dotdash.map.fastly.net
- Fastly, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 0e:8b:dd:40:57:ab:d0:ae:c2:1e:93:00 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Fastly, Inc.
Organization:
Fastly, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:8b:dd:40:57:ab:d0:ae:c2:1e:93:00Serial Number (int): 4501875656326971677751546624
Serial Number lenght: 92 bits, 12 octets
SubjectKeyId: bb:f0:b0:8c:9a:d6:eb:56:b4:fd:00:e8:65:a9:d8:85:02:49:6c:e3
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 6b:a1:5a:7b:f8:95:74:a4:27:3e:c5:11:2b:e3:df:1b:eb:41:69:98
Fingerprint (sha256): e4:a3:f7:07:85:42:35:82:0e:fe:d0:9b:8c:a1:ec:1b:5e:b9:6b:bc:a6:9e:dc:66:af:86:eb:34:ce:67:db:de
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate dotdash.map.fastly.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dotdash.map.fastly.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dotdash.map.fastly.net
Other certificates including the domain name dotdash.map.fastly.net
(limited to 100 certificates)
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
Certificate
The complete raw certificate details for dotdash.map.fastly.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIMDovdQFer0K7CHpMAMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTgwNTE0MTMx MDUwWhcNMTkwNTE1MTMxMDUwWjByMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5 LCBJbmMuMR8wHQYDVQQDDBZkb3RkYXNoLm1hcC5mYXN0bHkubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3DEFs1ZxITqfmh8XPNKkF6mwJY9N6P8 ufG7yVjitEhEPi8n7AyrxfJP6pPk0Y153FqhThZBnrDsNubpqD+0cp6TFyQasIrT DD5ge5cyeU8ruk6sGRnPsIotYgJd5rfiH0eg+Fa8gNyuo8gpr0BOIa5Tem2OmXnu ODkUBXz2YrHYrYHeNqkqHug616wWQvZQ9u/rPztj6S21b5G5w8/3pOVExGX3UhAY HV2QCRqpntXutA0o2wcOHtgAZyX4UXgjOHXzERjO7FxOygty/jX/FP4JnGC39k98 tEseGeQbDDKz8yMdLa4raBIhVUBZd+ORK/13WfnRTDgxfdj52dhajwIDAQABo4IB mzCCAZcwDgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUH MAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Ns c2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u Y29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYI KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv MAgGBmeBDAECAjAJBgNVHRMEAjAAMCEGA1UdEQQaMBiCFmRvdGRhc2gubWFwLmZh c3RseS5uZXQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW BBS78LCMmtbrVrT9AOhlqdiFAkls4zAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3 AlWdDZRY5jATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ze6ZI0GOiTlu1dRtAxyQOvguDW6GnYPgFo0PrxPbK4Wjhw9B9hcZNRuL0lzcSNHy 9VMCfMzJl7Fpk+ssYgPVHQnRjt5nOmb/cLe8yDWtu6dJtSBlrZNH6kEpye+HSXiL 1qPo69vZPCpG9nomvPQiucav/uos8R00yJZl4O++NjPow30qXiJyYKiOOET62INn LWqNeuiN8Sz514pviAgJrnDQVwFI4zk3va8beKp5LpqRZqyfaEW3PHVREvMIuZE4 8H06QHE5teG6LzqnseBRpy3LcMyRR+8icqzMT+KfiM2cOhWKaVEwe2pc+Hn0GNvE WIWpibSUmYSi8u9Ac3QSBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3DEFs1ZxITqfmh8XPNK kF6mwJY9N6P8ufG7yVjitEhEPi8n7AyrxfJP6pPk0Y153FqhThZBnrDsNubpqD+0 cp6TFyQasIrTDD5ge5cyeU8ruk6sGRnPsIotYgJd5rfiH0eg+Fa8gNyuo8gpr0BO Ia5Tem2OmXnuODkUBXz2YrHYrYHeNqkqHug616wWQvZQ9u/rPztj6S21b5G5w8/3 pOVExGX3UhAYHV2QCRqpntXutA0o2wcOHtgAZyX4UXgjOHXzERjO7FxOygty/jX/ FP4JnGC39k98tEseGeQbDDKz8yMdLa4raBIhVUBZd+ORK/13WfnRTDgxfdj52dha jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4501875656326971677751546624 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 13:10:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 13:10:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dotdash.map.fastly.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20632450683221216194089393285181881247180165431515762412604791048565559720354109319293064430565229955049310612164885176502257975934427111700235276455029700284741425192483981356273833035758007719754037131994591418868536734557767045354015667303141060519089342647724273212355168512663572588400339094021273287270480052224198462470504557478968507759182063027978410365767173501906549071056036774155534667243963195764777361002067328444291671631897400106206281811322967302654613103700591888293910686085524999380364042960716809069379500295550368567216179625750044401886131319294381313237398737588893594759886838422161958918799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.map.fastly.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bbf0b08c9ad6eb56b4fd00e865a9d88502496ce3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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