s2-cloudinary-pin.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 30:a7:77:2f:06:85:df:47:21:19:c4:bd was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 30:a7:77:2f:06:85:df:47:21:19:c4:bd
Serial Number (int): 15057733912378666555815871677
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c6:20:f1:25:a3:26:3c:be:e7:5f:dc:a6:8d:33:d2:5c:88:75:11:ca
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c0:8e:2f:d8:6f:76:03:d4:08:02:1e:d3:27:82:a8:c5:a9:2f:29:ed
Fingerprint (sha256): c0:4c:14:92:e9:6b:ab:3d:02:ad:4e:48:b5:30:8a:a2:62:ff:b7:0c:a6:c4:25:01:8e:10:f5:5a:06:53:06:bd

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate s2-cloudinary-pin.map.fastly.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2-cloudinary-pin.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2-cloudinary-pin.map.fastly.net

Other certificates including the domain name s2-cloudinary-pin.map.fastly.net

(limited to 100 certificates)
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net
s2-cloudinary-pin.map.fastly.net

Certificate

The complete raw certificate details for s2-cloudinary-pin.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIMMKd3LwaF30chGcS9MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAwMTIzMTgw
NzQ0WhcNMjEwMTIzMTgwNzQ0WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs
aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEVMBMGA1UEChMMRmFzdGx5
LCBJbmMuMSkwJwYDVQQDEyBzMi1jbG91ZGluYXJ5LXBpbi5tYXAuZmFzdGx5Lm5l
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMccux0n7LnsVOsxiGT0
Srw07wctPi++bd5Ptz16nuIWtpSbTXsEyX8HZx4Pg8tPgWmhOo8v6FtWo1554kNf
ZAGAqxd25vUgOo/DHCgwkBIbbEDUOvbkzk2gbpzgBsf5gtc4Fh+4rq/LWzHZFcoo
uQeQn+S6F3j626gk6StnRA1txGSNR7L64NSt4qn/byJtVHr68eccfJtAKO/NpO4p
1okbXYX+iO+Yl9A2erfg6yO6KgUkroC+x9D64Uzae5jhsrW6rwRd83wwBhkzYUna
Ojo4GrvFX27CiT2uzOIFaG07qQcHsW/5utu7WKNYTYjVhPt3oU+cr+xFEdSqB2RP
CF0CAwEAAaOCAaUwggGhMA4GA1UdDwEB/wQEAwIFoDCBigYIKwYBBQUHAQEEfjB8
MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy
dC9jbG91ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwMi5n
bG9iYWxzaWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNVHSAETzBNMEEGCSsGAQQB
oDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y
ZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADArBgNVHREEJDAigiBzMi1j
bG91ZGluYXJ5LXBpbi5tYXAuZmFzdGx5Lm5ldDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwHQYD
VR0OBBYEFMYg8SWjJjy+51/cpo0z0lyIdRHKMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBkFzTAChxb4Ca7eeajK5h/lEtpNlnx9nREQvGe
xlvlKt5qAYwCedw8OAZRILj8NZE7mpezIkbsvo2xaAsZrswxHpvFEKRWVyUY6fmx
vTYAv7JW6Nba0fQfPWRigwPybmQFiBv66sT+uaZPz5pFIqch8xGfJVg9Qo+p0VYW
UhIHCwHw2yeRUwAN9oYKw123l6m1mhg8hEUV2J4dS5rljiWUeFXzwh3lyroxSHLG
Vs27JCUiI1LXGexqJS1b+aoWPzqjV7iFwzXCiCwRJ/58uCfIG//o8rxtU09arXHx
d9/ObZsMpqwjBNHvjXwXXhBBbJ2o4fwRp4TfsrYWrXPPl4bc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxy7HSfsuexU6zGIZPRK
vDTvBy0+L75t3k+3PXqe4ha2lJtNewTJfwdnHg+Dy0+BaaE6jy/oW1ajXnniQ19k
AYCrF3bm9SA6j8McKDCQEhtsQNQ69uTOTaBunOAGx/mC1zgWH7iur8tbMdkVyii5
B5Cf5LoXePrbqCTpK2dEDW3EZI1Hsvrg1K3iqf9vIm1Uevrx5xx8m0Ao782k7inW
iRtdhf6I75iX0DZ6t+DrI7oqBSSugL7H0PrhTNp7mOGytbqvBF3zfDAGGTNhSdo6
Ojgau8VfbsKJPa7M4gVobTupBwexb/m627tYo1hNiNWE+3ehT5yv7EUR1KoHZE8I
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15057733912378666555815871677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 18:07:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 18:07:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's2-cloudinary-pin.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25135590429797836686837278720052097991856861489861989041169836801744576872166567528659141673538487194701258973599478305095876880835922934835829655794301293711755711788075028626292170850778700801874878848076049003592276868188821105102646950061337208242327877207200401132404409703938876170799575639272942591181066057554938186544075704852832449153759334332163604694434708309141846827465965906181032286751219304590206195963302945058589788387273669447950179920722623541102124144340098529712797505969217437521060304192758610807219950652898980453912597043144876074477558902095358406780994044272722511183033501933199833368669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2-cloudinary-pin.map.fastly.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c620f125a3263cbee75fdca68d33d25c887511ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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