imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:9d:d2:81:ab:de:4d:ba:c3:01:12:01:3b:4e:18:57 was issued on by GlobalSign nv-sa.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9d:d2:81:ab:de:4d:ba:c3:01:12:01:3b:4e:18:57
Serial Number (int): 2148688182215300280241238684159842391
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: db:a2:08:79:87:c5:00:74:17:d4:56:94:8b:bb:c8:a6:72:44:35:c2
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 38:8c:a7:06:15:74:81:82:38:60:49:68:52:a9:3c:ec:09:ff:de:25
Fingerprint (sha256): 2b:03:85:6d:96:29:39:bd:9e:6f:b8:ff:8f:d3:1f:e7:71:d4:d7:d4:ed:07:4b:c4:7c:77:95:50:37:72:be:3e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vetoluydebearn.fr
cochraneanimalclinic.com
vetomichelet.fr
wmfarmvets.co.uk
*.wmfarmvets.co.uk
border-vets.co.uk
*.cochraneanimalclinic.com
kingstonequinevets.co.uk
tieraerzte-freising.de
*.blaircourtequinevets.co.uk
vetoluydebearn.fr
vetodeslecheres.fr
cvestuairemontjoli.com
evidensia.lv
*.tierklinik-perchtoldsdorf.at
*.kingstonequinevets.co.uk
*.aloravets.org.uk
*.tierarzt-rosenheim.de
*.tieraerztezentrum-lohmar.de
aloravets.org.uk
gvac.ca
*.ajaxanimalhospital.com
*.independentvetcare.co.uk
imperva.com
southwindsoranimalhospital.ca
tierklinik-perchtoldsdorf.at
*.gvac.ca
*.vetomichelet.fr
*.blaircourtvets.co.uk
dapdetoren.be
tierarzt-rosenheim.de
*.border-vets.co.uk
*.cvestuairemontjoli.com
ajaxanimalhospital.com
*.vetodeslecheres.fr
blaircourtequinevets.co.uk
blaircourtvets.co.uk
tieraerztezentrum-lohmar.de
*.evidensia.lv
*.tieraerzte-freising.de
*.dapdetoren.be
*.ivcevidensia.com
*.southwindsoranimalhospital.ca

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AjlCAeNiKw9Uy0g5Ek
dpOleaCP45EwDcG7/qfHgZsGL+KvubY1Eh3OPZfzuBkzryNi5Kp552RZ5yjphcze
GI3zPO/8MVpdasRXdHYRqc4sfUB7uPZ6tPzuApEkmZlkG8/7bkNSbSuFdX2s2Jp0
H3/8tFrJkRn9uItN13kVIjXOrIatKTf8dzoFr94SrEBbJjyEQiB1Rjo1OSK9GxgW
kgm+jrjJuipZzxvofL7fXk+Gb5F65x4DKH6hF/RBnDUwI2yJFKypHqldBtWo3qr2
TeDLixXAP2kKmF2FuRLvw6zCKoR0iiEp4TA7hiaMUiWWp3+d1Gzh4Nqg097MAIA3
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2148688182215300280241238684159842391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 16:41:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 16:41:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22178560736806409532115153787600659627326901380240689455509205791818465695129576546208321512262668286546498751578176148536204453926075078700775938068118298769932899623635446932857678378527247073240667367230625955200648487634207221166840991866163044605173577614636975303392228146692017483051301557383061977957187407837047622230688228368066093197274263016976979422868232019466759103578118311866182001487419867949538189792110889574925273371095508129557468379986595142564931557967030544656479897384280874128970543996864097210713547616823149489780957149092907646910581010374768780171219703046874717571263626426589296736113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (977 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'border-vets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaircourtequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentvetcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaircourtvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.border-vets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaircourtequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaircourtvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivcevidensia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dba2087987c5007417d456948bbbc8a6724435c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040719355156ca4e9a9b8df8c6dbc40391430836d0b021af748b13bdb8ad195e780b43e302114afdfbb11cc6a19b04aa62b1ac1b627dfdb2daa402e2c26c9250d0ebbed45209c77207ec765b41c0d48c6e2869f7a2aab97ee58b8073b087daf252813bb85f8a3bdc3b48378106ab2351186fd4caa81c87b81e6c5c5a0edb17ac6e9c429d6112cef11fc6b33b91cc609ddbfb1da558478d659b926415d953b9c2aefb31b702b075a8ee7eb4c376ae5d9aa6be4db69dfde62a7b258d751154e8d3f012087dd73f711af17e27c4e52d2d3d947aea8f84655e197f321dced58f7e71669d0551a5f3748863e12140925d408f9e9d7403fd86098395680f8d728fbd901