san-001.ceros.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:52:f2:91:f4:2f:59:8f:3f:74:83:cc:31:69:42:df was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-001.ceros.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:52:f2:91:f4:2f:59:8f:3f:74:83:cc:31:69:42:df
Serial Number (int): 1759916244964004854018740771621520095
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2f:19:f1:f1:cb:5e:9f:18:ef:5b:e6:a9:1b:b0:d4:3d:4e:49:08:cb
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 54:f3:67:23:fe:e9:fe:de:8d:e2:5a:de:fd:1d:2e:95:39:0d:bc:34
Fingerprint (sha256): 25:3e:8f:de:12:14:37:80:15:16:16:74:b4:35:eb:12:6b:dd:41:6a:4f:39:34:75:a3:93:68:c5:e9:31:9d:de

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate san-001.ceros.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-001.ceros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-001.ceros.com
secure.yougotta.be
go.margaritably.org
commercial.evo.co.uk
interactive.blueyonder.com
my.cignahealthengagement.com
engage.boldt.com
engage.ontada.com
brochures.khov.com
consign.paddlup.com
meet-us.ukg.com
landing.northerntrust.com
discover.ergon.com
sunrise.vancouversun.com
experience.ebiconsulting.com
go.mccain-inc.com
www.cannabislikeamother.com
interactive.franklintempleton.com
connect.tradeweb.com
my.cignamarketmessage.com
ninetyonequality.citywirecontent.com
experience.onlyinyourstate.com
interactive.ausenco.com
future.seic.com
www.future.seic.com
interactive.savills.ca
partnerwithus.savills.us
partnerwithus.savills.ca
trustedexperts.savills.us
trustedexperts.savills.ca
bigideas.woodmac.com
exceptional.bdo.com
experience.bdo.com
view.doit-intl.com
exp.tvsdesign.com
brochure.edwards.com
product.mediaconnect.com
interactive.azerionadstudio.com
forms.autoexpress.co.uk
www.klavebysika.es
ukgworks.ukg.com
presentation.nousgroup.com
markets.societegenerale.de
go.semtech.com
www.kubotam7003.com

Other certificates including the domain name ceros.com

(limited to 100 certificates)
tracking.duckvideo.co
san-006.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
new.ceros.com
san-001.ceros.com
ceros2.map.fastly.net
pilot.ceros.com
lucistatus.paradox.ai
san-001.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
lucistatus.paradox.ai
demo.ceros.com
san-003.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
san-001.ceros.com
agency.ibex.co
san-005.ceros.com
san-003.ceros.com
h3.shared.global.fastly.net
san-002.ceros.com
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1.map.fastly.net
h3.shared.global.fastly.net
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
san-004.ceros.com
login-test.auth.ceros.com
san-002.ceros.com
m.ssl.fastly.net
san-003.ceros.com
san-001.ceros.com
m.ssl.fastly.net
san-004.ceros.com
demo.ceros.com
san-003.ceros.com
m.ssl.fastly.net
lucistatus.paradox.ai
san-005.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
*.pinterestceros.com
m.ssl.fastly.net
san-004.ceros.com
view.ceros.com
view.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
view.ceros.com
san-001.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-002.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-005.ceros.com
san-003.ceros.com
cheetah.apstra.com
m.ssl.fastly.net
m.ssl.fastly.net
new.ceros.com
san-004.ceros.com
discover.newswire.com
ceros1.map.fastly.net
m.ssl.fastly.net
view.ceros.com
san-001.ceros.com
san-001.ceros.com
stage-auth0.ceros.com
san-006.ceros.com
san-002.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
lucistatus.paradox.ai
san-004.ceros.com
san-006.ceros.com
*.ceros.com
h3.shared.global.fastly.net
outreach.ceros.com
h3.shared.global.fastly.net
san-003.ceros.com
ceros1.map.fastly.net
ceros.map.fastly.net
lucistatus.paradox.ai
san-003.ceros.com
san-004.ceros.com
m.ssl.fastly.net
san-002.ceros.com
san-003.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
m.ssl.fastly.net
ceros1.map.fastly.net
san-004.ceros.com
view.ceros.com
secure0033.hubspot.com
*.dlrgroup.com
san-005.ceros.com

Certificate

The complete raw certificate details for san-001.ceros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArELj+sEQHLTD/4rxq7tX
vid5RxZlJ+WnRTZ9v60MGjkXvwUmo7Zpv6gQvl4+tl3UaX6rXWvXdJweJRyIEmH6
lzECc5m+5NKSUDZ+w0P2Vbs+Gk/9p/1v3W6UhGVQfW1HDzndNjKFujU7b02LZc8E
vlrJnYLAgOiFG3idosuiLdhmTirPNOHcxtsuCNoA2QIyE2KFtpv67vON/QfwiN2/
eavzHBBvu3wBoPi4mqp+njKFsLCRxkVsz7mFLiQbjZmld8hlpcBe+7je30v4z5a8
fvELLAmPHeOh0i+2Ivc8orxrEKGHgcL7ECYMov68IwNKIfrIQvzbvcGHByiRlcg3
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1759916244964004854018740771621520095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-18 07:56:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 07:56:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san-001.ceros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21745973411245438390833557268441970870866879187279121785144162968916400824936994666419913779642865875071961067670004341713039999323086351513571836555309059084991476750745202369973344714672570594480068272520273134796496585574339470175601285610104583533669928227822732801403296371354176836337588483654411815792053736649196917185123855124507147899280930837709190525191419539113131588457536244973940179694988313298845977770983452388361309930977640434495014573564779796142394007961821012991156490749798158477849312466969953417122026927430609758393099342203076769617996077276977376035850266283057639207930925992471662442287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1076 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-001.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.yougotta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.margaritably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.blueyonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignahealthengagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.boldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ontada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.khov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consign.paddlup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-us.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.ergon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrise.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.ebiconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mccain-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabislikeamother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.franklintempleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.tradeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cignamarketmessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninetyonequality.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.onlyinyourstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.ausenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.future.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithus.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedexperts.savills.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigideas.woodmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceptional.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.doit-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exp.tvsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.edwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.mediaconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.azerionadstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klavebysika.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukgworks.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentation.nousgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.societegenerale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.semtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotam7003.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f19f1f1cb5e9f18ef5be6a91bb0d43d4e4908cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044fcc95d4b477d2f371677c91862946ffa9fa2f5e8e7c3579f9c53336fbc51e72e66be701e9ec2f81c17428c15a905f865fc26e7228b280c4eafdc21c991e1749bfc7dfd674f5e908cecdf40318a8c35c59aee0e9f37605afeada0a5edfaf952b21c8b31c217a6b0222192f89dfd05ac08b45ea7456e4d13e5608ba10f126368ac89ccfaedf637f69cd65bd746df2e93f662f9690702e5ba724a2facd5b181c88fd7d0304a1a922e75b43051260c61b3c289475ba1ba017f9e0378ac8d1663bacc0f6e9ab61d44b1a63fa17a2de50814a29756c0145ceb9558817df4ee453a9059c1c44b8586579f08ca16e1d27257c7ec06994340e0562fbb50f0bce2dab8aa