imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:2d:58:52:cd:f7:03:ad:2f:af:65:37:6d:8f:7c:d6 was issued on by GlobalSign nv-sa.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:2d:58:52:cd:f7:03:ad:2f:af:65:37:6d:8f:7c:d6
Serial Number (int): 1564672766916479685503471608675663062
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e8:17:87:e4:a0:5e:f6:a6:ca:53:b7:a5:be:a1:16:d0:24:b9:ec:76
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 4a:ce:cc:7b:b7:65:3c:cb:27:d2:ad:aa:2f:51:f4:83:be:8a:82:b0
Fingerprint (sha256): 0a:78:19:e0:a8:0c:53:b2:a9:97:0c:7e:4d:35:15:35:ba:2e:56:48:45:8a:b2:84:a9:4a:17:0f:fd:78:d5:f0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hoosierchildcarefamily.com
*.wicconnect.com
latots.org
auditlink.services.conduent.com
www.bayareafastrak.org
www.echildcarenj.org
uat4.wicconnect.com
echildcarenj.org
uat.workforcesolutionschildcare.com
www.workforcesolutionschildcare.com
*.echildcarenj.org
uat.hoosierchildcare.com
www.hoosierchildcare.com
www.latots.org
mobile.bayareafastrak.org
uat.vaecc.org
vaecc.org
uat3.wicconnect.com
imperva.com
bayareafastrak.org
www.septakey.org
sdlc.central.conduent.com
hoosierchildcare.com
qa.nhmmis.services.conduent.com
hoosierchildcarefamily.com
auditlinkuat.services.conduent.com
workforcesolutionschildcare.com
alpha.septakey.org
www.vaecc.org
uat2.wicconnect.com
ebt-link.illinois.gov
uat.hoosierchildcarefamily.com
wicconnect.com
www.wicconnect.com
septakey.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7rmkgMgYywCIWI7ySia
pMfTxtIHCdqLsM4yAwsSuvd7CZVk5KasmGiemT60GI4JdW1VCTAJATN22w+jl4yU
xdAD5IJmcy+yLxe5AOHprYZT8lR49Lh4hG2NjUhfx0jcDciJE6qrLX4xQCFqAwVl
TNAmCt1BkQenmNJc02T+Drp4Ytsc2yRl6mrBZNlBY3y9pdX/bGKmR+pGXKRZXXiL
IoH2miUV8z0C32nlaBvMK//B5GFwqO78g0o5XCdb/PYwzDKvd5ApNt5qANooGv9b
xDtaXpMHfxy7zA9x9XcJ+HyhVa75Bxf7eBFCBicYZ5Kcq1cwDymddO+TY3hayfSr
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1564672766916479685503471608675663062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 07:19:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 07:19:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17639288543430216246334915097104223381266478834725712912578165573588370355732157665971178994854077720129976750092553523099097653519613758520642050328311148063891038529563134909736247991941208217943171891585943630725962587304287737025132909555607805713774104031490545482237034096313433790955183396583953263319183014395025861077905510237015023027264129772801603513768159916044955070656334834924894384975629516569032648407496679367674567787198650029536120242160687844231126492299910287320771620977353790520626765332038501120822647054946642632258197552585788361367329716614662224565163085056443337519335044670571844774763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (811 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditlink.services.conduent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayareafastrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echildcarenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echildcarenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echildcarenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.bayareafastrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayareafastrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.septakey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdlc.central.conduent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.nhmmis.services.conduent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditlinkuat.services.conduent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.septakey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebt-link.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septakey.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e81787e4a05ef6a6ca53b7a5bea116d024b9ec76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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