imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:be:cc:90:c1:88:60:d2:15:16:80:4e:d8:72:67:3e was issued on by GlobalSign nv-sa.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:be:cc:90:c1:88:60:d2:15:16:80:4e:d8:72:67:3e
Serial Number (int): 2319913479216558146661041869423798078
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1b:96:2a:e1:4b:93:63:91:e9:55:ec:7a:e1:2a:c6:57:4f:ef:71:a0
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): ca:fa:e3:ec:28:8a:c4:c4:06:9a:9c:6f:e4:10:39:3a:60:c5:7f:d4
Fingerprint (sha256): 02:48:62:1e:b8:06:be:66:b3:ad:a9:4e:88:a0:0e:14:70:63:12:a6:2f:14:6a:c8:f4:a8:bd:df:33:26:64:0c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eds.studio
autocheck.co.uk
brsafe.com.br
dev.affordabilitypassport.com
*.experianaperturedatastudio.com
lowell.experianaperturedatastudio.com
axesor.es
*.hml-web-brsafe.brscan.com.br
carmaxautofinance.experianaperturedatastudio.com
*.aquasec-na.security.gbl.experiancs.com
*.br.experian.com
vodafone.experianaperturedatastudio.com
www.datalab.com.br
*.brscan.com.br
*.dev.eps.experiancs.com
*.eds.studio
midyearse.com.br
*.midyearse.com.br
*.ssl.serasaexperian.com.br
e-microanalytics.com
us3.api2.qasemail.qas.com
www.autocheck.co.uk
www.serasaexperience.com.br
money.gocompare.com
brflow.com.br
imperva.com
datalab.com.br
gateway-sbx.castlightfinancial.com
*.brainag.app
*.qa.certificadodigital.com.br
*.brflow.com.br
serasaexperience.com.br
*.staging.eps.experiancs.com
www.axesor.es
www.e-microanalytics.com
gateway-stg.castlightfinancial.com
brscan.com.br
homologa.serasaexperience.com.br
*.brsafe.com.br
*.mike.mosher.cloud
bankofireland.experianaperturedatastudio.com
*.link.brsafe.com.br
*.natwestgroupscreening.com
*.zanderidtheft.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL6hNiwQN3p2XE9/0eRO
r1EAIGFMsWcTtvVjRCucXhXozNBCRbGaOyI7gH/VIZUtu1oqIj54e/2XCuxUoehb
9hGiwZpaIIpELMCL49yFBIH9GY1zaPCoDuuJjJsxV0KXivmlOen9BEfcHQ7jMsc7
tGfsJoFXcJCwQJdCfvlJjF7DecHAvsPIF7umFLVLB8sIYwqgBPFO5N/wxNuyCHlT
X62BE10fnKnOuht5HG4owmhvh/p1nFUaAPpob8zucdajpOjYWAPgM6ESjygT7uGz
vqHWnekJAzUKAztnvCq4KMfGP3SEH6imRTSAJC2QfBYtGwr7i4hI8g4kMxVj4aIU
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2319913479216558146661041869423798078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 16:19:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 07:14:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18272318939921978697907690526244565178674286042960290711352213058767856757328440918321124200646645356535705527651983499911295570469848869371617790235350911516363762649598043665482711147210058443501822751410487542788789438100024397215716730633576890224883179885504176236576118502329709048885293719054104698846383490128134105461791237369682239665142335443502519136828445432730134878637495693367567076035295273353509701856758413429295785388346854640755538713854440436043301252781552727214275206693224385659559799773702953820740388872473922894438352838780632388505073051966443274757991612773866354180176002714091074491503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1092 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eds.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocheck.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brsafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.affordabilitypassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowell.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axesor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hml-web-brsafe.brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmaxautofinance.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquasec-na.security.gbl.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datalab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.eps.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eds.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midyearse.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midyearse.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssl.serasaexperian.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-microanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us3.api2.qasemail.qas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocheck.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serasaexperience.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.gocompare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datalab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-sbx.castlightfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brainag.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.certificadodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serasaexperience.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.eps.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axesor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-microanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-stg.castlightfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologa.serasaexperience.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brsafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mike.mosher.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofireland.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.link.brsafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natwestgroupscreening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zanderidtheft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b962ae14b936391e955ec7ae12ac6574fef71a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00859ebe6954b4892f62b353a260f85f076544ffa2893d0b64f54deb1bd73e7d1b5dea42d1fc3b77ac48c71c7d8173ac5b3321b1e921f9d6cc0e1ea544508bdc4f6338da175ecc67513310f28a3f94a5816c79fa4a202181b54a15f037d55f163b62921c5d32df9b844121788f2f85a9ec6198847235aea3d8ddb3e60a6910cd15b189223caa115c200fa17b1f01232614c13e278c9569012f60244c1d6d997c0d733d1b844607a7e7d87f265b1449cfb3fa42ed6ad3ff96a76dd412c0a0ec557e443f0301b2a67c4af0ef2b28ef707e233b8fb5be5a1210b693847c2da00011c6a0d8f6fcb5e79d57f2e0195c2d09cd7e538b6f5a78c58dd6bc5ab5fdc2b7860e