dfm2.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 0b:f7:33:2d:a3:5f:fd:77:00:4f:11:b5 was issued on by GlobalSign nv-sa.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f7:33:2d:a3:5f:fd:77:00:4f:11:b5
Serial Number (int): 3703181468046125469478621621
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 07:d8:de:59:1a:6a:37:8d:8a:d5:55:f3:49:60:e1:65:f9:e8:81:cb
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): fe:bc:68:52:3d:6d:60:26:38:70:c2:bc:ef:0b:f7:a1:bc:67:99:8b
Fingerprint (sha256): c9:cd:db:03:bc:0a:18:0f:d7:18:a9:90:54:10:5a:85:dc:49:87:30:bf:82:21:87:77:20:96:cd:31:bf:48:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dfm2.map.fastly.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfm2.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dfm2.map.fastly.net
local.timesherald.com
local.trentonian.com
local.troyrecord.com
media.timesherald.com
media.trentonian.com
media.troyrecord.com
www.timesherald.com
www.trentonian.com
www.troyrecord.com

Other certificates including the domain name dfm2.map.fastly.net

(limited to 100 certificates)
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net
dfm2.map.fastly.net

Certificate

The complete raw certificate details for dfm2.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkTCCBnmgAwIBAgIMC/czLaNf/XcATxG1MA0GCSqGSIb3DQEBCwUAMFcxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH
bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwMTI5MTcw
NjAyWhcNMTkwMTE5MTM0OTAyWjBvMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5
LCBJbmMuMRwwGgYDVQQDDBNkZm0yLm1hcC5mYXN0bHkubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY71T25X3azPL1ymR28HCDwbcacbRDYpichu
Ym8EGT2xYu+v2dXEqf5ckSv2tAoMzrJ16BYfcsEjsX3bMs1U+uZxJe8Tp6VK8zfP
Dx+NQUzaIostCseM10AWf6rFwD6rEdVo0yZxI8e8Af3/rnD4dAvk/K/dTlkVP5EC
avpZ/DXgYXdT21doOj6cD/WRmlFaLPAz2ocwTsJZzI3eON19Qipnd2jLGR7pFzTh
2Hkk+bgLH0a8j2ug/i8fYVh4DKwEW/qHDS4IRSSxULRQqvNOd9REujIc0WyKL4DG
yCcOgFl14jW1V2CsZs+pTDZRjn2PlDaDW++hn5j9qrzQFbjllwIDAQABo4IEQzCC
BD8wDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKG
Nmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hh
MmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29t
L2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYB
BQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgG
BmeBDAECAjAJBgNVHRMEAjAAMIHjBgNVHREEgdswgdiCE2RmbTIubWFwLmZhc3Rs
eS5uZXSCFWxvY2FsLnRpbWVzaGVyYWxkLmNvbYIUbG9jYWwudHJlbnRvbmlhbi5j
b22CFGxvY2FsLnRyb3lyZWNvcmQuY29tghVtZWRpYS50aW1lc2hlcmFsZC5jb22C
FG1lZGlhLnRyZW50b25pYW4uY29tghRtZWRpYS50cm95cmVjb3JkLmNvbYITd3d3
LnRpbWVzaGVyYWxkLmNvbYISd3d3LnRyZW50b25pYW4uY29tghJ3d3cudHJveXJl
Y29yZC5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW
BBQH2N5ZGmo3jYrVVfNJYOFl+eiByzAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3
AlWdDZRY5jCCAfYGCisGAQQB1nkCBAIEggHmBIIB4gHgAHcA3esdK3oNT6Ygi4Gt
gWhwfi6OnQHVXIiNPRHEzbbsvswAAAFhQuIBzwAABAMASDBGAiEAyj2rvpPf8lrV
XCTIEAy57wjldgO/OXEZvCfrjEbFQEoCIQC29fWjE4MwHX6h1xaXTYC4I5SqSXy2
zX1QxrrZDAJ6swB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAAB
YULiAicAAAQDAEcwRQIhAKmYJZOb+ca3TdtY9xQ2pvqayUcT4VbAqNLGjy72eIGq
AiBLgA8FleNR1bVLcIniCIc6qh/ErGpcxp4N7LP/DX9EKgB2ALvZ37wfinG1k5Qj
l6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYULiBUoAAAQDAEcwRQIhAPkTvgi/CPJH
bHHJLuLtUt+sYLvvztl35gCxndN9ox+fAiApF2FS9U5IOYtOBwWlA02giPfsJBdm
eCwd2mLH+q/csgB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
