imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:12:24:47:66:bb:bb:87:4c:b4:15:0e:b7:8a:82:8b was issued on by GlobalSign nv-sa.

With 121 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:12:24:47:66:bb:bb:87:4c:b4:15:0e:b7:8a:82:8b
Serial Number (int): 1423425162978238451535532272558703243
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:68:d1:d6:ab:06:3f:e3:a1:08:f9:55:3c:d4:c4:6a:b3:bd:5c:c2
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): a1:db:3a:f7:47:6c:f3:5d:43:9c:5f:c0:20:d3:a0:0c:3b:77:86:7c
Fingerprint (sha256): 3e:01:b8:2e:2e:d7:32:9b:2f:b7:28:f9:e9:a6:ca:2b:d2:76:99:81:45:c5:c6:48:89:b1:86:ae:21:ba:36:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

121

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chernigivske.com
*.hub.donuslabs.net
*.nilebreweries.com
www.abwp.us
*.metrics.ab-inbev.com
backus-programa.pe
budnetec.com
www.stellaperfectpour.com
nilebreweries.com
*.mybees-platform.com
*.nutrlusa.com
sabfoundation.co.za
*.fritesartois.com
kirinusa.beer
*.tadaexperiences.co.uk
*.mydiekirch.lu
180-360.ab-inbev.com
drinkomission.com
tadaexperiences.co.uk
dbbrewingcompany.com
bmix.cl
*.cbeqa.com
*.hoegaarden.co.il
www.labattbettertogether.ca
keepitbrightperks.com
planbees.io
www.keepitbrightperks.com
*.tripelkarmeliet.com
*.soudonus.com.br
brahma.com.py
www.chernigivske.com
*.consumoresponsable.com.mx
www.beyondbeerrefresh.com
*.backus-programa.pe
www.hooptea.com
nutrlusa.com
*.portal.tadaexperiences.be
labattbettertogether.ca
*.becks.it
imperva.com
mydiekirch.lu
qa.api.abwp.us
jetskol.com
abwp.us
*.abwp.us
leffe.co.il
nfl.budlight.com
labattmobility.com
*.tada-api.mybees.be
*.budlight.com
ciscobrewers.com
*.cidrerielacroix.com
fritesartois.com
hooptea.com
qa.abwp.us
www.wholesalerstrategicsourcing.com
*.labattmobilityqa.com
*.dbbrewingcompany.com
*.brahma.com.py
cheerscommunity.com
beyondbeerrefresh.com
beesbank.com.br
*.membeers.com
*.stellaartois.co.il
*.millstreetbrewery.com
*.bmix.cl
*.planbees.io
*.stg.beesbank.com.br
biobrew.com
*.budpayments.com
*.stealartois.com
stellaartois.co.il
*.abverify.com
budexchange.com
*.budnetec.com
www.vezasur.com
*.bees-internal.dev
*.biobrew.com
www.ciscobrewers.com
*.budexchange.com
*.bees.com
*.cbeapi.com
wholesalerstrategicsourcing.com
*.beesbank.com.br
cbeapi.com
neonharddrinks.com
barbarian.pe
www.kirinusa.beer
www.drinkneonburst.com
*.anheuser-busch.com
*.uat.bees-platform.dev
stellaperfectpour.com
www.wynwoodbrewing.com
labattmobilityqa.com
mobile.abinbevefes.com
*.dev.ze.delivery
cbeqa.com
vezasur.com
budpayments.com
membeers.com
www.drinkomission.com
*.alchemy.beertech.com
pagamentos-caixa-tmp.soudonus.com.br
www.neonharddrinks.com
cidrerielacroix.com
becks.it
drinkneonburst.com
backoffice.budlight.com
