*.exp.gumgum.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:b3:2f:b3:cc:86:5a:68:e7:12:e4:da:5e:cf:60:a3 was issued on by GlobalSign nv-sa.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.exp.gumgum.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b3:2f:b3:cc:86:5a:68:e7:12:e4:da:5e:cf:60:a3
Serial Number (int): 2259616651852476711715339330403655843
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 60:73:69:3f:fa:ca:04:d6:76:27:99:39:81:34:bd:f1:5b:8e:db:de
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 9e:58:13:6c:97:0c:21:a0:5a:a6:76:93:d6:34:e6:e3:07:22:3f:51
Fingerprint (sha256): 2f:31:60:b5:86:6e:db:b4:c9:b2:3c:57:d4:f3:9a:fe:73:4f:e4:98:0c:4a:2f:9f:20:0d:1c:03:51:b0:3d:c3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate *.exp.gumgum.com

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exp.gumgum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.exp.gumgum.com
*.versapay.com
aec.autodesk.com
ar20.balfourbeatty.com
atx.streamrealty.com
blog.botoxcosmetic.com
blog.juvederm.com
brandlab.ensembleiq.com
business.healthing.ca
campaignai.haymarket.com
campaignai.haymarketasia.com
chi.streamrealty.com
connections.ukg.com
content.etq.com
content.oneneck.com
councilcuts.unison.org.uk
datacenters.arcadis.com
den.streamrealty.com
dfw.streamrealty.com
digital.citywireusa.com
discover.cortera.com
discover.dreamvacationweek.com
doordash.atlasobscura.com
engage.avetta.com
engage.mckesson.com
epubs.bdo.co.uk
ermdolphyn.erm.com
events.beckershospitalreview.com
events.driving.ca
exp.lifeandretirement.aig.com
experience.americo.com
experience.bdo.com
experience.cmbinfo.com
experience.cn.ca
experience.connectionsacademy.com
experience.fromthestart.com
experience.kes.global
experience.landauer.com
experience.mediacomcable.com
experience.middleby.com
experience.venminder.com
experience.windriver.com
experience.zensar.com
explore.aveva.com
explore.globusfamily.com
getcreative.usatoday.com
gla.streamrealty.com
go.bos.com
go.hcm2.com
growth.rapidmicrobio.com
hou.streamrealty.com
info.angiodynamics.com
insights.versapay.com
interactive.amrytpharma.com
interactive.cardinalhealth.com
interactive.carpenteradditive.com
interactive.commscope.com
interactive.mandg.com
interactive.singledigits.com
knightfrank.digital-hub.global
kraton.ellamera.com
mapping.mccarthy.com
markets.societegenerale.fr
media.stress.com
newsletters.financialpost.com
nominate.onlyinyourstate.com
oe.progyny.com
readynow.otsuka-us.com
recruiting.mccarthy.com
review.theinsuranceassist.com
salary-guide.hays.co.uk
salary-guide.hays.ie
satx.streamrealty.com
see-dimensions.ukg.com
see-pro.ukg.com
see-ready.ukg.com
shutterfly.mckinney.com
sidetrips.kimptonhotels.com
site.techdata.com
solutions.dlt.com
strategy.macegroup.com
training.americo.com
truthaboutgenz.mccannworldgroup.com
view.ethosgroup.com
view.knownfor.studio
view.midway.team
vodafone.digital-hub.global
watch.siemconfessions.com
wellnesswithwoowi.woowi.co.uk
www.17daysofmagic.com
www.chooseyourownlunchadventure.com
www.citywireforecast.com
www.europneusdigital.es
www.iacvalencia.com
www.kubotam6002.com
www.movetojade.com
www.pecanaustin.com
www.talentmakersbook.com
www.tnycreativelab.com
www.wiredbrandlab.com
super.ceros.fun

Other certificates including the domain name gumgum.com

(limited to 100 certificates)
*.gumgum.com
ceros2.map.fastly.net
techblog.gumgum.com
insights.gumgum.com
san-003.ceros.com
sales.gumgum.com
corporatestatus.tyro.com
san-003.ceros.com
san-003.ceros.com
insights.gumgum.com
san-003.ceros.com
ceros4.map.fastly.net
techblog.gumgum.com
ceros4.map.fastly.net
san-002.ceros.com
ceros2.map.fastly.net
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
ceros4.map.fastly.net
