ti-media.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 39:50:f2:02:3f:b1:9a:92:78:3b:97:99 was issued on by GlobalSign nv-sa.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
Californa
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 39:50:f2:02:3f:b1:9a:92:78:3b:97:99Serial Number (int): 17738502479557801301990152089
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: a1:29:51:35:b4:b3:09:c4:a1:9c:3f:06:ab:78:3c:c2:59:89:5d:75
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 2c:8f:b2:e5:d1:c8:41:f3:5b:94:f2:1d:f8:41:b5:b2:f4:10:4b:7f
Fingerprint (sha256): a1:63:37:b9:64:17:62:d0:c1:a2:37:30:fc:8b:fa:11:7a:7f:a4:a2:ea:08:c9:98:45:37:c5:c3:3e:fd:18:9a
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate ti-media.map.fastly.net
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ti-media.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ti-media.map.fastly.net
*.internal.ti-media.net
*.internal.timeincuk.net
*.keystone.ti-media.net
*.wp.ti-media.net
*.wp.timeincuk.net
internal.ti-media.net
internal.timeincuk.net
keystone.ti-media.net
womanmagazine.co.uk
womansown.co.uk
womansweekly.com
worldsoccer.com
wp.ti-media.net
wp.timeincuk.net
yachtingmonthly.com
yachtingworld.com
ybw.com
*.internal.ti-media.net
*.internal.timeincuk.net
*.keystone.ti-media.net
*.wp.ti-media.net
*.wp.timeincuk.net
internal.ti-media.net
internal.timeincuk.net
keystone.ti-media.net
womanmagazine.co.uk
womansown.co.uk
womansweekly.com
worldsoccer.com
wp.ti-media.net
wp.timeincuk.net
yachtingmonthly.com
yachtingworld.com
ybw.com
Other certificates including the domain name ti-media.map.fastly.net
(limited to 100 certificates)
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
Certificate
The complete raw certificate details for ti-media.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIMOVDyAj+xmpJ4O5eZMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgxMTAyMDIx NTE1WhcNMTkxMDI0MTc1ODQyWjByMQswCQYDVQQGEwJVUzESMBAGA1UECBMJQ2Fs aWZvcm5hMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxGYXN0bHks IEluYy4xIDAeBgNVBAMTF3RpLW1lZGlhLm1hcC5mYXN0bHkubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5iXqgkhk9TgcS9ZHLG5W4V/AH6acT ViNr0qhFTfrs3o+sWFvN39eWToB/zdKhucOAaiz9aeTghGhyvBWr6cHVX/qGE9Yy PwZmAB/HJ3uJWqLofv0dhapg3Hyf4gqf46yyabs9cqwn9dDnjfz/j+DStUpwG3G0 jt/H6Ba+CaHz2/m9uomz8ZnjeJa2/NA9U9x1kFMSEBjOe1wAn+JqD9ypeFltyYpr qOaJxT7HcZZxFU7QYyvfhRMH8x7onOO01/uOrlNmlNZwEKStrYkUuUm0PJlsdPgL 8+nLQO09o0Az7xxIVhvGf5WMdXCJspJMomcfAwJQVC/sLXiZCRYB7wIDAQABo4IC +DCCAvQwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUH MAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Ns c2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u Y29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYI KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv MAgGBmeBDAECAjAJBgNVHRMEAjAAMIIBfAYDVR0RBIIBczCCAW+CF3RpLW1lZGlh Lm1hcC5mYXN0bHkubmV0ghcqLmludGVybmFsLnRpLW1lZGlhLm5ldIIYKi5pbnRl cm5hbC50aW1laW5jdWsubmV0ghcqLmtleXN0b25lLnRpLW1lZGlhLm5ldIIRKi53 cC50aS1tZWRpYS5uZXSCEioud3AudGltZWluY3VrLm5ldIIVaW50ZXJuYWwudGkt bWVkaWEubmV0ghZpbnRlcm5hbC50aW1laW5jdWsubmV0ghVrZXlzdG9uZS50aS1t ZWRpYS5uZXSCE3dvbWFubWFnYXppbmUuY28udWuCD3dvbWFuc293bi5jby51a4IQ d29tYW5zd2Vla2x5LmNvbYIPd29ybGRzb2NjZXIuY29tgg93cC50aS1tZWRpYS5u ZXSCEHdwLnRpbWVpbmN1ay5uZXSCE3lhY2h0aW5nbW9udGhseS5jb22CEXlhY2h0 aW5nd29ybGQuY29tggd5YncuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAdBgNVHQ4EFgQUoSlRNbSzCcShnD8Gq3g8wlmJXXUwHwYDVR0jBBgwFoAU qSuH4c4kRzsbv8+FNwJVnQ2UWOYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAEWuNoa9AJWeKRxWyJVG/HmIUh8MLot06Yq+Ba3kV6ST5d5c KtwthKFRjWtixRe/bF2msxVrUm/L0NdJu8G5tS3VXSmn5yEzFj7/ucZxv1YBlz36 OVPsO8SNgbs7X8jvzDyYLqE61ZmwTmEujOB6j5Rk0oBaldmcgvXT3PD3tMTptM12 oh/QAH9+0i0XW9YFGA8uWcVEmsguV3IY9W4kIztT6lfmb6QP0cQak++CDtViRd/D wPECvFSJx4otXtTSD9R3WlvpBzY83kJA1Et7iufZGd2PcefO4vSkbeozXW+1wf1l XLlWcJuzPXJsHUuAVP2R4kAiiEUEr6s3cOgF4hs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5iXqgkhk9TgcS9ZHL G5W4V/AH6acTViNr0qhFTfrs3o+sWFvN39eWToB/zdKhucOAaiz9aeTghGhyvBWr 6cHVX/qGE9YyPwZmAB/HJ3uJWqLofv0dhapg3Hyf4gqf46yyabs9cqwn9dDnjfz/ j+DStUpwG3G0jt/H6Ba+CaHz2/m9uomz8ZnjeJa2/NA9U9x1kFMSEBjOe1wAn+Jq D9ypeFltyYprqOaJxT7HcZZxFU7QYyvfhRMH8x7onOO01/uOrlNmlNZwEKStrYkU uUm0PJlsdPgL8+nLQO09o0Az7xxIVhvGf5WMdXCJspJMomcfAwJQVC/sLXiZCRYB 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17738502479557801301990152089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 02:15:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 17:58:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Californa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ti-media.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20493370974600057648741139299310622431716495829187890664824620915123161064869420448640860853576328254802637842750889367266793878824792860810104468571856056757820637061267895108455882622111805109137081944929146986163230911761131017600448954953167551239732784868181752243970760149190876310486843684434905211299070674244584336724820265310127064648333922490127489202119641638389946461657545679657423684624352851203730415604337930233885541141645460427721799434041379700050430698452847604822150747233696576859812846532440406332365737348700605475694127502298699790360401731391680822538234679124909722380157305454930464997871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.map.fastly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keystone.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansown.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansweekly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldsoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.timeincuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingmonthly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybw.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1295135b4b309c4a19c3f06ab783cc259895d75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0045ae3686bd00959e291c56c89546fc7988521f0c2e8b74e98abe05ade457a493e5de5c2adc2d84a1518d6b62c517bf6c5da6b3156b526fcbd0d749bbc1b9b52dd55d29a7e72133163effb9c671bf5601973dfa3953ec3bc48d81bb3b5fc8efcc3c982ea13ad599b04e612e8ce07a8f9464d2805a95d99c82f5d3dcf0f7b4c4e9b4cd76a21fd0007f7ed22d175bd605180f2e59c5449ac82e577218f56e24233b53ea57e66fa40fd1c41a93ef820ed56245dfc3c0f102bc5489c78a2d5ed4d20fd4775a5be907363cde4240d44b7b8ae7d919dd8f71e7cee2f4a46dea335d6fb5c1fd655cb956709bb33d726c1d4b8054fd91e24022884504afab3770e805e21b