ticketmaster.fr

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:3b:31:5e:73:00:8c:c6:8f:ab:f0:82:21:17:cc:ff was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ticketmaster.fr

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:3b:31:5e:73:00:8c:c6:8f:ab:f0:82:21:17:cc:ff
Serial Number (int): 1636574831547766899255857410452475135
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 11:69:ef:f7:fd:17:25:c4:ba:c8:b0:b3:e4:53:2f:42:1f:f6:aa:40
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): ec:7d:9c:3b:30:34:5d:03:ba:6c:e2:ca:20:a8:0f:59:7f:e4:5e:47
Fingerprint (sha256): 1e:2e:bb:40:e2:22:47:9a:41:05:bb:0b:a9:bf:fd:fc:56:d0:64:46:c0:02:6d:08:19:c5:88:5c:d6:14:0b:28

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate ticketmaster.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster.fr
*.ticketmaster.fr

Other certificates including the domain name ticketmaster.fr

(limited to 100 certificates)
help.ticketmaster.ch
help.ticketmaster.ch
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster.fr
ticketmaster4.map.fastly.net
help.ticketmaster.nl
*.admission.com
help.ticketmaster.co.nz
ticketmaster4.map.fastly.net
help.ticketmaster.co.nz
*.admission.com
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster.fr
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
help.ticketmaster.fr
ticketmaster.fr
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
dns-vetting1-jeffg-noah.map.fastly.net
*.admission.com
help.biletix.com
help.ticketmaster.ch
help.ticketmaster.co.nz
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
blog.ticketmaster.fr
ticketmaster4.map.fastly.net
blog.ticketmaster.fr
blog.ticketmaster.fr
help.ticketmaster.ch
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.co.nz
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
help.ticketmaster.ch
help.ticketmaster.be
ticketmaster4.map.fastly.net
*.ticketmaster.fr
ticketmaster4.map.fastly.net
help.ticketmaster.nl
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
help.ticketmaster.de
*.ticketmaster.fr
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
help.ticketmaster.co.nz
help.ticketmaster.ch
ticketmaster4.map.fastly.net
help.ticketmaster.ch
help.ticketmaster.ch
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
help.ticketmaster.com.au
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
help.ticketmaster.ch
dns-vetting1-jeffg-noah.map.fastly.net
help.ticketmaster.ch
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
*.admission.com
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.admission.com
blog.ticketmaster.fr
ticketmaster4.map.fastly.net
help.ticketmaster.be

