www.huffpost.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:e3:0e:cb:96:85:3a:64:08:37:d0:dc:02:fc:29:87 was issued on by GlobalSign nv-sa.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.huffpost.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e3:0e:cb:96:85:3a:64:08:37:d0:dc:02:fc:29:87
Serial Number (int): 2508179466307577613359787796667836807
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7f:79:a1:22:c0:cb:27:84:67:e3:a0:dd:8f:fb:cc:f4:58:31:f9:35
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 9d:5c:75:6a:fc:d0:00:29:44:f7:e2:a5:68:e5:5c:66:a4:b3:91:4d
Fingerprint (sha256): 0c:10:5a:c4:91:18:08:a2:a0:18:46:c0:63:af:41:87:4f:b4:eb:8c:f6:ec:58:1f:e9:49:e1:53:a9:8a:fa:9e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate www.huffpost.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.huffpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.huffpost.com
*.huffpost.com
*.assets.huffingtonpost.com
*.assets.huffpost.com
*.huffingtonpost.ca
*.huffingtonpost.co.uk
*.huffingtonpost.com
*.huffingtonpost.com.au
*.huffingtonpost.es
*.huffingtonpost.fr
*.huffingtonpost.gr
*.huffingtonpost.jp
*.huffingtonpost.kr
*.huffpost.co.uk
*.elections.huffpost.com
*.m.huffingtonpost.ca
*.m.huffingtonpost.co.uk
*.m.huffingtonpost.com.au
*.m.huffingtonpost.es
*.m.huffingtonpost.fr
*.m.huffingtonpost.gr
*.m.huffingtonpost.jp
*.m.huffingtonpost.kr
*.m.huffpost.com
*.m.quebec.huffingtonpost.ca
*.mapi.huffpost.com
*.modulous.huffpost.com
*.quebec.huffingtonpost.ca
www.huffingtonpost.com
*.qa.huffingtonpost.com
*.staging.huffingtonpost.com
*.staging.mobile.huffpost.com
*.thespoils.huffpost.co.uk
*.widgets.huffpost.com
*.www.huffingtonpost.ca
*.www.huffingtonpost.co.uk
*.www.huffingtonpost.com
*.www.huffingtonpost.com.au
*.www.huffingtonpost.es
*.www.huffingtonpost.fr
*.www.huffingtonpost.gr
*.www.huffingtonpost.jp
*.www.huffingtonpost.kr
*.www.huffpost.com
*.www.quebec.huffingtonpost.ca
*.login.huffpost.com

Other certificates including the domain name huffpost.com

(limited to 100 certificates)
checkout.yahoo.com
qa5.add.my.aol.com
staging-origin-life.huffpo.net
preview.www.huffpost.com
*.preview.www.huffpost.com
qa.mapi.huffpost.com
coupons.huffpost.com
link.huffpost.com
*.aol.com
*.add.my.aol.com
checkout.yahoo.com
img.huffingtonpost.com
www.huffingtonpost.com
*.login.yahoo.com
consent.oath.com
*.dev.buzzfeed.io
cmp.huffpost.com
production.mapi.huffpost.com
img.staging.huffingtonpost.com
qa.mapi.huffpost.com
src5.yahoo.com
staging-origin-life.huffpo.net
beta-origin-cambria-alb.huffpo.net
staging.mapi.huffpost.com
staging.www.huffingtonpost.com
*.aol.com
stage.consent.oath.com
stage.guce2.oath.com
cmp.huffpost.com
production-kraken-valencia-preview.use1.huffpo.net
*.search.yahoo.com
secure.huffingtonpost.com
checkout.yahoo.com
link.huffpost.com
dev.checkout.yahoo.com
huffpost.com
qa.preview.www.huffpost.com
*.aol.com
stage.consent.oath.com
api.huffpost.com
link.huffpost.com
cmp.huffpost.com
*.dev.buzzfeed.io
*.trunk.login.yahoo.com
stage.consent.oath.com
cmp.huffpost.com
*.search.yahoo.com
stage.guce2.oath.com
modulous.huffpost.com
stage.oidc.oath.com
qa.preview.www.huffpost.com
stage.consent.oath.com
staging.www.huffingtonpost.com
www.huffpost.com
mapi.huffpost.com
*.stage.login.yahoo.com
auth.stage.huffpost.com
www.huffpost.com
dev.search.yahoo.com
origin-kraken.huffpo.net
beta-origin-cambria-alb.huffpo.net
se.emails.huffpost.com
*.search.yahoo.com
assist.aol.com
qa.preview.www.huffpost.com
www.huffingtonpost.com
*.login.yahoo.com
www.huffingtonpost.com
*.login.yahoo.com
beta.www.huffpost.com
modulous.huffpost.com
elections.huffingtonpost.com
src5.yahoo.com
src5.yahoo.com
*.aol.com
*.contributor.huffingtonpost.com
*.search.yahoo.com
cmp.huffpost.com
guce2.oath.com
origin-kraken.huffpo.net
src5.yahoo.com
checkout.yahoo.com
checkout.yahoo.com
stage.guce2.oath.com
*.assets.huffingtonpost.com
*.stage.login.yahoo.com
dev.checkout.yahoo.com
dev.checkout.yahoo.com
auth.stage.huffpost.com
trunk.consent.oath.com
*.stage.login.yahoo.com
dev.search.yahoo.com
se.emails.huffpost.com
*.stage.login.yahoo.com
*.search.yahoo.com
huffpost.com
stage.guce.huffpost.com
www.huffingtonpost.com
auth.huffpost.com
consent.oath.com

Certificate

The complete raw certificate details for www.huffpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cOXTw1VbUdjwbrQ+X/R
gJXygcEHE8taDjnsB/3s8m4uN/3cAp0nvnVaZPVXOE7Z1uTO6R5yFgwAi80qzTbg
KvjPj9S0eHVDQBMg0mJJct4GqaUdJ+3Y82aaJLV2MGIFHj2is3XF08wa91KLMbBL
y5Xa4jKaUjrYb+TN2y0RgKJw2biXDHGc0zdJw0xSQNXmh0yFvNhF9mzuvZFo9m9O
O0E4t60aa8oeQODDJCUBjQfTL6sYb/kI3vKbrlfNkg3CCRrfpuLcFW8kTPX0vz7q
tFww1jU1IcwDsuLmO+KiMyRxq+lAeaK92Ke23ggN5IuaoIph3WSnE+oLxY7B+Gn2
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2508179466307577613359787796667836807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 16:26:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 16:26:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.huffpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29509974598564916390584451329675568739044267347512798826010692998907667342896906809900207069179446359536153003589991712804164629137914866322666445950515261666422872725902340350836176242700937626936927585255615389734134792598350203438082015375315903709727029628239466784689758565877536146939637784808101125842408944474566495616319465386721499224962742523881487277880990716506431833240228233961536955115173779195180350689197946708382557894998072515709484968912374026523408201865017866269992259158892708104259111351612839313424982289041981192478662096079579974319021114466973992035235028129478203645968539484644449056437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elections.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapi.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modulous.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.mobile.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widgets.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.huffpost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f79a122c0cb278467e3a0dd8ffbccf45831f935
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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