san-001.ceros.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:71:ef:0b:c0:f1:66:7f:d4:63:1c:34:70:1c:98:ca was issued on by GlobalSign nv-sa.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-001.ceros.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:71:ef:0b:c0:f1:66:7f:d4:63:1c:34:70:1c:98:ca
Serial Number (int): 1920805967917368848714025928989907146
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2f:19:f1:f1:cb:5e:9f:18:ef:5b:e6:a9:1b:b0:d4:3d:4e:49:08:cb
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 73:8c:c0:a5:8c:0f:6c:f1:5e:31:18:ed:f0:65:54:cb:55:15:47:d9
Fingerprint (sha256): 1d:a1:4e:26:a0:96:ad:b6:c7:b4:7e:30:c0:4a:c7:f7:2f:52:6a:11:0a:9e:58:d6:6f:af:4a:ad:a5:24:90:8e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate san-001.ceros.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-001.ceros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-001.ceros.com
secure.yougotta.be
go.margaritably.org
commercial.evo.co.uk
interactive.blueyonder.com
my.cignahealthengagement.com
engage.boldt.com
engage.ontada.com
brochures.khov.com
consign.paddlup.com
meet-us.ukg.com
landing.northerntrust.com
discover.ergon.com
sunrise.vancouversun.com
experience.ebiconsulting.com
go.mccain-inc.com
www.cannabislikeamother.com
interactive.franklintempleton.com
connect.tradeweb.com
my.cignamarketmessage.com
ninetyonequality.citywirecontent.com
experience.onlyinyourstate.com
interactive.ausenco.com
future.seic.com
www.future.seic.com
interactive.savills.ca
partnerwithus.savills.us
partnerwithus.savills.ca
trustedexperts.savills.us
trustedexperts.savills.ca
bigideas.woodmac.com
exceptional.bdo.com
experience.bdo.com
view.doit-intl.com
exp.tvsdesign.com
brochure.edwards.com
product.mediaconnect.com
interactive.azerionadstudio.com
forms.autoexpress.co.uk
www.klavebysika.es
ukgworks.ukg.com
presentation.nousgroup.com
markets.societegenerale.de

Other certificates including the domain name ceros.com

(limited to 100 certificates)
tracking.duckvideo.co
san-006.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
new.ceros.com
san-001.ceros.com
ceros2.map.fastly.net
pilot.ceros.com
lucistatus.paradox.ai
san-001.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
lucistatus.paradox.ai
demo.ceros.com
san-003.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
san-001.ceros.com
agency.ibex.co
san-005.ceros.com
san-003.ceros.com
h3.shared.global.fastly.net
san-002.ceros.com
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1.map.fastly.net
h3.shared.global.fastly.net
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
san-004.ceros.com
login-test.auth.ceros.com
san-002.ceros.com
m.ssl.fastly.net
san-003.ceros.com
san-001.ceros.com
m.ssl.fastly.net
san-004.ceros.com
demo.ceros.com
san-003.ceros.com
m.ssl.fastly.net
lucistatus.paradox.ai
san-005.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
*.pinterestceros.com
m.ssl.fastly.net
san-004.ceros.com
view.ceros.com
view.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
view.ceros.com
san-001.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-002.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-005.ceros.com
san-003.ceros.com
cheetah.apstra.com
m.ssl.fastly.net
m.ssl.fastly.net
new.ceros.com
san-004.ceros.com
discover.newswire.com
ceros1.map.fastly.net
m.ssl.fastly.net
view.ceros.com
san-001.ceros.com
san-001.ceros.com
stage-auth0.ceros.com
san-006.ceros.com
san-002.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
lucistatus.paradox.ai
san-004.ceros.com
san-006.ceros.com
*.ceros.com
h3.shared.global.fastly.net
outreach.ceros.com
h3.shared.global.fastly.net
san-003.ceros.com
ceros1.map.fastly.net
ceros.map.fastly.net
lucistatus.paradox.ai
san-003.ceros.com
san-004.ceros.com
m.ssl.fastly.net
san-002.ceros.com
san-003.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
m.ssl.fastly.net
ceros1.map.fastly.net
san-004.ceros.com
view.ceros.com
secure0033.hubspot.com
*.dlrgroup.com
san-005.ceros.com

Certificate

The complete raw certificate details for san-001.ceros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArELj+sEQHLTD/4rxq7tX
vid5RxZlJ+WnRTZ9v60MGjkXvwUmo7Zpv6gQvl4+tl3UaX6rXWvXdJweJRyIEmH6
lzECc5m+5NKSUDZ+w0P2Vbs+Gk/9p/1v3W6UhGVQfW1HDzndNjKFujU7b02LZc8E
vlrJnYLAgOiFG3idosuiLdhmTirPNOHcxtsuCNoA2QIyE2KFtpv67vON/QfwiN2/
eavzHBBvu3wBoPi4mqp+njKFsLCRxkVsz7mFLiQbjZmld8hlpcBe+7je30v4z5a8
fvELLAmPHeOh0i+2Ivc8orxrEKGHgcL7ECYMov68IwNKIfrIQvzbvcGHByiRlcg3
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1920805967917368848714025928989907146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-17 15:29:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-19 15:29:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san-001.ceros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21745973411245438390833557268441970870866879187279121785144162968916400824936994666419913779642865875071961067670004341713039999323086351513571836555309059084991476750745202369973344714672570594480068272520273134796496585574339470175601285610104583533669928227822732801403296371354176836337588483654411815792053736649196917185123855124507147899280930837709190525191419539113131588457536244973940179694988313298845977770983452388361309930977640434495014573564779796142394007961821012991156490749798158477849312466969953417122026927430609758393099342203076769617996077276977376035850266283057639207930925992471662442287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1039 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-001.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.yougotta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.margaritably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.blueyonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignahealthengagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.boldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ontada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.khov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consign.paddlup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-us.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.ergon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrise.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.ebiconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mccain-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabislikeamother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.franklintempleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.tradeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignamarketmessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninetyonequality.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.onlyinyourstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.ausenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigideas.woodmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceptional.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.doit-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exp.tvsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.edwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.mediaconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.azerionadstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klavebysika.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukgworks.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentation.nousgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.societegenerale.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f19f1f1cb5e9f18ef5be6a91bb0d43d4e4908cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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