*.admission.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:d4:0d:4b:e4:69:7e:5a:b4:f4:7b:7e:66:aa:d0:6c was issued on by GlobalSign nv-sa.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.admission.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d4:0d:4b:e4:69:7e:5a:b4:f4:7b:7e:66:aa:d0:6c
Serial Number (int): 2430264613921451513442305657851793516
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e1:78:3b:b6:19:8a:28:85:aa:1c:5b:c0:f7:6b:91:1e:34:ab:af:a0
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): 8e:87:97:b3:56:0d:a2:bb:05:4f:3f:7d:51:c9:1f:97:07:65:d6:c4
Fingerprint (sha256): 18:01:a3:de:9b:9f:bd:fa:05:b3:9e:52:c5:5a:3c:b6:56:b5:c9:23:19:59:fd:a9:c3:1a:07:b6:c8:01:28:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate *.admission.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.admission.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.admission.com
*.biletix.com
*.comedystopcopenhagen.dk
*.livenation.ae
*.livenation.cn
*.livenation.co.il
*.livenation.co.jp
*.livenation.co.nz
*.livenation.co.th
*.livenation.co.uk
*.livenation.co.za
*.livenation.com.au
*.livenation.com.tw
*.livenation.cz
*.livenation.de
*.livenation.dk
*.livenation.ee
*.livenation.es
*.livenation.fi
*.livenation.fr
*.livenation.hk
*.livenation.hu
*.livenation.it
*.livenation.kr
*.livenation.lt
*.livenation.nl
*.livenation.no
*.livenation.pl
*.livenation.qa
*.livenation.se
*.livenation.sg
*.livenationinternational.com
*.lne.nonprod.public.tmaws.eu
*.ticketmaster.at
*.ticketmaster.be
*.ticketmaster.ca
*.ticketmaster.ch
*.ticketmaster.co.nz
*.ticketmaster.com
*.ticketmaster.com.au
*.ticketmaster.cz
*.ticketmaster.de
*.ticketmaster.dk
*.ticketmaster.es
*.ticketmaster.fi
*.ticketmaster.fr
*.ticketmaster.it
*.ticketmaster.nl
*.ticketmaster.no
*.ticketmaster.pl
*.ticketmaster.se
*.ticketweb.co.uk
*.tmol.co
admin.preprod-verifiedfan.ticketmaster.com
admin.verifiedfan.ticketmaster.com
am-prod-client-files.ppub-tmaws.io
am-static-01.ticketmaster.com
am-static-02.ppub-tmaws.io
am-static-03.ppub-tmaws.io
am-static-04.ppub-tmaws.io
am-stg-client-files.ppub-tmaws.io
am-stg-common-content.ppub-tmaws.io
buy.taylorswifttix.com
checkout.ticketmaster.com
common-widgets.ppub-tmaws.io
concerts.livenation.com
embed-au-alpha.ticketmaster.net
embed-au-int.ticketmaster.net
embed.ticketmaster.com.au
fr.livenation.be
harrypotter.ticketmaster.com.au
identity.eventinventory.com
identity.ticketmaster.co.nz
identity.ticketmaster.co.uk
identity.ticketmaster.com.au
identity.ticketmaster.com.mx
identity.ticketmaster.ie
int-checkout.ticketmaster.net
m.ticketmaster.co.nz
m.ticketmaster.com.au
m.ticketmaster.com.mx
mw.ticketmaster.com
nl.livenation.be
preprod1-am.ticketmaster.com
stage.checkout.ticketmaster.com
stg-common-widgets.ppub-tmaws.io
stg1-am.ticketmaster.com
ticketmaster.ca
ticketmaster.co.nz
ticketmaster.co.uk
ticketmaster.com
