vpn.seb.com

- Groupe SEB -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:5c:18:f7:71:1b:1e:8f:53:e8:96:dd:bc:f7:8c:c0:72 was issued on by GlobalSign nv-sa.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Groupe SEB

Organization: Groupe SEB
State / Province: Rhone-Alpes
Locality: Ecully
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:5c:18:f7:71:1b:1e:8f:53:e8:96:dd:bc:f7:8c:c0:72
Serial Number (int): 1492260597557768326889028364823877785534578
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: fd:f6:dd:d3:3a:4d:30:57:5a:d5:a5:33:c7:16:89:8c:e1:6c:68:23
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): ce:48:3d:e7:0a:1e:c2:e2:75:aa:47:c7:eb:66:f9:65:6a:c8:00:14
Fingerprint (sha256): ed:49:5a:3e:12:12:c0:22:23:ab:e5:0e:7e:b0:46:21:fe:54:8c:e1:32:67:2f:d7:76:7b:7c:ee:c2:48:2c:fd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate vpn.seb.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.seb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.seb.com
vpn-as.seb.com
vpn-eu.seb.com
vpn-na.seb.com
vpn-sa.seb.com
vpn.na.seb.com
vpn.sa.seb.com

Other certificates including the domain name seb.com

(limited to 100 certificates)
account.rcu.seb.com
horoquartz-qual.seb.com
vpn.seb.com
horoquartz.seb.com
qa.openfoodsystem.com
horoquartz.seb.com
seb.com
vpn.seb.com
bastion.seb.com
mail-eu.seb.com
horoquartz-qual.seb.com
sp00i361.seb.com
sp07t002.seb.com
sebasiahress.seb.com
myitatseb.seb.com
einvoice.seb.com
mdm.seb.com
mdm.seb.com
fs.seb.com
*.wp.seb.com
brazil.transport.seb.com
mdm.seb.com
myitatseb.seb.com
qual.hrdataviz.seb.com
account.rcu.seb.com
account.rcu.seb.com
hrdataviz.seb.com
fs.seb.com
sebasiahress.seb.com
jenkins.dcp.seb.com
qliksense.seb.com
jira.seb.com
account.rcu.1.seb.com
dam.seb.com
jenkins.dcp.seb.com
sp00i361.seb.com
www.seb.com
mail-eu.seb.com
notilus-prod.seb.com
turkey.btob.seb.com
fs.seb.com
mail-eu.seb.com
mail-eu.seb.com
account.rcu.seb.com
sebasiahress.seb.com
vpn.seb.com
jiraqual.seb.com
seb.com
bastion.seb.com
easyo.seb.com
seb.com
account.rcu.2.seb.com
jiraqual.seb.com
fs.seb.com
account.rcu.2.seb.com
account.rcu.2.seb.com
fs2.seb.com
account.rcu.seb.com
qliksense.seb.com
bastion.seb.com
easyo.seb.com
sp07t002.seb.com
mdm.seb.com
einvoice.seb.com
account.rcu.seb.com
account.rcu.2.seb.com
seb.com
seb.com
seb.com
jira.seb.com
www.seb.com
brazil.transport.seb.com
einvoice.seb.com
jira.seb.com
qa.openfoodsystem.com
account.rcu.2.seb.com
account.rcu.2.seb.com
saml.seb.com
mail-eu.seb.com
mail-eu.seb.com
mail-eu.seb.com
fs2.seb.com
jenkins.dcp.seb.com
turkey.einvoice.seb.com
mdm.seb.com
vpn.seb.com
vpn.seb.com
jenkins.dcp.seb.com
qa.openfoodsystem.com
boardconnector.groupe-seb.com
qual.qliksense.seb.com
*.wp.seb.com
account.rcu.seb.com
boardconnector-qual.groupe-seb.com
vpn.seb.com

