sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7a:59:de:71:fc:2c:86:8f:43:91:db:5f was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7a:59:de:71:fc:2c:86:8f:43:91:db:5f
Serial Number (int): 37865816064162124317794098015
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: cf:ee:c5:7e:89:58:d6:17:b0:2d:a1:f0:00:39:e2:f3:3e:77:49:a2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 84:d6:2c:1e:58:74:40:05:fb:e5:a9:9b:32:21:db:b0:f4:77:5e:86
Fingerprint (sha256): 05:7b:ae:ef:85:cb:a5:24:f2:27:93:68:87:4c:8e:74:8f:2e:a4:16:11:96:9b:70:dc:f1:f0:fe:91:aa:08:da

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com
sim-samsriversandpsrs-api.cld.samsclub.com
sim-takeaction.cld.samsclub.com

Other certificates including the domain name samsclub.com

(limited to 100 certificates)
nonprod.samsclub.com
prod-membership-posgateway.cld.samsclub.com
catalog.samsclub.com
nonprod.samsclub.com
pfedcert.wal-mart.com
config-by-category.cld.samsclub.com
sams-labeling-api.prod.cld.samsclub.com
nonprod.samsclub.com
prod-membership-dome.cld.samsclub.com
epic-core-prod.cld.samsclub.com
hubmetrics.samsclub.com
prod-asksam-api.bots.cld.samsclub.com
backroom-delivery.dev.cld.samsclub.com
pc.ui.samsclub.prod.walmart.com
prod.samsclub.com
cf-nonprod2.walmart.com
wem-prod.walmart.com
links.samsclub.com
blog.photo.samsclub.com
gorollick.samsclub.com
smart-alerts.api.stg.eus.cld.samsclub.com
prod.samsclub.com
adlist-api.cld.samsclub.com
nep-stage.services.samsclub.com
stg-geode-linkage-services.cld.samsclub.com
www.samsclub.com
dev-sams-recurring-payments.cld.samsclub.com
photo.samsclub.com
nonprod-int.samsclub.com
ak-prod3.walmart.com
nonprod.samsclub.com
nonprod-intone.samsclub.com
prod-membership-subscription.cld.samsclub.com
*.samsclub.com
vip20-pravaha-qa-https-web-p-1.walmart.com
mbrxo-cpc-api-gateway-qa.cld.samsclub.com
sams-iot-api.cld.samsclub.com
nonprod-int.samsclub.com
supplier.samsclub.com
vip01-misc-qa-https-web-p-3.walmart.com
dev-fresh-inventory-audit-eus.cld.samsclub.com
prod-member-experience-sfclocation.cld.samsclub.com
npclubopsapim.cld.samsclub.com
pravaha.samsclub.com
stage-member-experience-storage.cld.samsclub.com
opinion.asda.com
click.em.samsclub.com
vision.cld.samsclub.com
SWOTrn01.wireless.samsclub.com
experiments.samsclub.com
stg2-tms-load.cld.samsclub.com
www7.samsclub.com
smart-alerts.api.dev.eus.cld.samsclub.com
nonprod.samsclub.com
beacon.walmart.com
payment.samsclub.com
event-horizon-info-eus.cld.samsclub.com
ent-backbone-api-gateway-stg.cld.samsclub.com
stage-membership-metadata.cld.samsclub.com
beacon.walmart.com
mth.api.dev.eus.cld.samsclub.com
fa-nonprod.walmart.com
dev-sams-two-factor-event-processor.cld.samsclub.com
akamai-san41.exacttarget.com
beacon.qa.walmart.com
hec.azsamssplunk.cld.samsclub.com
cf-nonprod2.walmart.com
vip01-misc-qa-https-web-p-6.walmart.com
stg-wallet-api.cld.samsclub.com
sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com
vip12-sams-qa-mobile-api-https-p-5.walmart.com
stg-membership-integration.cld.samsclub.com
cdn.corporate.walmart.com
pravaha-stage.samsclub.com
vip01-4-misc-qa-https-web-p-1.walmart.com
specialoffer.samsclub.com
vip01-misc-qa-https-web-p-2.walmart.com
ccservice-nonprod.walmart.com
pfedcert.wal-mart.com
corporate.walmart.com
nep-pqa.services.samsclub.com
cloud.em.samsclub.com
exports-stg.cld.samsclub.com
webservices.samsclub.com
pfedprod.wal-mart.com
stage-member-experience-search.cld.samsclub.com
dev-membership-subscription.cld.samsclub.com
event-horizon-eus.cld.samsclub.com
fimprodext.walmartbenefits.com
stage-member-experience-dispense.cld.samsclub.com
ak-nonprod3.walmart.com
vip01-misc-qa-https-web-p-1.walmart.com
document.wireless.walmart.com
exports-api-stg.cld.samsclub.com
prod-sams-twofactor.cld.samsclub.com
cf-nonprod2.walmart.com
prodcluboperationsapim.cld.samsclub.com
vip01-misc-qa-https-web-p-6.walmart.com
prod-membership-metadata.cld.samsclub.com
flights.serviceshub.samsclub.com