ticketmaster.ie
verifiedfan.livenation.com
verifiedfan.ticketmaster.ca
verifiedfan.ticketmaster.co.nz
verifiedfan.ticketmaster.co.uk
verifiedfan.ticketmaster.com.au
verifiedfan.ticketmaster.ie
www.verifiedfan.ticketmaster.com
micro-au.ticketmaster.net

Other certificates including the domain name admission.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
mirage.admission.com
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
onsale.admission.com
admission.com
ticketmaster3.map.fastly.net
bellagio.admission.com
bellagio.admission.com
ticketmaster4.map.fastly.net
dns-vetting1d.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
*.admission.com
admission.com

tm.vegas.admission.com
ticketweb.co.uk
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
*.admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
mail-na.livenation.com
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
mgm.admission.com
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
mgm.admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for *.admission.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN/TCCDOWgAwIBAgIQAdQNS+Rpflq09Ht+ZqrQbDANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMiBRMjAeFw0yMjA1
MTYyMTI5MjJaFw0yMzA2MTcyMTI5MjFaMBoxGDAWBgNVBAMMDyouYWRtaXNzaW9u
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQK4fgLbSBT8/Ys
eNnp1RS0N+UoPr1oe4UJxt9JbhyPMCV7MXHQrRxTGb6jymd04YWkVoX8T5RB4Tar
AQgkDHVZseUkRNEz5Af4BZl8E+GJ6WdPwRnlQ3s4tkF87FUMYtgq1cDdiWAbo4Ge
VsYsOgzC3nnzs+sYCanr5xNDalywBI7/K5CHYrFYuDt78q5GNFeXmH3HDLP3BiYA
RNGOwK4riMeVuoNzFOgmertE/VqKtC5uWuNlQwBtksFFWqu3M+hVfg1wNZqgKBjr
6ZCEIK5z0RioluAbV4ixLW1dKYEPP9j+7Xckl61OZn0CR00T4SH4gkaLETehU8fy
5/d8mnsCAwEAAaOCCv8wggr7MIIJIQYDVR0RBIIJGDCCCRSCDyouYWRtaXNzaW9u
LmNvbYINKi5iaWxldGl4LmNvbYIZKi5jb21lZHlzdG9wY29wZW5oYWdlbi5ka4IP
Ki5saXZlbmF0aW9uLmFlgg8qLmxpdmVuYXRpb24uY26CEioubGl2ZW5hdGlvbi5j
by5pbIISKi5saXZlbmF0aW9uLmNvLmpwghIqLmxpdmVuYXRpb24uY28ubnqCEiou
bGl2ZW5hdGlvbi5jby50aIISKi5saXZlbmF0aW9uLmNvLnVrghIqLmxpdmVuYXRp
b24uY28uemGCEyoubGl2ZW5hdGlvbi5jb20uYXWCEyoubGl2ZW5hdGlvbi5jb20u
dHeCDyoubGl2ZW5hdGlvbi5jeoIPKi5saXZlbmF0aW9uLmRlgg8qLmxpdmVuYXRp
b24uZGuCDyoubGl2ZW5hdGlvbi5lZYIPKi5saXZlbmF0aW9uLmVzgg8qLmxpdmVu
YXRpb24uZmmCDyoubGl2ZW5hdGlvbi5mcoIPKi5saXZlbmF0aW9uLmhrgg8qLmxp
dmVuYXRpb24uaHWCDyoubGl2ZW5hdGlvbi5pdIIPKi5saXZlbmF0aW9uLmtygg8q
LmxpdmVuYXRpb24ubHSCDyoubGl2ZW5hdGlvbi5ubIIPKi5saXZlbmF0aW9uLm5v
gg8qLmxpdmVuYXRpb24ucGyCDyoubGl2ZW5hdGlvbi5xYYIPKi5saXZlbmF0aW9u
LnNlgg8qLmxpdmVuYXRpb24uc2eCHSoubGl2ZW5hdGlvbmludGVybmF0aW9uYWwu
Y29tgh0qLmxuZS5ub25wcm9kLnB1YmxpYy50bWF3cy5ldYIRKi50aWNrZXRtYXN0
ZXIuYXSCESoudGlja2V0bWFzdGVyLmJlghEqLnRpY2tldG1hc3Rlci5jYYIRKi50
aWNrZXRtYXN0ZXIuY2iCFCoudGlja2V0bWFzdGVyLmNvLm56ghIqLnRpY2tldG1h
c3Rlci5jb22CFSoudGlja2V0bWFzdGVyLmNvbS5hdYIRKi50aWNrZXRtYXN0ZXIu
Y3qCESoudGlja2V0bWFzdGVyLmRlghEqLnRpY2tldG1hc3Rlci5ka4IRKi50aWNr