san-003.ceros.com
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
*.dlrgroup.com
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
enomstatus.com
corporatestatus.tyro.com
san-002.ceros.com
*.advertising-api.gumgum.com
gumgum.com
san-003.ceros.com
ixlwvc.com
san-003.ceros.com
*.verity-api.dev.va.ggops.com
san-003.ceros.com
ceros4.map.fastly.net
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
san-002.ceros.com
insights.gumgum.com
*.exp.gumgum.com
ceros2.map.fastly.net
ceros2.map.fastly.net
gumdrops.gumgum.com
corporatestatus.tyro.com
www.store.gumgum.com
san-003.ceros.com
gumgum.com
ceros4.map.fastly.net
san-003.ceros.com
*.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
*.gumgum.com
san-002.ceros.com
*.gumgum.com
ceros4.map.fastly.net
3-14.exp.gumgum.com
san-002.ceros.com
*.gumgum.com
sports-api--dev.sports.ggops.com
san-004.ceros.com
ceros4.map.fastly.net
corporatestatus.tyro.com
san-003.ceros.com
*.ceros.com
*.gumgum.com
san-003.ceros.com
san-003.ceros.com
techblog.gumgum.com
gumgum.com
techblog.gumgum.com
ceros4.map.fastly.net
ceros2.map.fastly.net
*.gumgum.com
san-002.ceros.com
san-002.ceros.com
5752754626625536-fe1.pantheonsite.io
*.gumgum.com
corporatestatus.tyro.com
5752754626625536-fe1.pantheonsite.io
3.14-hersheys.exp.gumgum.com
ceros2.map.fastly.net
5752754626625536-fe1.pantheonsite.io
techblog.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
san-003.ceros.com
*.gumgum.com
ceros2.map.fastly.net
enomstatus.com

Certificate

The complete raw certificate details for *.exp.gumgum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPzTCCDrWgAwIBAgIQAbMvs8yGWmjnEuTaXs9gozANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMiBRMTAeFw0yMjAz
MjExNjEwMjZaFw0yMzA0MjIxNjEwMjVaMBsxGTAXBgNVBAMMECouZXhwLmd1bWd1
bS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3gl9nCDWnFWP
7wrHJLjq4R7MxxQI3dZa/IjENNkZfcWNz/jBnoeZeYGT4+K3mPlH+HpTmFPa9zMC
vnGeKzZbUrFHbCQW5lp3KYHcBe9Tg6vIDUOwhYOQNnebnomdnt/JBFIr0sAXKD8o
gE0ZX3GIGpngZa8imwV3dZOV1ApdebIoUsgr4VqRmN75EF3TKZ/eNT7syGGrppMm
4qJM/SMbR1axtaZjAe/W/Ym7m+JDMwa1juJEOiqSg/uALe1DldMLXw7muZgvW4LZ
sgtVdPn2K2w93em6GyKsfRtzAfJFurox209jReEwuQGVYx5jLmOzvyGj7I1cNrpF
h2RZXQ+lAgMBAAGjggzOMIIMyjCCCYIGA1UdEQSCCXkwggl1ghAqLmV4cC5ndW1n
dW0uY29tgg4qLnZlcnNhcGF5LmNvbYIQYWVjLmF1dG9kZXNrLmNvbYIWYXIyMC5i
YWxmb3VyYmVhdHR5LmNvbYIUYXR4LnN0cmVhbXJlYWx0eS5jb22CFmJsb2cuYm90
b3hjb3NtZXRpYy5jb22CEWJsb2cuanV2ZWRlcm0uY29tghdicmFuZGxhYi5lbnNl
bWJsZWlxLmNvbYIVYnVzaW5lc3MuaGVhbHRoaW5nLmNhghhjYW1wYWlnbmFpLmhh
eW1hcmtldC5jb22CHGNhbXBhaWduYWkuaGF5bWFya2V0YXNpYS5jb22CFGNoaS5z
dHJlYW1yZWFsdHkuY29tghNjb25uZWN0aW9ucy51a2cuY29tgg9jb250ZW50LmV0
cS5jb22CE2NvbnRlbnQub25lbmVjay5jb22CGWNvdW5jaWxjdXRzLnVuaXNvbi5v
cmcudWuCF2RhdGFjZW50ZXJzLmFyY2FkaXMuY29tghRkZW4uc3RyZWFtcmVhbHR5
LmNvbYIUZGZ3LnN0cmVhbXJlYWx0eS5jb22CF2RpZ2l0YWwuY2l0eXdpcmV1c2Eu
Y29tghRkaXNjb3Zlci5jb3J0ZXJhLmNvbYIeZGlzY292ZXIuZHJlYW12YWNhdGlv
bndlZWsuY29tghlkb29yZGFzaC5hdGxhc29ic2N1cmEuY29tghFlbmdhZ2UuYXZl
dHRhLmNvbYITZW5nYWdlLm1ja2Vzc29uLmNvbYIPZXB1YnMuYmRvLmNvLnVrghJl
cm1kb2xwaHluLmVybS5jb22CIGV2ZW50cy5iZWNrZXJzaG9zcGl0YWxyZXZpZXcu
Y29tghFldmVudHMuZHJpdmluZy5jYYIdZXhwLmxpZmVhbmRyZXRpcmVtZW50LmFp
Zy5jb22CFmV4cGVyaWVuY2UuYW1lcmljby5jb22CEmV4cGVyaWVuY2UuYmRvLmNv
bYIWZXhwZXJpZW5jZS5jbWJpbmZvLmNvbYIQZXhwZXJpZW5jZS5jbi5jYYIhZXhw
ZXJpZW5jZS5jb25uZWN0aW9uc2FjYWRlbXkuY29tghtleHBlcmllbmNlLmZyb210
aGVzdGFydC5jb22CFWV4cGVyaWVuY2Uua2VzLmdsb2JhbIIXZXhwZXJpZW5jZS5s
YW5kYXVlci5jb22CHGV4cGVyaWVuY2UubWVkaWFjb21jYWJsZS5jb22CF2V4cGVy
aWVuY2UubWlkZGxlYnkuY29tghhleHBlcmllbmNlLnZlbm1pbmRlci5jb22CGGV4
cGVyaWVuY2Uud2luZHJpdmVyLmNvbYIVZXhwZXJpZW5jZS56ZW5zYXIuY29tghFl
eHBsb3JlLmF2ZXZhLmNvbYIYZXhwbG9yZS5nbG9idXNmYW1pbHkuY29tghhnZXRj
