abafrica.accaglobal.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:36:3c:8c:96:7f:fd:2d:ea:0a:89:65:af:6a:ed:68 was issued on by GlobalSign nv-sa.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abafrica.accaglobal.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:36:3c:8c:96:7f:fd:2d:ea:0a:89:65:af:6a:ed:68
Serial Number (int): 1610840109242248320058064168832134504
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 70:ef:7c:df:9b:bf:7b:d7:10:93:45:f7:f9:09:98:2b:38:65:21:b1
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 66:a6:af:cb:bc:ff:13:58:ed:00:a2:c1:8f:07:c2:d4:9d:eb:8f:78
Fingerprint (sha256): 1c:82:13:2d:ab:07:29:94:88:d7:40:5c:3e:cd:60:ca:86:80:04:87:54:c2:b0:30:c9:08:2b:50:88:ac:f0:d2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate abafrica.accaglobal.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abafrica.accaglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abafrica.accaglobal.com
abchina.accaglobal.com
abinternational.accaglobal.com
app.blackpoolgazette.co.uk
app.dailyoilbulletin.com
app.edinburghnews.scotsman.com
app.gq-magazine.co.uk
app.independent.co.uk
app.inews.co.uk
app.investorschronicle.co.uk
app.lep.co.uk
app.newsletter.co.uk
app.portsmouth.co.uk
app.scotsman.com
app.sirlinkalot.org
app.spectator.co.uk
app.standard.co.uk
app.sunderlandecho.com
app.thestar.co.uk
app.vanityfair.co.uk
app.wigantoday.net
app.yorkshireeveningpost.co.uk
app.yorkshirepost.co.uk
appvea.revistavea.com.co
asiarisk.app.incisivemedia.com
centralbanking.app.incisivemedia.com
energyrisk.app.incisivemedia.com
epages.jpimedia.co.uk
fxweek.app.incisivemedia.com
imd.app.incisivemedia.com
insuranceage.app.incisivemedia.com
insurancehoundbroking.app.incisivemedia.com
insurancehoundclaims.app.incisivemedia.com
insurancehoundtechnology.app.incisivemedia.com
mag.hookandnet.com
magazine.astonmagazine.co.uk
magazine.autoexpress.co.uk
magazine.computershopper.co.uk
magazine.digitalslrphoto.com
magazine.forteantimes.co.uk
magazine.getcomputeractive.co.uk
magazine.igamingbusiness.com
magazine.igbaffiliate.com
magazine.igbnorthamerica.com
magazine.newstatesman.com
magazine.octane-magazine.com
magazine.pcpro.co.uk
magazine.slimmingworld.co.uk
magazine.thedrinksbusiness.com
magazine.thespiritsbusiness.com
magazine.viz.co.uk
members.tortoisemedia.com
news.rha.uk.net
operationalrisk.app.incisivemedia.com
post.app.incisivemedia.com
prospectus.arts.ac.uk
read.salonqp.com
read.thedrum.com
read.transform.womenshealthmag.co.uk
reader.armytimes.com
reader.defensenews.com
reader.federaltimes.com
reader.foreignaffairs.com
reader.howtospendit.com
reader.moneyweek.com
reader.yourpropertynetwork.co.uk
revolution.motorsportuk.org
risk.app.incisivemedia.com
riskeditions.app.incisivemedia.com
riskjournals.app.incisivemedia.com
search.taxfactsonline.com
springspotters.com
springwise.com
tortoiseintelligence.com
tortoisemedia.com
usapp.independent.co.uk
waters.app.incisivemedia.com
waterstechnology.app.incisivemedia.com
www.profeng.com
www.springspotters.com
www.springwise.com
www.tortoiseintelligence.com
www.tortoisemedia.com