consumoresponsable.com.mx
*.leffe.co.il
www.cheerscommunity.com
wynwoodbrewing.com
*.ab-inbev.com
*.labattmobility.com
*.jetskol.com
*.sabfoundation.co.za
*.dr.mybees-platform.dev
stealartois.com
hoegaarden.co.il
*.180-360.ab-inbev.com
*.barbarian.pe

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPiDCCDnCgAwIBAgIQARIkR2a7u4dMtBUOt4qCizANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMTAeFw0yNDAx
MTUxMzI4MjlaFw0yNDA3MTMxMzI4MjlaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijroxNxn+hWdnAlaDtlr
SvjpvX+eDOKiz+gXY0fW3UPRq7yeqlHYmgTzdhvH2p9ylMF+qTVvVtPAzzIiZd3d
5t4OykLfKDob5d7IVuKCHRPQCBBkBGvz+OpEQ/uanZLMr0bliQPZ0KGTkt+SrZA5
Vo1gDVSb505ieFixGQqklf1NVmn27KbCpa8sUPVXFv1o60RtE0S7DyJA6XH/k3vQ
bLdFnFJQpfOOUYGb7ZQcN2KIDCFGz5xGjumSPVmxodgnT9TjfwvXCxLa7nkHfVtp
ReVP79mnonUnLPpYGPotA7hZvtkSdeQV+yk282xdNzmWj+v3439QU11GjfYSO5sV
PwIDAQABo4IMjjCCDIowgglCBgNVHREEggk5MIIJNYIQY2hlcm5pZ2l2c2tlLmNv
bYITKi5odWIuZG9udXNsYWJzLm5ldIITKi5uaWxlYnJld2VyaWVzLmNvbYILd3d3
LmFid3AudXOCFioubWV0cmljcy5hYi1pbmJldi5jb22CEmJhY2t1cy1wcm9ncmFt
YS5wZYIMYnVkbmV0ZWMuY29tghl3d3cuc3RlbGxhcGVyZmVjdHBvdXIuY29tghFu
aWxlYnJld2VyaWVzLmNvbYIVKi5teWJlZXMtcGxhdGZvcm0uY29tgg4qLm51dHJs
dXNhLmNvbYITc2FiZm91bmRhdGlvbi5jby56YYISKi5mcml0ZXNhcnRvaXMuY29t
gg1raXJpbnVzYS5iZWVyghcqLnRhZGFleHBlcmllbmNlcy5jby51a4IPKi5teWRp
ZWtpcmNoLmx1ghQxODAtMzYwLmFiLWluYmV2LmNvbYIRZHJpbmtvbWlzc2lvbi5j
b22CFXRhZGFleHBlcmllbmNlcy5jby51a4IUZGJicmV3aW5nY29tcGFueS5jb22C
B2JtaXguY2yCCyouY2JlcWEuY29tghIqLmhvZWdhYXJkZW4uY28uaWyCG3d3dy5s
YWJhdHRiZXR0ZXJ0b2dldGhlci5jYYIVa2VlcGl0YnJpZ2h0cGVya3MuY29tggtw
bGFuYmVlcy5pb4IZd3d3LmtlZXBpdGJyaWdodHBlcmtzLmNvbYIVKi50cmlwZWxr
YXJtZWxpZXQuY29tghEqLnNvdWRvbnVzLmNvbS5icoINYnJhaG1hLmNvbS5weYIU
d3d3LmNoZXJuaWdpdnNrZS5jb22CGyouY29uc3Vtb3Jlc3BvbnNhYmxlLmNvbS5t
eIIZd3d3LmJleW9uZGJlZXJyZWZyZXNoLmNvbYIUKi5iYWNrdXMtcHJvZ3JhbWEu
cGWCD3d3dy5ob29wdGVhLmNvbYIMbnV0cmx1c2EuY29tghsqLnBvcnRhbC50YWRh
ZXhwZXJpZW5jZXMuYmWCF2xhYmF0dGJldHRlcnRvZ2V0aGVyLmNhggoqLmJlY2tz
Lml0ggtpbXBlcnZhLmNvbYINbXlkaWVraXJjaC5sdYIOcWEuYXBpLmFid3AudXOC
C2pldHNrb2wuY29tggdhYndwLnVzggkqLmFid3AudXOCC2xlZmZlLmNvLmlsghBu
ZmwuYnVkbGlnaHQuY29tghJsYWJhdHRtb2JpbGl0eS5jb22CFCoudGFkYS1hcGku
bXliZWVzLmJlgg4qLmJ1ZGxpZ2h0LmNvbYIQY2lzY29icmV3ZXJzLmNvbYIVKi5j
aWRyZXJpZWxhY3JvaXguY29tghBmcml0ZXNhcnRvaXMuY29tggtob29wdGVhLmNv
bYIKcWEuYWJ3cC51c4Ijd3d3Lndob2xlc2FsZXJzdHJhdGVnaWNzb3VyY2luZy5j
b22CFioubGFiYXR0bW9iaWxpdHlxYS5jb22CFiouZGJicmV3aW5nY29tcGFueS5j
b22CDyouYnJhaG1hLmNvbS5weYITY2hlZXJzY29tbXVuaXR5LmNvbYIVYmV5b25k
YmVlcnJlZnJlc2guY29tgg9iZWVzYmFuay5jb20uYnKCDioubWVtYmVlcnMuY29t
ghQqLnN0ZWxsYWFydG9pcy5jby5pbIIXKi5taWxsc3RyZWV0YnJld2VyeS5jb22C
CSouYm1peC5jbIINKi5wbGFuYmVlcy5pb4IVKi5zdGcuYmVlc2JhbmsuY29tLmJy
ggtiaW9icmV3LmNvbYIRKi5idWRwYXltZW50cy5jb22CESouc3RlYWxhcnRvaXMu
