare.com
ssl6996.cloudflare.com
ssl84313.cloudflare.com
ssl2920.cloudflare.com
ssl2192.cloudflare.com
ssl82116.cloudflare.com
ssl2556.cloudflare.com
ssl7322.cloudflare.com
ssl6552.cloudflare.com
ssl6598.cloudflare.com
ssl7542.cloudflare.com
ssl2523.cloudflare.com
ssl6953.cloudflare.com
ssl6950.cloudflare.com
ssl85870.cloudflare.com
ssl2531.cloudflare.com
ssl2764.cloudflare.com
ssl4118.cloudflare.com
ssl2113.cloudflare.com
ssl82161.cloudflare.com
ssl2722.cloudflare.com
ssl2084.cloudflare.com
ssl3038.cloudflare.com
ssl4140.cloudflare.com
ssl83885.cloudflare.com
ssl7570.cloudflare.com
ssl6447.cloudflare.com
ssl2734.cloudflare.com
ssl3011.cloudflare.com
ssl8548.cloudflare.com
ssl2113.cloudflare.com
ssl2419.cloudflare.com

Certificate

The complete raw certificate details for ssl2054.cloudflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgISESGFhQ8SG7ZVVH2RAVwP5KbRMA0GCSqGSIb3DQEBBQUA
MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD
VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw
HhcNMTIxMjI0MTkxNjA3WhcNMTYxMDE2MTQ1NDEyWjBuMQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGTAXBgNVBAoTEENs
b3VkRmxhcmUsIEluYy4xHzAdBgNVBAMTFnNzbDIwNTQuY2xvdWRmbGFyZS5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWrOfixQM0cPGT8cw04LZ
ndx5io6BOIF3VRrYgCacoi5RgIcblrRJuEXTbxbiP1XqX122volT4r1a0o5N/bbc
Bc0ZI+Ja2wPZ6UNMKEss2f5qEDtdgHMmoIVnewGaqqL8LieaoB5ondDhUhHzhsp3
uquSTol1gtxZsUOzfyCxsj9NiGtZd0GZBH3aRx+ybD9earb0+r5pUfZuF73R2+QH
Yn5wrgD3g9J7phoLkpKFHgiPdMU7UJilxiAuJNFqLy226LlQHaUIKCds2rq4z2Xt
+NzvudtgcpP7IeY0tND1aIf27td929PG4jS/j6awE4foeWLjqTD6PlOf+y4jJJJT
AgMBAAGjggK3MIICszAOBgNVHQ8BAf8EBAMCBaAwTAYDVR0gBEUwQzBBBgkrBgEE
AaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v
cmVwb3NpdG9yeS8wggEHBgNVHREEgf8wgfyCFnNzbDIwNTQuY2xvdWRmbGFyZS5j
b22CCXZpbWpvLmNvbYISYXVkaWJsZW1lZGlhLmNvLnVrggtlZmFic3J2LmNvbYIM
c2VydmVyZG0ubmV0gglzbWxvdWQucnWCESouYWN0dWFuaW1hdXguY29tghUqLmFy
aXN0YWNvbXB1dGVycy5jb22CFCouYXVkaWJsZW1lZGlhLmNvLnVrgg0qLmVmYWJz
cnYuY29tgg4qLnNlcnZlcmRtLm5ldIILKi5zbWxvdWQucnWCCyoudmltam8uY29t
gg9hY3R1YW5pbWF1eC5jb22CE2FyaXN0YWNvbXB1dGVycy5jb20wCQYDVR0TBAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwRQYDVR0fBD4wPDA6oDig
NoY0aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZh
bGcyLmNybDCBlgYIKwYBBQUHAQEEgYkwgYYwRwYIKwYBBQUHMAKGO2h0dHA6Ly9z
ZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsZzIu
Y3J0MDsGCCsGAQUFBzABhi9odHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nv
cmdhbml6YXRpb252YWxnMjAdBgNVHQ4EFgQUS+IKYjFDnUInWheMNkc3VHW5ajsw
HwYDVR0jBBgwFoAUXUayjcRLdBy77fVztjq3OI91nn4wDQYJKoZIhvcNAQEFBQAD
ggEBAJsDijM6E7iUZFV/C9j69X/HOxjKMD6ylpr0fUteco97spKp4yJ8bAX39rsq
EkYMHUvjwhGZVbCX2SSiw1JrAZyrfKvOwTMMdVwsnEA3q2nQUTrGruJU1IL4DOLK
1MHV0kR02Br2Uug/qWHc1AtynxavWZGmUWTdnVCg9UHfyk8xhjoWhRRIiFM8/hP7
Sa+GqaAMubcvKRUZ1EoUEIX1FxPtO+CMW7nYu/3adFhXJsQrMf4LayOjrTOJyMf/
UjQBNJSmUCmrmNygYpbfpaNkHUW8As0wbOWZlj+RR0jTdmSu40gw6P9mEVGMsB1g
YDziojR2glj/lDANWOVtaDLSdTw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVqzn4sUDNHDxk/HMNOC
2Z3ceYqOgTiBd1Ua2IAmnKIuUYCHG5a0SbhF028W4j9V6l9dtr6JU+K9WtKOTf22
3AXNGSPiWtsD2elDTChLLNn+ahA7XYBzJqCFZ3sBmqqi/C4nmqAeaJ3Q4VIR84bK
d7qrkk6JdYLcWbFDs38gsbI/TYhrWXdBmQR92kcfsmw/Xmq29Pq+aVH2bhe90dvk
B2J+cK4A94PSe6YaC5KShR4Ij3TFO1CYpcYgLiTRai8ttui5UB2lCCgnbNq6uM9l
7fjc77nbYHKT+yHmNLTQ9WiH9u7XfdvTxuI0v4+msBOH6Hli46kw+j5Tn/suIySS
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492315657152907568732824340659323330143953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-24 19:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-16 14:54:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2054.cloudflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24913672730485299601040870640002031940999875394079859179048934570861159162994652642763646992652742817144483401954987184203658993916017823862469965155536479970366143771267148572545811621904867077041129652688781425336582665006546559662649561053453184889346236836884155400451689630556542131916669503246827198627395594490030406487245459498039721155364657266300551158304443916089689177336054197168375277628333121051911890647921312510421495172826005129861802653264440310077873574651945111121201746314551953798101477347265874224999223818245789258902204397369503404996459395525995621109830626343471798283288552457151852089939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2054.cloudflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimjo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiblemedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efabsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serverdm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smloud.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actuanimaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aristacomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audiblemedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efabsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serverdm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smloud.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimjo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuanimaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristacomputers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4be20a6231439d42275a178c3647375475b96a3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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