imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:67:7f:e5:f4:e1:dd:26:63:a7:56:59:66:12:e6:2d was issued on by GlobalSign nv-sa.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:67:7f:e5:f4:e1:dd:26:63:a7:56:59:66:12:e6:2d
Serial Number (int): 1866628657270277704290878803208758829
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f6:a7:87:9a:c6:5f:32:e6:d4:29:ec:51:37:29:df:63:99:2a:5d:24
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): b4:1e:9e:fd:2c:43:01:70:32:37:ce:f3:15:4c:0c:39:f3:29:13:a1
Fingerprint (sha256): 1d:af:92:c7:5b:e1:85:e3:23:94:db:e0:c9:be:0a:19:bb:65:41:47:af:23:da:32:70:31:a4:21:ad:9f:20:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zonazurichempresas.es
uat.zurichlife.ie
rallyengine.bluesteel.werally.in
zurich.com.cn
dev2.rt.zurich.ie
*.foremostmetagent.com
*.zurichseguros.com.ec
zurich.ie
zurich.com
calcular-seguro.com
*.zurich.com
www.zurichclaims.es
test-services-gi.rt.zurich.ie
analytics.rt.zurich.ie
socialmediasuitcase.com
baoxian999.cn
*.legislation.qld.gov.au
www.foremostchoicelive.com
farmershawaii.com
foremostmetagent.com
farmerslife.com
www.helppointclaimservices.com
*.hawaiiinsuranceconsultants.com
zurich.ch
www.farmerslife.com
legislation.qld.gov.au
www.baoxian999.cn
*.zurich.ch
dev1.rt.zurich.ie
hawaiiinsuranceconsultants.com
*.portal.rapidphire.com
*.zurichdevelopmentcenter.com
zurichdevelopmentcenter.com
www.calcular-seguro.com
*.socialmediasuitcase.com
helppointclaimservices.com
www.farmershawaii.com
foremostchoicelive.com
*.direct.zurich.ch
imperva.com
*.othsolutions.com.au
pl.direct.zurich.ch
www.zurich.ie
*.zurich.com.cn
zurichclaims.es
n10.farmershawaii.com
zonazurichempresas.es
services.rt.zurich.ie
n10.hawaiiinsuranceconsultants.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNdBLSqyngqKHwYgWLPZ
2vUzIhK3hYZp17jL6S0jq4i9PQVPp5hKP5eTAAhBVQP3sASBTCvp+aoK6Tk+rB9d
4m7qLW98Neu3gCZzvzevIGS3+7FYjG9mTvp1mtLvC20YBubc5+2zHY9uPE3iQv7z
dEQz+mKJTmE9LhLXjW3kgQNMsa1wCbZ2xWu+6HqYCY7P9U02RLsERVFaT/KsrkIF
I7aS2V3OZrK7GAl2sTxPXmbv6MT/nUwAF3Ws4TA5OY7zIqnTz3gS8rG418osP2MC
L2TjtyuXmbWQO8QR7NsqbHjSPSCAUTubUJwycsezLyLjJy3x/p83bnCgfoQXrZiI
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1866628657270277704290878803208758829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-05 12:31:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-04 03:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19799321571832341205488278393236689782347388636631434166568088010100065808701223986385470175963051952767728272785822641211951778167238619357763256620275530755734357680154584767810042835431088108970541393921309240113425472113383840031893783356734193493509225938950817842828702908832727434383191291927713110090616512078754640342822247892587904403194466532314470855200827283109935832345228953178227366513686096548890820395328606360957144291128210362755251650159113969649611993811379202930000720287813149325154027519078652150020822381373507421374946382003846175608162942726311591650388378458767040300149298305130814801947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1098 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonazurichempresas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.zurichlife.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallyengine.bluesteel.werally.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foremostmetagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichseguros.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcular-seguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurichclaims.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-services-gi.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmediasuitcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoxian999.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legislation.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foremostchoicelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foremostmetagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helppointclaimservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legislation.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baoxian999.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.rapidphire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calcular-seguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmediasuitcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helppointclaimservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foremostchoicelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.direct.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.othsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.direct.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichclaims.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n10.farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonazurichempresas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n10.hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6a7879ac65f32e6d429ec513729df63992a5d24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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