cmVhdGl2ZS51c2F0b2RheS5jb22CFGdsYS5zdHJlYW1yZWFsdHkuY29tggpnby5i
b3MuY29tggtnby5oY20yLmNvbYIYZ3Jvd3RoLnJhcGlkbWljcm9iaW8uY29tghRo
b3Uuc3RyZWFtcmVhbHR5LmNvbYIWaW5mby5hbmdpb2R5bmFtaWNzLmNvbYIVaW5z
aWdodHMudmVyc2FwYXkuY29tghtpbnRlcmFjdGl2ZS5hbXJ5dHBoYXJtYS5jb22C
HmludGVyYWN0aXZlLmNhcmRpbmFsaGVhbHRoLmNvbYIhaW50ZXJhY3RpdmUuY2Fy
cGVudGVyYWRkaXRpdmUuY29tghlpbnRlcmFjdGl2ZS5jb21tc2NvcGUuY29tghVp
bnRlcmFjdGl2ZS5tYW5kZy5jb22CHGludGVyYWN0aXZlLnNpbmdsZWRpZ2l0cy5j
b22CHmtuaWdodGZyYW5rLmRpZ2l0YWwtaHViLmdsb2JhbIITa3JhdG9uLmVsbGFt
ZXJhLmNvbYIUbWFwcGluZy5tY2NhcnRoeS5jb22CGm1hcmtldHMuc29jaWV0ZWdl
bmVyYWxlLmZyghBtZWRpYS5zdHJlc3MuY29tgh1uZXdzbGV0dGVycy5maW5hbmNp
YWxwb3N0LmNvbYIcbm9taW5hdGUub25seWlueW91cnN0YXRlLmNvbYIOb2UucHJv
Z3lueS5jb22CFnJlYWR5bm93Lm90c3VrYS11cy5jb22CF3JlY3J1aXRpbmcubWNj
YXJ0aHkuY29tgh1yZXZpZXcudGhlaW5zdXJhbmNlYXNzaXN0LmNvbYIXc2FsYXJ5
LWd1aWRlLmhheXMuY28udWuCFHNhbGFyeS1ndWlkZS5oYXlzLmllghVzYXR4LnN0
cmVhbXJlYWx0eS5jb22CFnNlZS1kaW1lbnNpb25zLnVrZy5jb22CD3NlZS1wcm8u
dWtnLmNvbYIRc2VlLXJlYWR5LnVrZy5jb22CF3NodXR0ZXJmbHkubWNraW5uZXku
Y29tghtzaWRldHJpcHMua2ltcHRvbmhvdGVscy5jb22CEXNpdGUudGVjaGRhdGEu
Y29tghFzb2x1dGlvbnMuZGx0LmNvbYIWc3RyYXRlZ3kubWFjZWdyb3VwLmNvbYIU
dHJhaW5pbmcuYW1lcmljby5jb22CI3RydXRoYWJvdXRnZW56Lm1jY2Fubndvcmxk
Z3JvdXAuY29tghN2aWV3LmV0aG9zZ3JvdXAuY29tghR2aWV3Lmtub3duZm9yLnN0
dWRpb4IQdmlldy5taWR3YXkudGVhbYIbdm9kYWZvbmUuZGlnaXRhbC1odWIuZ2xv
YmFsghl3YXRjaC5zaWVtY29uZmVzc2lvbnMuY29tgh13ZWxsbmVzc3dpdGh3b293
aS53b293aS5jby51a4IVd3d3LjE3ZGF5c29mbWFnaWMuY29tgiN3d3cuY2hvb3Nl
eW91cm93bmx1bmNoYWR2ZW50dXJlLmNvbYIYd3d3LmNpdHl3aXJlZm9yZWNhc3Qu
Y29tghd3d3cuZXVyb3BuZXVzZGlnaXRhbC5lc4ITd3d3LmlhY3ZhbGVuY2lhLmNv
bYITd3d3Lmt1Ym90YW02MDAyLmNvbYISd3d3Lm1vdmV0b2phZGUuY29tghN3d3cu
cGVjYW5hdXN0aW4uY29tghh3d3cudGFsZW50bWFrZXJzYm9vay5jb22CFnd3dy50
bnljcmVhdGl2ZWxhYi5jb22CFXd3dy53aXJlZGJyYW5kbGFiLmNvbYIPc3VwZXIu
Y2Vyb3MuZnVuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHQYDVR0OBBYEFGBzaT/6ygTWdieZOYE0vfFbjtveMFcGA1UdIARQ
ME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6
Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIwADCB
ngYIKwYBBQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmdsb2Jh
bHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIycTEwSgYIKwYBBQUHMAKG
Pmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2
dGxzY2EyMDIycTEuY3J0MB8GA1UdIwQYMBaAFJwqZ9C0gzFbgMspllV1CTc4uDyl
MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2Ev
Z3NhdGxhc3IzZHZ0bHNjYTIwMjJxMS5jcmwwggF/BgorBgEEAdZ5AgQCBIIBbwSC
AWsBaQB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABf60+lLEA
AAQDAEcwRQIgck4/ECCHj9+vdmDSrmBf7UQUIFni3Q+i0nyT8Yfljp0CIQDrFxw+
le8DvZYETBLdE7rol2xrMskQ0EMCfceMmyYuxgB2ALc++yTfnE26dfI5xbpY9Gxd
/ELPep81xJ4dCYEl7bSZAAABf60+lMYAAAQDAEcwRQIgTfllsLDof6K6/Smr0yow
h3k054B27pqCFIIaxh/oD3ACIQCbbfv0IZoZgGb0+rIpXQKpLrB2cVllmAgpMV6n
7re1SgB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABf60+lPUA
AAQDAEgwRgIhAKMwTUY/4+3KmVnRjXnNAaclBu99BjFzUpMSl7zpf7izAiEAjvBe
5ci8N4O1uPxtIGsq5dUA+l7jLRVQsn0YmpzHqzQwDQYJKoZIhvcNAQELBQADggEB
AEAZsgED+h7eU3nypTD5nm4vrbtXgEtl4zm0jNPi0FjiAesB5rVt17dwtiP5h0CB
2b+bLlcfTmT4GaymdZsTAtm8pQAnbzppj2pjoStTDYU7KrW6CLPm6seBkRfHFiZN
HbzWThcv9BkEaWwAplYUisGsHvaSEz2eAivECK9hFxAhQtzvbo5+dRg94jKveoyy
b6YEdJlUYA5ywB1p5sh3DfYnGG1bJ4ioO4q0+sHbBCHqA8Q/zRxxjZm9bEh0R/qi
ZZTWI7E1qfZy5Yz61iXuiJqpK6N3CztWEcF6tKQHH9sz301hqNhf/BOMzyo4ScaN
Kbvt/6P2Lbe11bQbm1A2qbA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl94JfZwg1pxVj+8KxyS4
6uEezMcUCN3WWvyIxDTZGX3Fjc/4wZ6HmXmBk+Pit5j5R/h6U5hT2vczAr5xnis2
W1KxR2wkFuZadymB3AXvU4OryA1DsIWDkDZ3m56JnZ7fyQRSK9LAFyg/KIBNGV9x
iBqZ4GWvIpsFd3WTldQKXXmyKFLIK+FakZje+RBd0ymf3jU+7Mhhq6aTJuKiTP0j
G0dWsbWmYwHv1v2Ju5viQzMGtY7iRDoqkoP7gC3tQ5XTC18O5rmYL1uC2bILVXT5
9itsPd3puhsirH0bcwHyRbq6MdtPY0XhMLkBlWMeYy5js78ho+yNXDa6RYdkWV0P
