imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:2c:36:c9:1d:34:9a:6a:f9:c1:4a:66:59:e3:02:b4 was issued on by GlobalSign nv-sa.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:2c:36:c9:1d:34:9a:6a:f9:c1:4a:66:59:e3:02:b4
Serial Number (int): 1558800241578369491122847190752625332
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:43:54:8a:cd:90:01:ee:26:f3:bf:af:60:df:6b:ea:eb:73:a0:49
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 6a:8c:ee:7e:a2:0c:e4:54:c7:c2:32:0a:33:49:9a:45:94:37:90:be
Fingerprint (sha256): 24:01:95:69:32:42:50:32:8e:77:f6:2f:87:09:f3:94:ba:7d:c8:5d:27:4d:21:5e:ba:91:fc:c5:c5:ad:26:e2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scri.com
*.mckessonportal.com
*.pharmactiv.com
*.nonprod.mckesson.com
home.belmedis.be
*.pdci.ca
*.esign-ocp.fr
sso.ocp-link.fr
*.mckesson.ca
*.mscs.mckesson.com
genospace.com
*.belmedis.be
*.mhiapps.com
*.dev.mckesson.ca
*.pharmabelgium.be
*.healthmart.com
*.pharmaigo.it
esign-ocp.fr
*.reporting.rxservices.mckesson.com
*.ppd.letsbewell.ca
*.scri.com
*.lloydsfarmacia.it
stagingapi.mhiapps.com
*.ocp.pt
*.uat-reporting.rxservices.mckesson.com
www.groupephr.fr
portal.wz-medcubes.de
*.genospace.com
*.glidehealth.com
moncompte.ocp.fr
supportqa.gilenya.com
*.healthmartatlas.com
*.northstarhealthcare.ie
*.ontadahealth.com
www.pharmactiv.fr
*.mckesson.com
groupephr.fr
www.interopio-dev.com
iknowmed-mobile-dev.mckesson.com
imperva.com
healthmartatlas.com
*.connect.mckesson.com
adherent.mypharmactiv.fr
*.rxservices.mckesson.com
iknowmed-mobile.mckesson.com
*.solari.cloud
*.tcpportal.ie
pharmactiv.fr
ontadahealth.com
*.lloydspharmacy.ie

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX98sxjawbmImTsUq8v7
4xBnqt6be+X1rHIDwpfdT8SQCYUKK0tCFvVhDA+DZHKAQHomYHyO7lfKMx8RL/lP
u80IxwnXdYXx83UBYLG49mS49DwqzZktQwO3hLVCEazN9id0vwqk0ga0+/w4CO8R
IihnugWRvSAPP2/BlfAUFQSP4HX8jfZFamVteA3xCqRnfvryQEwinnhBg6pVYOlu
6JxcwMZk/02WOLBalz+S1nE+SO27hPmRwVhPzIMqrbrc3syIRrGqMYhDjVvwj0/w
Ocpj6Cf9O4uUQwxIHiWbAKt7yJiFZvTIjqoRR7jF9kc5EqQeZ7qlhcg2BUs2B8jt
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1558800241578369491122847190752625332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 19:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-17 19:21:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23416952654636035985002347998589640756647160291511553210864123815338448080736512779813821444488196056166981892749435468435574638610252857111271458394259915602699616240924214429752850633985744996606894274831982169049242586161599780020552048107935500305378051816053019340951135002691896661024189521051591258706908835483557847559008008245516530460698718698274958608327044816735935452173468643186347309659934819259755943639478268894294245325596767687237340817661046900418366998820506398272861523963779846452002806389925737306426039307950690278214165972707347624123334048563606301176415294741427260792457378062613881613791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmactiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nonprod.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.belmedis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esign-ocp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.ocp-link.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckesson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mscs.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belmedis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mckesson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmabelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmaigo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign-ocp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.rxservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppd.letsbewell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lloydsfarmacia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingapi.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-reporting.rxservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groupephr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wz-medcubes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glidehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte.ocp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportqa.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthmartatlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northstarhealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontadahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pharmactiv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupephr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interopio-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iknowmed-mobile-dev.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmartatlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adherent.mypharmactiv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iknowmed-mobile.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solari.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcpportal.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmactiv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontadahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lloydspharmacy.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0643548acd9001ee26f3bfaf60df6beaeb73a049
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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