Y29tghJzdGVsbGFhcnRvaXMuY28uaWyCDiouYWJ2ZXJpZnkuY29tgg9idWRleGNo
YW5nZS5jb22CDiouYnVkbmV0ZWMuY29tgg93d3cudmV6YXN1ci5jb22CEyouYmVl
cy1pbnRlcm5hbC5kZXaCDSouYmlvYnJldy5jb22CFHd3dy5jaXNjb2JyZXdlcnMu
Y29tghEqLmJ1ZGV4Y2hhbmdlLmNvbYIKKi5iZWVzLmNvbYIMKi5jYmVhcGkuY29t
gh93aG9sZXNhbGVyc3RyYXRlZ2ljc291cmNpbmcuY29tghEqLmJlZXNiYW5rLmNv
bS5icoIKY2JlYXBpLmNvbYISbmVvbmhhcmRkcmlua3MuY29tggxiYXJiYXJpYW4u
cGWCEXd3dy5raXJpbnVzYS5iZWVyghZ3d3cuZHJpbmtuZW9uYnVyc3QuY29tghQq
LmFuaGV1c2VyLWJ1c2NoLmNvbYIXKi51YXQuYmVlcy1wbGF0Zm9ybS5kZXaCFXN0
ZWxsYXBlcmZlY3Rwb3VyLmNvbYIWd3d3Lnd5bndvb2RicmV3aW5nLmNvbYIUbGFi
YXR0bW9iaWxpdHlxYS5jb22CFm1vYmlsZS5hYmluYmV2ZWZlcy5jb22CESouZGV2
LnplLmRlbGl2ZXJ5ggljYmVxYS5jb22CC3ZlemFzdXIuY29tgg9idWRwYXltZW50
cy5jb22CDG1lbWJlZXJzLmNvbYIVd3d3LmRyaW5rb21pc3Npb24uY29tghYqLmFs
Y2hlbXkuYmVlcnRlY2guY29tgiRwYWdhbWVudG9zLWNhaXhhLXRtcC5zb3Vkb251
cy5jb20uYnKCFnd3dy5uZW9uaGFyZGRyaW5rcy5jb22CE2NpZHJlcmllbGFjcm9p
eC5jb22CCGJlY2tzLml0ghJkcmlua25lb25idXJzdC5jb22CF2JhY2tvZmZpY2Uu
YnVkbGlnaHQuY29tghljb25zdW1vcmVzcG9uc2FibGUuY29tLm14gg0qLmxlZmZl
LmNvLmlsghd3d3cuY2hlZXJzY29tbXVuaXR5LmNvbYISd3lud29vZGJyZXdpbmcu
Y29tgg4qLmFiLWluYmV2LmNvbYIUKi5sYWJhdHRtb2JpbGl0eS5jb22CDSouamV0
c2tvbC5jb22CFSouc2FiZm91bmRhdGlvbi5jby56YYIYKi5kci5teWJlZXMtcGxh
dGZvcm0uZGV2gg9zdGVhbGFydG9pcy5jb22CEGhvZWdhYXJkZW4uY28uaWyCFiou
MTgwLTM2MC5hYi1pbmJldi5jb22CDiouYmFyYmFyaWFuLnBlMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFAZo
0darBj/joQj5VTzUxGqzvVzCMFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQB
oDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v
cmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIwADCBngYIKwYBBQUHAQEEgZEwgY4wQAYI
KwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNy
M2R2dGxzY2EyMDI0cTEwSgYIKwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFs
c2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2EyMDI0cTEuY3J0MB8GA1Ud
IwQYMBaAFGbAx6Oazf7z6s5LUwthXq8zBbPhMEgGA1UdHwRBMD8wPaA7oDmGN2h0
dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRx
MS5jcmwwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AHb/iD8KtvuVUcJhzPWH
ujS0pM27KdxoQgqf5mdMWjp0AAABjQ1PX7sAAAQDAEgwRgIhANPnBYlIHAfG5MxG
0RbH8J+NBJTyzyP8d+mey8UPs3dnAiEAs+Qgw8DgqtKfQ+vu2S8G1Yn7Yqrixm/W
8LMwsNauS2QAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAY0N
T2A6AAAEAwBHMEUCIQDHGI3pY098LDTwLqmgN1Ob73iQ8eFPcC7y4a8LaFR4iAIg
XFfvAqC2PO6v9Txq3onFR5gocf8Sybkfy2pnYC1BIw8AdgDuzdBk1dsazsVct520
zROiModGfLzs3sNRSFlGcR+1mwAAAY0NT2DDAAAEAwBHMEUCIGEVBcSRCyDuYU1z
kF1QhXLFLwMB5HkeLHDaz/gL05fcAiEA3rnNjVbSKjkjuvdhoyrZyuwY1ESTBCOv
6k2aovQ88sQwDQYJKoZIhvcNAQELBQADggEBADnYNs7BBzo8sIFOFYipPE4imxxC
WWKEojkMyPHmqx3y9zfAhA1pEYIsZAZdrQw6AkX/9d9X9FCBNFBZrnEyoMy/E22n
WkGQo5qh/RwregWX6+gdiXEsh8wDMxp76wUHMHzp0tYPpRHds2Rb3lNQGr1qVzjY