Certificate

The complete raw certificate details for sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwTCCBamgAwIBAgIMelnecfwsho9DkdtfMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzA3MjEyMTA3MzZaFw0y
NDA4MjEyMTA3MzVaMIGTMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQXJrYW5zYXMx
FDASBgNVBAcTC0JlbnRvbnZpbGxlMRUwEwYDVQQKEwxXYWxtYXJ0IEluYy4xRDBC
BgNVBAMTO3NpbS1kYXRhYWNxdWlzaXRpb24tZ2Rzbi10YWtlYWN0aW9uLXdlYmFw
cC5jbGQuc2Ftc2NsdWIuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA8yVHV7YpHVb0do5AJ7inbJux1QcA4GQd0yxSN+9VJwX+woSIUAGbUtGxxdbh
J6TOu+gXKuhPZ9Y+YKv7rkyXboAneBh7KFCaEp7P5Cw6tULieZbT6BvDZWvDPKCw
ZRfHEp6Wzz25LfQQQgx9ykmW24m1JgNLW7Hw/Aed/sb9kLl4lWTUfVZtQwTs4wgZ
vTQTfL/i3X9+UHCnSLogJ2dCK5pDl+4vElB5Vk/js03IjQX4Y6crhyQn69w86yYy
ZLP/473RlyGk4/iv1xFKzYYIbdtq8z7miGeCCAVi+mDoRLlxeIC61YHupwZXy8/V
EDpw6KLH6DTd91nnqaJDJsT4Eju4q1brp5lUPpEHKtYQXn3JwJPtl+JLrzaoaHFn
KauR0a9LQtkMMIcdGYaqzRdWqM3REWKp3zhMsmTVMrc5q5cOLPCxEu+cYxIjFw2r
S3fNNDPbiykFDUt2O1tlEoGqyXiB/MzPTQebcDvwseR3ijRkMFFU7dJ3S/bnMc9K
m9XM3fuNShdG4gUAS82xh63b6K6nfWntHJ1hy9TALUSVq9FoNbw7vxXl33P1vcci
mj8PffMBOrS7aleJqKivQyFrGsscGo+oui9WACwrlSg39w5twQV/7PrsPpX/Fao6
T+pyiOp9Lvrwa8AThBSmuTdpl/0S3tZCAEtqACRVMKXudwECAwEAAaOCAlUwggJR
MA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4
aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNh
MjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29t
L2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
CAYGZ4EMAQICMAkGA1UdEwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2Ny
bC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDCBlQYDVR0RBIGN
MIGKgjtzaW0tZGF0YWFjcXVpc2l0aW9uLWdkc24tdGFrZWFjdGlvbi13ZWJhcHAu
Y2xkLnNhbXNjbHViLmNvbYIqc2ltLXNhbXNyaXZlcnNhbmRwc3JzLWFwaS5jbGQu
c2Ftc2NsdWIuY29tgh9zaW0tdGFrZWFjdGlvbi5jbGQuc2Ftc2NsdWIuY29tMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhn
qN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUz+7FfolY1hewLaHwADni8z53SaIwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJ/S1SWZbv90kSDs
wNbkh99P/mAxSAYlSp6iDd68fH434yTMvCX9gif1it85rGv9AMRQJry7GoSmnd6q
uC9EJpbdPsSf36JTNSZj7MhvLB24CM2SV58ZynRK4f//imf8TTOrZzpj2UdKoZtY
YOE2WR49UjSFaYosBjE28qbpfKD8+gS76o+2+mVFu1GdADKODrkU8fb5zs4RKgF8
KvbF3ML/+W0niSPL1mHIEBdCu+F3UXcD0K6KG87cXjDS3/evgeDLXfECPI17BbbT
AykwAV20umOO5VxpQ9cPFM/kEG3ZNfvtD5vmiy/Y+RhzzTBVB4RFCPxS5gUTr4OE
fW+Yt20=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37865816064162124317794098015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 21:07:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 21:07:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 991947585694452233289468815376006597903467858296141860822949981855028255705708858190515107452007447479857580960513352025151906620802361200125506609127657897146004923745836768828194710847592729940849587916560685396964871199191240503838363112546035164133736824555873953953902830482293583647538108248108240465738083035881749753213815102175848844166609363762949821463711785350471481636646912416106286027213556380545093268772175022574364877674704297314412140807656782379420971052508665751196907984753787685518906277606294543181011432077412856948854891860383644599228249988157750492244643258360237795231364282781251519223904027989554854064804371255507812421364180858379082181668199060058641039351837841003937479707544017031945333055237383712246210061209858701403670490703866721392148326748716417200763444798387592598290323530972136119210814916274854313337649848745227751413980961667434100643239644100024349409198375644388104199314146992867882620324575203569712966621703498339912994430025615621655469063279221282509538468979141246766657612349339489549631962159436655824159879303406632089967540630283470323752291094217675692461257751486928755042207126725479722232097813070239075527893972350387540870670229202720720889312348507748186941454081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim-samsriversandpsrs-api.cld.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim-takeaction.cld.samsclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfeec57e8958d617b02da1f00039e2f33e7749a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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