Other certificates including the domain name accaglobal.com

(limited to 100 certificates)
www.pugpig.com
learningcommunity.accaglobal.com
rp01.accaglobal.com
dns-vetting1m.map.fastly.net
oat.soa.apps.accaglobal.com
practicetests.accaglobal.com
sso.accaglobal.com
council.accaglobal.com
accaglobal.com
www3.pugpig.com
portal.accaglobal.com
interview.accaglobal.com
abafrica.accaglobal.com
www.pugpig.com
www.pugpig.com
citrix.accaglobal.com
int.internal.exams.apps.accaglobal.com
soa.apps.accaglobal.com
events.accaglobal.com
soa.apps.accaglobal.com
tls.automattic.com
cbedr4.accaglobal.com
studygroups.accaglobal.com
owa.my.accaglobal.com
sso.accaglobal.com
interview.accaglobal.com
haproxy01a.prod01.iam.accaglobal.com
dns-vetting1k.map.fastly.net
studentvirtuallearn.accaglobal.com
tls.automattic.com
experience.accaglobal.com
api.cn.stage.accaglobal.com
dns-vetting1m.map.fastly.net
syscbe.accaglobal.com
cbe.accaglobal.com
uat-sec.soa.apps.accaglobal.com
cbe.accaglobal.com
studymaterials.accaglobal.com
dns-vetting1m.map.fastly.net
www.pugpig.com
www.pugpig.com
int.soa.apps.accaglobal.com
study-in-singapore.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
*.content.pugpig-dev.com
dns-vetting1m.map.fastly.net
tls.automattic.com
sys.reportengine.exams.apps.accaglobal.com
accaglobal.com
haproxy01a.oat01.iam.accaglobal.com
dns-vetting1m.map.fastly.net
Oatcbelicensing.accaglobal.com
cds3.cvent.com
uatcbe.accaglobal.com
tls.automattic.com
irelandbookings.accaglobal.com
login.ciam.accaglobal.com
int-sec.soa.apps.accaglobal.com
www.accacareers.com
aem-sso.accaglobal.com
studentvirtuallearn.accaglobal.com
practicetests.accaglobal.com
tls.automattic.com
www.pugpig.com
dns-vetting1m.map.fastly.net
council.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
pv-test.accaglobal.com
interview.accaglobal.com
*.iassess.accaglobal.com
accaglobal.com
www.pugpig.com
totalreward-system.accaglobal.com
dns-vetting1k.map.fastly.net
adfs.accaglobal.com
uat.exams.apps.accaglobal.com
dns-vetting1m.map.fastly.net
devcbe.accaglobal.com
exams.apps.accaglobal.com
uat-wssop.iam.accaglobal.com
diploma.accaglobal.com
*.content.pugpig-dev.com
oat.bi.apps.accaglobal.com
learningcommunity.accaglobal.com
tls.automattic.com
sys.ext.exams.apps.accaglobal.com
login.iam.accaglobal.com
www2.pugpig.com
www.pugpig.com
cbept.accaglobal.com
alljobs.accaglobal.com
dns-vetting1m.map.fastly.net
int.exams.apps.accaglobal.com
digitalhub.accaglobal.com
diploma.accaglobal.com
cds3.cvent.com
int.reportengine.exams.apps.accaglobal.com
soa-uat.accaglobal.com
studygroups.accaglobal.com
*.iassess.accaglobal.com

Certificate

The complete raw certificate details for abafrica.accaglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySH0htKsEJZKeabh+0W4
aPrfRy3nH3RSC7kTahsYcjbWcm93qJDWyn3nHHPx3OaqxuYBmr4JNQAZfmwkd2K7
i/X1xDsNYRLRza3u593OiET3GihRFTmtMJKvDBJ9KPIL3LSlRWlMWyzbiNBPNxB9
WK6Z8RpBNtUZUGe5u/A7kHEGttOR3FwZ6o+uGqu6pFL7KxvVIj7UP/Zrm5NnReTl
nH05idMpGw0Tne2otnICw3pRgLqiuzyyqJIuFBIapIwXJtYscYC/KjxOtFtbffNg
QMvGW8j4tF1xrOoj1oFSngRql7JZe1/zXR4t+zK3ava+SHpdrWudvLEoXZHY79oH
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1610840109242248320058064168832134504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 13:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-20 13:25:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'abafrica.accaglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25390643222592358115584444379164990229447816349860815687765008896849017156009815343201420292894970939830365956392329634705603047177775766174921449214421917331837154711786473157305320411986244100182285354973365178975622018537570241224330341016231755511636251198875194762607343155128791000396096573384451923853808681375159893935075627218628139833485579032495944618464434178819976102584549127783487840206699539864554377554285413142046805134277707996439873992152957811643154254515680533506433673950641230339194172683523938397518233901245269994721212603190711490117028123498756050352531989152460718746852129217366730606393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abafrica.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abchina.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abinternational.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.blackpoolgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dailyoilbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gq-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.independent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.inews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.investorschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.newsletter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sirlinkalot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spectator.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.standard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vanityfair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appvea.revistavea.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiarisk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralbanking.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyrisk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epages.jpimedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxweek.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imd.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceage.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundbroking.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundclaims.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundtechnology.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.hookandnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.forteantimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.igamingbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.igbaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.igbnorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.slimmingworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.thedrinksbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.thespiritsbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.viz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tortoisemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.rha.uk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operationalrisk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospectus.arts.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.thedrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.transform.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.armytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.defensenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.federaltimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.foreignaffairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.howtospendit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.yourpropertynetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolution.motorsportuk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskeditions.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskjournals.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.taxfactsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springspotters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tortoiseintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tortoisemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usapp.independent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waters.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterstechnology.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springspotters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tortoiseintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tortoisemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70ef7cdf9bbf7bd7109345f7f909982b386521b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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