ZXRtYXN0ZXIuZXOCESoudGlja2V0bWFzdGVyLmZpghEqLnRpY2tldG1hc3Rlci5m
coIRKi50aWNrZXRtYXN0ZXIuaXSCESoudGlja2V0bWFzdGVyLm5sghEqLnRpY2tl
dG1hc3Rlci5ub4IRKi50aWNrZXRtYXN0ZXIucGyCESoudGlja2V0bWFzdGVyLnNl
ghEqLnRpY2tldHdlYi5jby51a4IJKi50bW9sLmNvgiphZG1pbi5wcmVwcm9kLXZl
cmlmaWVkZmFuLnRpY2tldG1hc3Rlci5jb22CImFkbWluLnZlcmlmaWVkZmFuLnRp
Y2tldG1hc3Rlci5jb22CImFtLXByb2QtY2xpZW50LWZpbGVzLnBwdWItdG1hd3Mu
aW+CHWFtLXN0YXRpYy0wMS50aWNrZXRtYXN0ZXIuY29tghphbS1zdGF0aWMtMDIu
cHB1Yi10bWF3cy5pb4IaYW0tc3RhdGljLTAzLnBwdWItdG1hd3MuaW+CGmFtLXN0
YXRpYy0wNC5wcHViLXRtYXdzLmlvgiFhbS1zdGctY2xpZW50LWZpbGVzLnBwdWIt
dG1hd3MuaW+CI2FtLXN0Zy1jb21tb24tY29udGVudC5wcHViLXRtYXdzLmlvghZi
dXkudGF5bG9yc3dpZnR0aXguY29tghljaGVja291dC50aWNrZXRtYXN0ZXIuY29t
ghxjb21tb24td2lkZ2V0cy5wcHViLXRtYXdzLmlvghdjb25jZXJ0cy5saXZlbmF0
aW9uLmNvbYIfZW1iZWQtYXUtYWxwaGEudGlja2V0bWFzdGVyLm5ldIIdZW1iZWQt
YXUtaW50LnRpY2tldG1hc3Rlci5uZXSCGWVtYmVkLnRpY2tldG1hc3Rlci5jb20u
YXWCEGZyLmxpdmVuYXRpb24uYmWCH2hhcnJ5cG90dGVyLnRpY2tldG1hc3Rlci5j
b20uYXWCG2lkZW50aXR5LmV2ZW50aW52ZW50b3J5LmNvbYIbaWRlbnRpdHkudGlj
a2V0bWFzdGVyLmNvLm56ghtpZGVudGl0eS50aWNrZXRtYXN0ZXIuY28udWuCHGlk
ZW50aXR5LnRpY2tldG1hc3Rlci5jb20uYXWCHGlkZW50aXR5LnRpY2tldG1hc3Rl
ci5jb20ubXiCGGlkZW50aXR5LnRpY2tldG1hc3Rlci5pZYIdaW50LWNoZWNrb3V0
LnRpY2tldG1hc3Rlci5uZXSCFG0udGlja2V0bWFzdGVyLmNvLm56ghVtLnRpY2tl
dG1hc3Rlci5jb20uYXWCFW0udGlja2V0bWFzdGVyLmNvbS5teIITbXcudGlja2V0
bWFzdGVyLmNvbYIQbmwubGl2ZW5hdGlvbi5iZYIccHJlcHJvZDEtYW0udGlja2V0
bWFzdGVyLmNvbYIfc3RhZ2UuY2hlY2tvdXQudGlja2V0bWFzdGVyLmNvbYIgc3Rn
LWNvbW1vbi13aWRnZXRzLnBwdWItdG1hd3MuaW+CGHN0ZzEtYW0udGlja2V0bWFz
dGVyLmNvbYIPdGlja2V0bWFzdGVyLmNhghJ0aWNrZXRtYXN0ZXIuY28ubnqCEnRp
Y2tldG1hc3Rlci5jby51a4IQdGlja2V0bWFzdGVyLmNvbYIPdGlja2V0bWFzdGVy
Lmllghp2ZXJpZmllZGZhbi5saXZlbmF0aW9uLmNvbYIbdmVyaWZpZWRmYW4udGlj
a2V0bWFzdGVyLmNhgh52ZXJpZmllZGZhbi50aWNrZXRtYXN0ZXIuY28ubnqCHnZl
cmlmaWVkZmFuLnRpY2tldG1hc3Rlci5jby51a4IfdmVyaWZpZWRmYW4udGlja2V0
bWFzdGVyLmNvbS5hdYIbdmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmllgiB3d3cu
dmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmNvbYIZbWljcm8tYXUudGlja2V0bWFz
dGVyLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB0GA1UdDgQWBBTheDu2GYoohaocW8D3a5EeNKuvoDBXBgNVHSAEUDBO
MAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4G
CCsGAQUFBwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxz
aWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyMnEyMEoGCCsGAQUFBzAChj5o
dHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRs
c2NhMjAyMnEyLmNydDAfBgNVHSMEGDAWgBRiqnShV6Dt4sTkSJgU49PcrnlRJTBI
BgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dz
YXRsYXNyM2R2dGxzY2EyMDIycTIuY3JsMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBSd+KosRVPaniLVUq6X/bEXUmH1c+Ks5TuzpfNM2+9
gureONe3UR8wPpNAQ+l7R24A8eT3Uu2QXkvL9g/TWOp/R/6e9bFCA/xLJbssPYv1
+i/TVgYrOTDdMbGMMp0zdnqi89huH5ATm1G9k4lRi4F074EwNtGBWAPGkE3ga2vL
jKHURJItaqm8Hi2nbHGQ3XnUcR3b3bL793vHxSJN8wvaUlKylJIbquPIQhR64Isv