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2259616651852476711715339330403655843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 16:10:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-22 16:10:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exp.gumgum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19171474611293220267717089345178468364217624821263844834944073295918075481745938392836115630126702666402179001331004021091370024566923854395457254491785882412430258525314370629488805905113830038352269912841433526959443337844266397662530032298881842122291797406794445407951056807232193449331468162674677895802943386457962966424082202964809415349611573294586102179433112266593284074504061890644463081493426311544880253781336032156130228246340026289977173655919344745197806725721889120391986082984081658740116567873507185822400575248532880737819553731986188697095513817446791327811401412672025619477072005202985694859173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2425 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exp.gumgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aec.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar20.balfourbeatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atx.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.botoxcosmetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.juvederm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandlab.ensembleiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.healthing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignai.haymarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignai.haymarketasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chi.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connections.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.etq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.oneneck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'councilcuts.unison.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenters.arcadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfw.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.citywireusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.cortera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.dreamvacationweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordash.atlasobscura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.avetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epubs.bdo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ermdolphyn.erm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.beckershospitalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.driving.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exp.lifeandretirement.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.americo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.cmbinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.cn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.connectionsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.fromthestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.kes.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.landauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mediacomcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.middleby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.venminder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.windriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.zensar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.aveva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.globusfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcreative.usatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gla.