Certificate

The complete raw certificate details for vpn.seb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISESFcGPdxGx6PU+iW3bz3jMByMA0GCSqGSIb3DQEBBQUA
MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD
VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw
HhcNMTQwMzAzMTM0MjAzWhcNMTkwMjIxMTUxMTAzWjBfMQswCQYDVQQGEwJGUjEU
MBIGA1UECBMLUmhvbmUtQWxwZXMxDzANBgNVBAcTBkVjdWxseTETMBEGA1UEChMK
R3JvdXBlIFNFQjEUMBIGA1UEAxMLdnBuLnNlYi5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC7/vEn9V+EcPn1YRornPHKOolYPOxTDwU4PHj7RIB+
uN9kAdv9PjgT3eOYZpqEZRI9DvsslXbgULO4ZvRkWwSx6Q5cfJqj2W3LKWur5FnF
5EhwTKFIFpoMJ5KHll0HuUbszYzmnKpnXBbNhjbCrgyXIdPKQ2e0/MAE1V34UkFa
Ru/dO7R8c/lBpwcrOq2fMcICMkcxH1dcrTESmQHRIQoWV0S+2dS8oX5gG010e7yT
4a2Y/06UtZjyx/djXb0+TXwl+2sbzqzqopwSslvQGwUPiuPIkyZRjHTZVJvS0iaE
Jl6npNls9PibNnp/B/TH7qRe123vxEGgKusjrj7F96D1AgMBAAGjggIhMIICHTAO
BgNVHQ8BAf8EBAMCBaAwSQYDVR0gBEIwQDA+BgZngQwBAgIwNDAyBggrBgEFBQcC
ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wdgYDVR0R
BG8wbYILdnBuLnNlYi5jb22CDnZwbi1hcy5zZWIuY29tgg52cG4tZXUuc2ViLmNv
bYIOdnBuLW5hLnNlYi5jb22CDnZwbi1zYS5zZWIuY29tgg52cG4ubmEuc2ViLmNv
bYIOdnBuLnNhLnNlYi5jb20wCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybC5nbG9iYWxz
aWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZhbGcyLmNybDCBlgYIKwYBBQUHAQEE
gYkwgYYwRwYIKwYBBQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20v
Y2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsZzIuY3J0MDsGCCsGAQUFBzABhi9odHRw
Oi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRpb252YWxnMjAdBgNV
HQ4EFgQU/fbd0zpNMFda1aUzxxaJjOFsaCMwHwYDVR0jBBgwFoAUXUayjcRLdBy7
7fVztjq3OI91nn4wDQYJKoZIhvcNAQEFBQADggEBAHJGfwx9D+IZk2RSFtlUF9wT
QOnPiESrd4zEMTblElTokCZEWus6CSknYHul9FELGGndUPerPpC2n+J2wCAMMqty
nnc90OJzK8UzFHkiAW8QIPU0tRjULG+U2LW+SnaA2faxUp/2h86P67H9NZLwKpSe
Q7YTYhJLSJ1S2P57our8I/iuCIMkn8faa5pk3ygrV1IrSpGvXGPfS/0tL1QkErt3
gkv65n5mRHv3iO7OQ6RNfyUdC6tJ8nsBrgdwOIqEp258IfveHuHi/Y6WT0fSuXhz
Oj/WQaqsZQKt0U+piCjoxRIyGC4JTEQxHEKo4j4SQfnrPsde074pVe2Krmxy+vE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7xJ/VfhHD59WEaK5zx
yjqJWDzsUw8FODx4+0SAfrjfZAHb/T44E93jmGaahGUSPQ77LJV24FCzuGb0ZFsE
sekOXHyao9ltyylrq+RZxeRIcEyhSBaaDCeSh5ZdB7lG7M2M5pyqZ1wWzYY2wq4M
lyHTykNntPzABNVd+FJBWkbv3Tu0fHP5QacHKzqtnzHCAjJHMR9XXK0xEpkB0SEK
FldEvtnUvKF+YBtNdHu8k+GtmP9OlLWY8sf3Y129Pk18JftrG86s6qKcErJb0BsF
D4rjyJMmUYx02VSb0tImhCZep6TZbPT4mzZ6fwf0x+6kXtdt78RBoCrrI64+xfeg
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492260597557768326889028364823877785534578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 13:42:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 15:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhone-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ecully'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groupe SEB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.seb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23732279622248467068651497950349489589058409280803559249120658174772246510036543539520094790751606073543362836402177823407157575618956409411044957163417862945630573111144098446075181637040240341757361987800951064595717353439696762054338401458516810044091234571704624883304234018046791196745386440272379660295552986526594478915115882666674863827876165047003477044960455581628199252410578752094379532455254726035791128891173010237021836196701767687351575385439044936448849309436196524870521687847878428572230379514248743021828284459174574762898256890955759264113409810565923657668771371292637397646972715088142445027573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-as.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-eu.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-na.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-sa.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.na.seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.sa.seb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdf6ddd33a4d30575ad5a533c716898ce16c6823
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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