nFKfl6SGsJRp5MyYEK4dn7l0axKb8vZ5SfpvUFv9z/goUvo8i1FDoQlKIx5PeA5w
SE91z7k5fO8cAmxWnV4D4EtLiJ3ZgECELk/NB1s47FKU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Arh+AttIFPz9ix42enV
FLQ35Sg+vWh7hQnG30luHI8wJXsxcdCtHFMZvqPKZ3ThhaRWhfxPlEHhNqsBCCQM
dVmx5SRE0TPkB/gFmXwT4YnpZ0/BGeVDezi2QXzsVQxi2CrVwN2JYBujgZ5Wxiw6
DMLeefOz6xgJqevnE0NqXLAEjv8rkIdisVi4O3vyrkY0V5eYfccMs/cGJgBE0Y7A
riuIx5W6g3MU6CZ6u0T9Woq0Lm5a42VDAG2SwUVaq7cz6FV+DXA1mqAoGOvpkIQg
rnPRGKiW4BtXiLEtbV0pgQ8/2P7tdySXrU5mfQJHTRPhIfiCRosRN6FTx/Ln93ya
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2430264613921451513442305657851793516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 21:29:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 21:29:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.admission.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26767887107801653843972425021963535772719091806980374413165954918948072931418309101110612036080636376989126069732859027979404503707794230777268690640665499539633939927019836759271014979813548240819307370453813683207554022700336923012431488559352114924484676518633723358349004932854958984018103670564529806237461620008957079169018881369944279595092918113251082819934264295689442221585692065321999445459745458880772107291681481281245850626146299684745700454096661488419422164490068076520903650363921576275847571098645325513280359619308670303868092790836010686558320091066312503247568879761423171612808586283562800290427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biletix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedystopcopenhagen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenationinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lne.nonprod.public.tmaws.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketweb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preprod-verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-prod-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-01.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-02.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-03.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-04.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-common-content.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.taylorswifttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.livenation.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.eventinventory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-checkout.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mw.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.livenation.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro-au.ticketmaster.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1783bb6198a2885aa1c5bc0f76b911e34abafa0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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