imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:84:32:62:84:ac:4f:83:1e:f3:1b:5d:53:ef:bd:ff was issued on by GlobalSign nv-sa.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:84:32:62:84:ac:4f:83:1e:f3:1b:5d:53:ef:bd:ff
Serial Number (int): 2015633107011954124393156081385192959
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: aa:b6:e8:7d:b6:2b:ad:cf:e3:ce:07:22:bf:58:f9:ff:d9:64:ac:3f
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 5b:15:d4:7e:ae:12:6e:d7:22:e4:6c:c5:6b:e7:e2:78:fc:18:a1:de
Fingerprint (sha256): 04:37:28:3e:07:87:76:0f:de:fc:c5:95:dd:f7:08:d9:b6:90:b8:d1:6a:89:5e:8a:de:62:e4:65:5b:4e:92:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pcm.eu2.amadeus.com
pcm.eu1.amadeus.com
wav.cz.amadeus.com
*.bws-gateway.amadeusasia.com
wav.ap1.amadeus.com
*.contextsearch.saas.amadeus.com
uat.bmcshopping.amadeuses.com
*.travel-safety.amadeus.com
*.far.amadeuses.com
*.integratedpartners2.amadeus.be
*.script.pre.sca.amadeus.com
*.script.sca.amadeus.com
test.airport-companion.azoresairlines.airlines.api.amadeus.com
*.amadeus.be
www.solea-voyages.fr
*.solea-voyages.fr
book.nileair.com
wav.us1.amadeus.com
*.saas.amadeus.com
*.wftc4.amadeus.com
wav.eu2.amadeus.com
*.amadeus.fr
*.crystalcruises.contextsearch.saas.amadeus.com
airport-companion.azoresairlines.airlines.api.amadeus.com
imperva.com
solea-voyages.fr
pcm.cz.amadeus.com
pcm.ap1.amadeus.com
pcm.us1.amadeus.com
pcm.bibi.amadeus.com
*.visapass.amadeus.com
pp-ssf.amadeus.fr
book.flysas.com
*.sca.amadeus.com
prd.oneviewcx.amadeus.com
yourtrip.flysas.com
*.touchless.saas.amadeus.com
*.pre.sca.amadeus.com
wav.ca.amadeus.com
*.amadeusasia.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX1UE65axmZg5AUYLMA7
4xSjrYG55021lutZqGLOv8bP/NXNC6Iq9OIJ0F0tl1wCGhVccL/+RNUFlKXSJh2a
FS8/CDSK0TTxO0C3scTfmFwUedM1YIQfhf6uZoMSVj9pCCvs1Xa20neAs7SnjohT
1cOtD3RAAznf5HH9kWwTMTyipOSCCwucvy9wPedFuR4BkSTO9UstVKZ0QrAXLP13
txqJ9pbd74Ohza5FpG0imfPtsdh6p1A+OX82uCPdfKoMoZaQpGRRY6ssLq3lWvk9
+vAqkDhvvpk5Rt5Rx2amsuuiXq1d/vMI1trLH83aKJhNiYZmtJwvbKVEwj5YYwQb
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2015633107011954124393156081385192959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 13:28:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 04:23:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23415888168623641232445852563910751649902552744817929384301101616324800256426636647454741782356603930254036513532461021174090065271143432537341539840646375537429411697459120727301744560517025109528178848725707649759671181783778597546729361368880744555724048899904411034298883728791087457658673411211264603638925451443040051752364017439890292014003764016216902105623217714420795244884631205911634532839939092937950546620231183707615953767000734112815227049778369206730637165692035361040867580931749987403440809423559347315223418324427281984331219241685477997398499752706623910449669241309348875827537055946236085148417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.eu2.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.eu1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.cz.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bws-gateway.amadeusasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.ap1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.bmcshopping.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travel-safety.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.far.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integratedpartners2.amadeus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.script.pre.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.script.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.azoresairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solea-voyages.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solea-voyages.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.nileair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.us1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wftc4.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.eu2.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystalcruises.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.azoresairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solea-voyages.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.cz.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.ap1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.us1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcm.bibi.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visapass.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-ssf.amadeus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.flysas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.oneviewcx.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtrip.flysas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchless.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.ca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeusasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aab6e87db62badcfe3ce0722bf58f9ffd964ac3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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