imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:56:15:48:8c:f8:8b:b1:22:4c:cb:ee:d1:48:ed:98 was issued on by GlobalSign nv-sa.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:56:15:48:8c:f8:8b:b1:22:4c:cb:ee:d1:48:ed:98
Serial Number (int): 1776197204276663415807771478199954840
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 29:25:cd:63:e6:9d:40:88:64:c8:87:58:11:1e:7a:87:7c:b9:21:1f
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): d9:e5:2b:45:2a:6c:c2:ae:f2:c1:f0:83:ab:9f:54:60:d4:ef:6b:b7
Fingerprint (sha256): 03:83:c9:42:31:76:7f:46:6b:bc:8c:22:9f:9b:6e:d5:59:36:8d:fb:e0:be:ed:10:b4:b1:df:05:aa:c2:47:90

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eds.studio
autocheck.co.uk
brsafe.com.br
dev.affordabilitypassport.com
*.experianaperturedatastudio.com
lowell.experianaperturedatastudio.com
axesor.es
*.hml-web-brsafe.brscan.com.br
carmaxautofinance.experianaperturedatastudio.com
*.aquasec-na.security.gbl.experiancs.com
*.br.experian.com
vodafone.experianaperturedatastudio.com
www.datalab.com.br
*.brscan.com.br
*.dev.eps.experiancs.com
*.eds.studio
e-microanalytics.com
us3.api2.qasemail.qas.com
www.autocheck.co.uk
money.gocompare.com
brflow.com.br
imperva.com
datalab.com.br
gateway-sbx.castlightfinancial.com
*.brainag.app
*.qa.certificadodigital.com.br
*.brflow.com.br
*.staging.eps.experiancs.com
www.axesor.es
www.e-microanalytics.com
gateway-stg.castlightfinancial.com
brscan.com.br
*.brsafe.com.br
*.mike.mosher.cloud
bankofireland.experianaperturedatastudio.com
*.link.brsafe.com.br

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+aWZYH6R75prQw1X7nY
9NZX8Sqz6Tl2IjYWzxVsGOE4oZwiTK7DfNMogBa1bo8Hs12OgI842/3Xq5UhgdbF
5zu4SuzYaL00X/5igIvJynXmisDX1zYR9FGI0Ix5gLHkjMoSQmYaaihP5RXTrZ9T
TopWFS/wEKhAdoVvdUh8hfRYolfdwjaJDrA93KS9OEvJX4hzhvzenpc4nsRplYus
V8cLhGUlBAhDF+9SUWOmJ0tlri+O/DGBea8Pnzink8fdvgg+83xj31+4+hTrz2Yw
RzhvAnR8+HR+mTwGkIskP5zAbM3UTKOfSu4mT3Wv1dbtMjLpYpB1CRCWbkw2D/3x
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1776197204276663415807771478199954840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 07:47:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-11 07:47:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31294568254068129720167666721989348341347941339551389821219584325857724143523143984291675467151229823182980378195523107120811670909751018787975292612681327240219611907864574212058261485572948248137742122069270314822984404391499173022066320892245614810847485804458178698679711222293297705021810143843562741025711715957404729424767655396871656630914539157513986593829237933211903604941764901214009752773723801512035490021684805051533944523334985023701630161791519829418692572731300582287700560661668235422962895380315249191601886196117510602354410351352684758745338920142504109587963315901496367879656082774899640103319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (887 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eds.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocheck.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brsafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.affordabilitypassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowell.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axesor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hml-web-brsafe.brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmaxautofinance.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquasec-na.security.gbl.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datalab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.eps.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eds.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-microanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us3.api2.qasemail.qas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocheck.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.gocompare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datalab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-sbx.castlightfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brainag.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.certificadodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.eps.experiancs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axesor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-microanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-stg.castlightfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brscan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brsafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mike.mosher.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofireland.experianaperturedatastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.link.brsafe.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2925cd63e69d408864c88758111e7a877cb9211f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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