Certificate

The complete raw certificate details for ticketmaster.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgIQATsxXnMAjMaPq/CCIRfM/zANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMTAeFw0yNDAx
MTkwNzUwMTBaFw0yNTAyMTkwNzUwMDlaMBoxGDAWBgNVBAMMD3RpY2tldG1hc3Rl
ci5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANz9k45CF1cs/wwx
MQCDjybBtCzXkUiiYDXjt4VCPSXbjmSiglchtp2Ww8c5G3LXKKjjqH4YU0l21SJi
779i5x9DFxhFDSwbThpRPWN9wKp6A1bt5WlWcJTByTahW1XgN/BT38nEY+meRuF6
7Ty7N/v2ZpQUsRtpCVqdCapvmGlOdtr/mCUXFNCIoI1wtK8BqBCNYomoC59x9oVF
EvPnFqg1KbkR3XRO4Q1f9C4jH0C0GgAGUpfXQH8UHf5kaKLFiW8GNA4ly7Nh+Efy
5RErVQ6DuODuW0T02x/a0rOd1xJXeI0XzWpzKRrUhN2aog7v3jGN5M3CkXBN0L7X
rsdOTQUCAwEAAaOCA3YwggNyMC0GA1UdEQQmMCSCD3RpY2tldG1hc3Rlci5mcoIR
Ki50aWNrZXRtYXN0ZXIuZnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUEWnv9/0XJcS6yLCz5FMvQh/2qkAw
VwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIB
FiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMB
Af8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29j
c3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRxMTBKBggr
BgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nh
dGxhc3IzZHZ0bHNjYTIwMjRxMS5jcnQwHwYDVR0jBBgwFoAUZsDHo5rN/vPqzktT
C2FerzMFs+EwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWdu
LmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyNHExLmNybDCCAX4GCisGAQQB1nkC
BAIEggFuBIIBagFoAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8A
AAGNILLkUAAABAMASDBGAiEAjHrjdoNy8z60tjq/aRbjcOhxmpa1BVjXzF5QEImd
HMwCIQCvM5vHhJxkc3Kee78P9Je3WCBpcRZjh58aESi9kfxW/QB2AKLjCuRF772t
m3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjSCy5KIAAAQDAEcwRQIhAJG+9cbT
9Y+ixdhjt1bTa/bCjXXuLGy7F0srRe8dVmUJAiAf7zdyUzn+B8rU8sYc1YVnuQ9i
2HkbjhzpzttZDuGTWgB1AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4
AAABjSCy5r8AAAQDAEYwRAIgLNzUwkZbN0CYaexAtNkyg+DmVYKspwLzObktOiqR
YioCIECtXRHwbXIKOcLb50Dyt+jl8awdT3ux7lu0g/56LjwgMA0GCSqGSIb3DQEB
CwUAA4IBAQA+khi7zjs/dre+s8wWmgHsm/a86oejdLZbi+W3/hTfEB/gDMBzXzTy
U8g37bywlENMYnkKrMtl3GNsE0NBJeKl71N8UvMfgemToyPbB56xH8Vz1NO+FpLx
tNrfCSbwPRuxDsbTjHkn3DjjykGMX3RAMbrg3/unLMypgw/pnQWSAh5tBSxYI9Br
4WQ8Wt9q03mRUc+c5qBLbTbVzWNyJTRDdUO8Go20iY1peFO9tbFRJScwv4LmLFyA
V2n4ESc7k+DiqGiP/uYey7LwIsx9Z5mtlDPm9bZDImY39cbrdtcoLHyp/Xz0SNcn
s/RLZRcGSjyKIaNPne/tietnvnWhgaAY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P2TjkIXVyz/DDExAIOP
JsG0LNeRSKJgNeO3hUI9JduOZKKCVyG2nZbDxzkbctcoqOOofhhTSXbVImLvv2Ln
H0MXGEUNLBtOGlE9Y33AqnoDVu3laVZwlMHJNqFbVeA38FPfycRj6Z5G4XrtPLs3
+/ZmlBSxG2kJWp0Jqm+YaU522v+YJRcU0IigjXC0rwGoEI1iiagLn3H2hUUS8+cW
qDUpuRHddE7hDV/0LiMfQLQaAAZSl9dAfxQd/mRoosWJbwY0DiXLs2H4R/LlEStV
DoO44O5bRPTbH9rSs53XEld4jRfNanMpGtSE3ZqiDu/eMY3kzcKRcE3Qvteux05N
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1636574831547766899255857410452475135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 07:50:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 07:50:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ticketmaster.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27897470270587541469823520786580536503778121974048769468973743896073828244839665723340197018141350743640426528613932632785834767480296773324476122381179236965551647735592477183329593906731322942889607752642628689394518104159751399782170050586453519816278193704089109799150272669079547746116916407170067272689371413107858665402874156615137087074121247763897825754488105139702488738036724797099343445178220794109595147600348267197055214386422276557781150208660892263557865915594630378086751741437391310313019944070693269631886952663931653249590100995652771534098413198069746336763042526300994901592557445582813618130181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1169eff7fd1725c4bac8b0b3e4532f421ff6aa40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e9218bbce3b3f76b7beb3cc169a01ec9bf6bcea87a374b65b8be5b7fe14df101fe00cc0735f34f253c837edbcb094434c62790aaccb65dc636c13434125e2a5ef537c52f31f81e993a323db079eb11fc573d4d3be1692f1b4dadf0926f03d1bb10ec6d38c7927dc38e3ca418c5f744031bae0dffba72ccca9830fe99d0592021e6d052c5823d06be1643c5adf6ad3799151cf9ce6a04b6d36d5cd63722534437543bc1a8db4898d697853bdb5b151252730bf82e62c5c805769f811273b93e0e2a8688ffee61ecbb2f022cc7d6799ad9433e6f5b643226637f5c6eb76d7282c7ca9fd7cf448d727b3f44b6517064a3c8a21a34f9defed89eb67be75a181a018