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.bos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.hcm2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hou.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.angiodynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.versapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.amrytpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.cardinalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.carpenteradditive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.mandg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.singledigits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightfrank.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraton.ellamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.stress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.financialpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.onlyinyourstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oe.progyny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readynow.otsuka-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.theinsuranceassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salary-guide.hays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salary-guide.hays.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satx.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'see-dimensions.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'see-pro.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'see-ready.ukg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterfly.mckinney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidetrips.kimptonhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.dlt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.macegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.americo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthaboutgenz.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.ethosgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.knownfor.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.midway.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.siemconfessions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnesswithwoowi.woowi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17daysofmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooseyourownlunchadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citywireforecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europneusdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iacvalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotam6002.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movetojade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pecanaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentmakersbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnycreativelab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiredbrandlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super.ceros.fun'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6073693ffaca04d6762799398134bdf15b8edbde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004019b20103fa1ede5379f2a530f99e6e2fadbb57804b65e339b48cd3e2d058e201eb01e6b56dd7b770b623f9874081d9bf9b2e571f4e64f819aca6759b1302d9bca500276f3a698f6a63a12b530d853b2ab5ba08b3e6eac7819117c716264d1dbcd64e172ff41904696c00a656148ac1ac1ef692133d9e022bc408af6117102142dcef6e8e7e75183de232af7a8cb26fa604749954600e72c01d69e6c8770df627186d5b2788a83b8ab4fac1db0421ea03c43fcd1c718d99bd6c487447faa26594d623b135a9f672e58cfad625ee889aa92ba3770b3b5611c17ab4a4071fdb33df4d61a8d85ffc138ccf2a3849c68d29bbedffa3f62db7b5d5b41b9b5036a9b0