san-001.ceros.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:a4:15:a9:61:e6:1d:11:8a:46:2e:6b:ab:aa:de:4a was issued on by GlobalSign nv-sa.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-001.ceros.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a4:15:a9:61:e6:1d:11:8a:46:2e:6b:ab:aa:de:4a
Serial Number (int): 2181204031044005363102955774317092426
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2f:19:f1:f1:cb:5e:9f:18:ef:5b:e6:a9:1b:b0:d4:3d:4e:49:08:cb
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 28:6e:eb:c5:5f:3c:a4:a1:ff:7d:84:4d:f2:12:ae:2a:84:ce:cd:ef
Fingerprint (sha256): 03:2e:c1:34:0e:5b:9c:cd:77:49:0a:82:3e:7d:f3:e3:df:75:ad:09:71:41:1d:d1:9b:44:97:8b:08:51:09:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate san-001.ceros.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-001.ceros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-001.ceros.com
secure.yougotta.be
go.margaritably.org
commercial.evo.co.uk
interactive.blueyonder.com
my.cignahealthengagement.com
engage.boldt.com
engage.ontada.com
brochures.khov.com
consign.paddlup.com
meet-us.ukg.com
landing.northerntrust.com
discover.ergon.com
sunrise.vancouversun.com
experience.ebiconsulting.com
go.mccain-inc.com
www.cannabislikeamother.com
interactive.franklintempleton.com
connect.tradeweb.com
my.cignamarketmessage.com
ninetyonequality.citywirecontent.com
experience.onlyinyourstate.com
interactive.ausenco.com
future.seic.com
www.future.seic.com
interactive.savills.ca
partnerwithus.savills.us
partnerwithus.savills.ca
trustedexperts.savills.us
trustedexperts.savills.ca
bigideas.woodmac.com
exceptional.bdo.com
experience.bdo.com
view.doit-intl.com
exp.tvsdesign.com
brochure.edwards.com
product.mediaconnect.com
interactive.azerionadstudio.com
forms.autoexpress.co.uk
www.klavebysika.es
ukgworks.ukg.com
presentation.nousgroup.com
markets.societegenerale.de
go.semtech.com
www.kubotam7003.com
engage.insight.com
partner.insight.com

Other certificates including the domain name ceros.com

(limited to 100 certificates)
tracking.duckvideo.co
san-006.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
new.ceros.com
san-001.ceros.com
ceros2.map.fastly.net
pilot.ceros.com
lucistatus.paradox.ai
san-001.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
lucistatus.paradox.ai
demo.ceros.com
san-003.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
san-001.ceros.com
agency.ibex.co
san-005.ceros.com
san-003.ceros.com
h3.shared.global.fastly.net
san-002.ceros.com
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1.map.fastly.net
h3.shared.global.fastly.net
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
san-004.ceros.com
login-test.auth.ceros.com
san-002.ceros.com
m.ssl.fastly.net
san-003.ceros.com
san-001.ceros.com
m.ssl.fastly.net
san-004.ceros.com
demo.ceros.com
san-003.ceros.com
m.ssl.fastly.net
lucistatus.paradox.ai
san-005.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
*.pinterestceros.com
m.ssl.fastly.net
san-004.ceros.com
view.ceros.com
view.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
view.ceros.com
san-001.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-002.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-005.ceros.com
san-003.ceros.com
cheetah.apstra.com
m.ssl.fastly.net
m.ssl.fastly.net
new.ceros.com
san-004.ceros.com
discover.newswire.com
ceros1.map.fastly.net
m.ssl.fastly.net
view.ceros.com
san-001.ceros.com
san-001.ceros.com
stage-auth0.ceros.com
san-006.ceros.com
san-002.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
lucistatus.paradox.ai
san-004.ceros.com
san-006.ceros.com
*.ceros.com
h3.shared.global.fastly.net
outreach.ceros.com
h3.shared.global.fastly.net
san-003.ceros.com
ceros1.map.fastly.net
ceros.map.fastly.net
lucistatus.paradox.ai
san-003.ceros.com
san-004.ceros.com
m.ssl.fastly.net
san-002.ceros.com
san-003.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
m.ssl.fastly.net
ceros1.map.fastly.net
san-004.ceros.com
view.ceros.com
secure0033.hubspot.com
*.dlrgroup.com
san-005.ceros.com

Certificate

The complete raw certificate details for san-001.ceros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArELj+sEQHLTD/4rxq7tX
vid5RxZlJ+WnRTZ9v60MGjkXvwUmo7Zpv6gQvl4+tl3UaX6rXWvXdJweJRyIEmH6
lzECc5m+5NKSUDZ+w0P2Vbs+Gk/9p/1v3W6UhGVQfW1HDzndNjKFujU7b02LZc8E
vlrJnYLAgOiFG3idosuiLdhmTirPNOHcxtsuCNoA2QIyE2KFtpv67vON/QfwiN2/
eavzHBBvu3wBoPi4mqp+njKFsLCRxkVsz7mFLiQbjZmld8hlpcBe+7je30v4z5a8
fvELLAmPHeOh0i+2Ivc8orxrEKGHgcL7ECYMov68IwNKIfrIQvzbvcGHByiRlcg3
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2181204031044005363102955774317092426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-21 11:24:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-23 11:24:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san-001.ceros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21745973411245438390833557268441970870866879187279121785144162968916400824936994666419913779642865875071961067670004341713039999323086351513571836555309059084991476750745202369973344714672570594480068272520273134796496585574339470175601285610104583533669928227822732801403296371354176836337588483654411815792053736649196917185123855124507147899280930837709190525191419539113131588457536244973940179694988313298845977770983452388361309930977640434495014573564779796142394007961821012991156490749798158477849312466969953417122026927430609758393099342203076769617996077276977376035850266283057639207930925992471662442287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-001.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.yougotta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.margaritably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.blueyonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignahealthengagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.boldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ontada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.khov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consign.paddlup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-us.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.ergon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrise.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.ebiconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mccain-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabislikeamother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.franklintempleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.tradeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignamarketmessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninetyonequality.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.onlyinyourstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.ausenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigideas.woodmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceptional.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.doit-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exp.tvsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.edwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.mediaconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.azerionadstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klavebysika.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukgworks.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentation.nousgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.societegenerale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.semtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotam7003.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.insight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.insight.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f19f1f1cb5e9f18ef5be6a91bb0d43d4e4908cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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