ssl4552.cloudflare.com

- CloudFlare, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:bd:8d:87:bd:4d:f1:fe:c2:37:f3:e8:7e:dd:26:44:36 was issued on by GlobalSign nv-sa.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:bd:8d:87:bd:4d:f1:fe:c2:37:f3:e8:7e:dd:26:44:36
Serial Number (int): 1492390137906499106905686120477573192762422
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ce:b8:01:ca:72:4b:93:bd:00:84:08:b8:64:e7:fa:a5:73:ec:ff:6f
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 80:d8:6f:3c:7e:7d:14:cb:55:ac:4b:69:5f:86:16:37:e4:7a:1a:f4
Fingerprint (sha256): c1:35:07:69:57:94:f8:37:d1:ec:56:5a:81:b0:31:86:7e:30:2c:f0:24:07:1d:6e:06:c7:f3:04:46:84:c6:b9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate ssl4552.cloudflare.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4552.cloudflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl4552.cloudflare.com
*.adule.de
*.airsoftgiforum.com
*.andlil.com
*.apotheekenman.nl
*.appiavideo.it
*.bitmakler.com
*.blushmeup.com.au
*.dailypress.xyz
*.dolevik.com
*.fca-consumer-spotlight.org.uk
*.gamegox.com
*.gtopik.com
*.helpwanted.com
*.hepfree.nyc
*.hostxhost.com
*.ilwebmaster21.com
*.kity.mobi
*.lemonadenyc.com
*.mngacow.com
*.mvpautosalvage.com
*.nedporno.tv
*.njcri.org
*.passportsusa.com
*.ronrule.com
*.sidetour-staging.com
*.simplytwiggy.com
*.smartenergygb.org
*.thewritemind.be
*.vitalsofttech.com
adule.de
airsoftgiforum.com
andlil.com
apotheekenman.nl
appiavideo.it
bitmakler.com
blushmeup.com.au
dailypress.xyz
dolevik.com
fca-consumer-spotlight.org.uk
gamegox.com
gtopik.com
helpwanted.com
hepfree.nyc
hostxhost.com
ilwebmaster21.com
kity.mobi
lemonadenyc.com
mngacow.com
mvpautosalvage.com
nedporno.tv
njcri.org
passportsusa.com
ronrule.com
sidetour-staging.com
simplytwiggy.com
smartenergygb.org
thewritemind.be
vitalsofttech.com