YULiB4MAAAQDAEYwRAIgNQilrYKP+RVJ4PmykJpsE1gAldzGU2cOhBE7yfdyv78C
IAFQUqt1Wakby5/do0Acxp9IKpj52grz/1kxSnm9jWk0MA0GCSqGSIb3DQEBCwUA
A4IBAQCHQI5Zixg1kk04kN8Tck1Vd2qhRVGpE+etaFzX3waZb83oyW6TAD4NqIG3
LZ1xirXSG+dDvKw2MMlvmmlYKh7ZnKQBAv58TNS5FfzkKHy/LtFZz7z7l1rTqQ/O
s5BlZXLkt9UuGSm2b+8zGSN6Ps0CGq7HyWzvCJHRI/Ng79Xqj1pHW2cl6LzOQqC2
B2iYNytypDnZv2uA381Z4LmoR74JMDkocactLFKjqsSyvu5Sen7VT3IHIki4nM9u
8XHbuH9yj2WzVng25zxmoeShmatFtomC9zY5y0Op53/JuKkeVikdcfihFFniqoZ1
rAULsF8HYU2XWDcs9NIT9AHMcL5K
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY71T25X3azPL1ymR28H
CDwbcacbRDYpichuYm8EGT2xYu+v2dXEqf5ckSv2tAoMzrJ16BYfcsEjsX3bMs1U
+uZxJe8Tp6VK8zfPDx+NQUzaIostCseM10AWf6rFwD6rEdVo0yZxI8e8Af3/rnD4
dAvk/K/dTlkVP5ECavpZ/DXgYXdT21doOj6cD/WRmlFaLPAz2ocwTsJZzI3eON19
Qipnd2jLGR7pFzTh2Hkk+bgLH0a8j2ug/i8fYVh4DKwEW/qHDS4IRSSxULRQqvNO
d9REujIc0WyKL4DGyCcOgFl14jW1V2CsZs+pTDZRjn2PlDaDW++hn5j9qrzQFbjl
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3703181468046125469478621621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 17:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 13:49:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dfm2.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24939441415467825797485323535784170826771099054864975902948990110274521126480104778753518341414313590822324049772797478072744880388594787802682666102293589880818680398239546857484665088257448620101299511146844799746491593309403019436947810585348365095397711763946007429710035886171628725342789732804528692366105500212920575210648826963401148558841351277421600805780142272877178631402363031298673414118525115766175617951399380491362310676786373418935782322661672935326529392616699826433628877898842000777916552339361062262001510621800080922923464592075846580208748422998359261816610568756460576651214212357772702967191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfm2.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.timesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.trentonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.troyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.timesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.trentonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.troyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trentonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troyrecord.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d8de591a6a378d8ad555f34960e165f9e881cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000016142e201cf0000040300483046022100ca3dabbe93dff25ad55c24c8100cb9ef08e57603bf397119bc27eb8c46c5404a022100b6f5f5a31383301d7ea1d716974d80b82394aa497cb6cd7d50c6bad90c027ab30076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016142e202270000040300473045022100a99825939bf9c6b74ddb58f71436a6fa9ac94713e156c0a8d2c68f2ef67881aa02204b800f0595e351d5b54b7089e208873aaa1fc4ac6a5cc69e0decb3ff0d7f442a007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016142e2054a0000040300473045022100f913be08bf08f2476c71c92ee2ed52dfac60bbefced977e600b19dd37da31f9f022029176152f54e48398b4e0705a5034da088f7ec241766782c1dda62c7faafdcb2007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016142e20783000004030046304402203508a5ad828ff91549e0f9b2909a6c13580095dcc653670e84113bc9f772bfbf0220015052ab7559a91bcb9fdda3401cc69f482a98f9da0af3ff59314a79bd8d6934
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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