imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:92:b9:c2:0c:da:20:5b:c7:d0:89:2f:92:71:ce:f1 was issued on by GlobalSign nv-sa.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:92:b9:c2:0c:da:20:5b:c7:d0:89:2f:92:71:ce:f1
Serial Number (int): 2091070957148722788290634280476987121
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: eb:e7:0e:65:ff:07:f4:31:92:0d:6e:40:e3:ba:5e:28:b2:44:61:d0
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): e0:d3:83:5c:b2:d3:05:68:b2:c1:cd:ea:8f:38:18:05:8e:9b:be:39
Fingerprint (sha256): 23:ae:18:6f:e7:b3:21:ee:8d:b3:bb:dd:2e:d1:5e:25:d8:cf:d5:8f:9d:79:ef:bf:2b:54:ea:df:75:36:ff:1d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stg.mp.buka20.com
*.connect.bukalapak.com
*.bukalapak.com
*.stg.itemx.id
*.prod.mp.buka20.com
smartsari.com
bmoney.id
*.bldevs.info
itemku.com
*.itemku.com
*.bukalapak.design
*.glimpsetrack.net
*.preproduction.bukapengadaan.id
lapakgaming.com
bukapengadaan.co.id
*.preproduction.bukalapak.io
*.shoopon.com
itemx.id
*.preproduction.investdiashmore.id
*.smartsari.com
gokil.me
investdiashmore.id
glimpsetrack.net
imperva.com
*.bl.id
*.lapakgaming.com
shoopon.com
*.ashmore.preproduction.invbackoffice.com
*.stg.premierplay.app
testing-conn.dev.core.buka20.com
bukapengadaan.id
*.preproduction.smartsari.com
bl.id
*.ashmore.invbackoffice.com
*.preproduction.bukapengadaan.com
*.gokil.me
*.investdiashmore.id
playmimi.com
*.email.bukalapak.com
bukalapak.design
*.bukapengadaan.co.id
*.playmimi.com
*.preproduction.bukapengadaan.co.id
*.connect.preproduction.bukalapak.com
*.dev.mp.buka20.com
*.bmoney.id
*.bukapengadaan.id
*.itemx.id

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZVfEitqdodRdQ7CBVhA
xbfvN18FZTuRGh4lpt4M2IrZbdSKlhA6Am1rgaKHkH5fTXwFZ8uagSDSTpT4yKEj
9ksVJ+TorYKXViKHoF+g2zw21fQvTNdy5MoateaZyLT3HsSxdWckHnUDENaeaOs1
ACUKBghrk+cJxPnCZThhc+VGyMawSwUUFdkHwGa971rvJG6sYSm5vWKUIninCf1c
qluP0MAgUW4gm46O8ZEth4OI2dllzUDI44RPFeyEe+vL8PGlNaDQ4gHiInbGLUOV
Kx2HtPIwP96oeJR85KXSK0G+6aoIT75bJ8hp7R7HHvCjJDDm1XFo0OviGhccAzRY
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2091070957148722788290634280476987121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 08:29:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 08:29:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25447557066478525879074805183628286414770681697835623344192990653920608257729509773686623432424662072258582832865010107687636405317590959514567645512709863128681211486842746172345328356551605280149097185411811291558396229419905216346959358073574996795279409627194730054138648345249870393967636420046764328928626310259482918965433904390489182198613033130420200200343742844345701026702703189061193223572930506653935618362514043728854669978043242190905894703354059567724894513411631946655854053023885008992258672553071543051583270779081827427103160893328942347528583300831202331781658259774776013278950743953624125429823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (984 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.mp.buka20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.itemx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.mp.buka20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmoney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bldevs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukalapak.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glimpsetrack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapakgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukalapak.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoopon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glimpsetrack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapakgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoopon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashmore.preproduction.invbackoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.premierplay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing-conn.dev.core.buka20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashmore.invbackoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playmimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukalapak.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playmimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.preproduction.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mp.buka20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmoney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemx.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebe70e65ff07f431920d6e40e3ba5e28b24461d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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