Other certificates including the domain name cloudflare.com

(limited to 100 certificates)
ssl6628.cloudflare.com
ssl2831.cloudflare.com
ssl4246.cloudflare.com
ssl84317.cloudflare.com
ssl2262.cloudflare.com
ssl2812.cloudflare.com
ssl7337.cloudflare.com
ssl7575.cloudflare.com
ssl6377.cloudflare.com
ssl6480.cloudflare.com
ssl2778.cloudflare.com
ssl7159.cloudflare.com
ssl6504.cloudflare.com
ssl2076.cloudflare.com
ssl93554.cloudflare.com
ssl4486.cloudflare.com
ssl2515.cloudflare.com
ssl7543.cloudflare.com
ssl4852.cloudflare.com
ssl7390.cloudflare.com
ssl4333.cloudflare.com
ssl4641.cloudflare.com
ssl7477.cloudflare.com
ssl5571.cloudflare.com
ssl2835.cloudflare.com
ssl2562.cloudflare.com
ssl83992.cloudflare.com
ssl2717.cloudflare.com
ssl2906.cloudflare.com
ssl6704.cloudflare.com
ssl2335.cloudflare.com
ssl4487.cloudflare.com
ssl6813.cloudflare.com
ssl6466.cloudflare.com
ssl6823.cloudflare.com
ssl6292.cloudflare.com
ssl7133.cloudflare.com
ssl3035.cloudflare.com
ssl2736.cloudflare.com
ssl84304.cloudflare.com
ssl2339.cloudflare.com
ssl2571.cloudflare.com
ssl3107.cloudflare.com
ssl2992.cloudflare.com
ssl2652.cloudflare.com
ssl5735.cloudflare.com
ssl6558.cloudflare.com
ssl3033.cloudflare.com
ssl84327.cloudflare.com
ssl3097.cloudflare.com
ssl4011.cloudflare.com
ssl7241.cloudflare.com
ssl86304.cloudflare.com
ssl6657.cloudflare.com
ssl7257.cloudflare.com
ssl6846.cloudflare.com
ssl83886.cloudflare.com
ssl7072.cloudflare.com
ssl6738.cloudflare.com
ssl6466.cloudflare.com
ssl2446.cloudflare.com
ssl2393.cloudflare.com
ssl2387.cloudflare.com
ssl2312.cloudflare.com
ssl4811.cloudflare.com
ssl7348.cloudflare.com
ssl6272.cloudflare.com
ssl93550.cloudflare.com
ssl2071.cloudflare.com
ssl6996.cloudflare.com
ssl84313.cloudflare.com
ssl2920.cloudflare.com
ssl2192.cloudflare.com
ssl82116.cloudflare.com
ssl2556.cloudflare.com
ssl7322.cloudflare.com
ssl6552.cloudflare.com
ssl6598.cloudflare.com
ssl7542.cloudflare.com
ssl2523.cloudflare.com
ssl6953.cloudflare.com
ssl6950.cloudflare.com
ssl85870.cloudflare.com
ssl2531.cloudflare.com
ssl2764.cloudflare.com
ssl4118.cloudflare.com
ssl2113.cloudflare.com
ssl82161.cloudflare.com
ssl2722.cloudflare.com
ssl2084.cloudflare.com
ssl3038.cloudflare.com
ssl4140.cloudflare.com
ssl83885.cloudflare.com
ssl7570.cloudflare.com
ssl6447.cloudflare.com
ssl2734.cloudflare.com
ssl3011.cloudflare.com
ssl8548.cloudflare.com
ssl2113.cloudflare.com
ssl2419.cloudflare.com

Certificate

The complete raw certificate details for ssl4552.cloudflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8NLIoizU49lPFqc/p2V
EA3OCUgsQ03flGCJDPbMvvOYH2OYnOwtiMJdUxXQ6fJaxfy+Byi168Gv/7X2Ttyk
GgX9FOwF/w5LQRfnUOUqvnDheK6pMrhvdEr2KsKYAFhLZ7citIWVf2QZG8XdmomW
7wil5djAnrv8t8yhG2R5vt3BnRA0BEriH/Ff4vbECsCQhx2gt/a1GufJYccp3Msz
QRAxPfSpF7yZZbY2uEuPEgd4lkM9v0oQNIr1bEirJQ6nW7IUI/37T1Db5+v7Ho2x
VjoXdThpTf8IsVANFLn9Y7S/Ez1oubq8EY8JEmb6qDpl74y7qVNPi9896tvEETW+
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492390137906499106905686120477573192762422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-23 20:50:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-12 03:09:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4552.cloudflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19663240081722140643947061277406599315623202672956417748558376709343215547930406897496885734870140688131284649368966192685164757645878453646485178654045410524409287339834553305716130575350641935269301059686677514230971951446754214482873274759139122110308836684389528436488013324458772460455327891929860386479447313383325539537913714720040643661090951761784586968154917395373211728003326202393272168523112009763506140477934722782738553653958138314706982971444070227674471830904578560283830266300464070969271179181091143625559178203355311741049671521389063457261002637120102723231826932297624041180064010468352073252533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4552.cloudflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airsoftgiforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andlil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apotheekenman.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appiavideo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitmakler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blushmeup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailypress.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fca-consumer-spotlight.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamegox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtopik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpwanted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hepfree.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilwebmaster21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kity.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonadenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mngacow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mvpautosalvage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nedporno.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njcri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passportsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidetour-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplytwiggy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartenergygb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewritemind.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalsofttech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airsoftgiforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andlil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheekenman.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appiavideo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmakler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blushmeup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailypress.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fca-consumer-spotlight.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamegox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtopik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpwanted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepfree.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilwebmaster21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kity.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonadenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mngacow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpautosalvage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedporno.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njcri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passportsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidetour-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplytwiggy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartenergygb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewritemind.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalsofttech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ceb801ca724b93bd008408b864e7faa573ecff6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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