9fSx6nD5cfBsNvmA8sMvcduYZbeKwMV9U6R0i1k9BFvGO3/gGT8vuT+X3mLrilTh
p/6uA+buM6ZA9BNLFoMo4MFCx3quqOihtE69dvBCFdeebCAJblse9Ik+XFXHi6fI
+5y/JYDtBxKILH3VBkL0T9E6+af4dwjot3bVfw1DwhaGd8qdRiNVj3S/KDY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijroxNxn+hWdnAlaDtlr
SvjpvX+eDOKiz+gXY0fW3UPRq7yeqlHYmgTzdhvH2p9ylMF+qTVvVtPAzzIiZd3d
5t4OykLfKDob5d7IVuKCHRPQCBBkBGvz+OpEQ/uanZLMr0bliQPZ0KGTkt+SrZA5
Vo1gDVSb505ieFixGQqklf1NVmn27KbCpa8sUPVXFv1o60RtE0S7DyJA6XH/k3vQ
bLdFnFJQpfOOUYGb7ZQcN2KIDCFGz5xGjumSPVmxodgnT9TjfwvXCxLa7nkHfVtp
ReVP79mnonUnLPpYGPotA7hZvtkSdeQV+yk282xdNzmWj+v3439QU11GjfYSO5sV
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1423425162978238451535532272558703243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 13:28:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 13:28:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17449935321074243758535065911305401414190116656118092711395321710666789832682370054396539852597051013623960032055478322484379649350648874219493464675732538309222078226868587813282733259306155677112880357341329227087836494869404534680173887964715259808821053758791453788246569699950724804885681416800500312509798263644724094719730706874302531891223998449198235375128973579342599970696440718401303555935894761082144268508861929493621259118359457370801133042036041800375880523258911931823135489626660530245548311476011499839620821824499457837081517774158340983265287415215454634539219620282229087023937328230659891336511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.donuslabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybees-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbbrewingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripelkarmeliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.tadaexperiences.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tada-api.mybees.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dbbrewingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstreetbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stealartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees-internal.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarian.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anheuser-busch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.abinbevefes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ze.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alchemy.beertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamentos-caixa-tmp.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.mybees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stealartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbarian.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0668d1d6ab063fe3a108f9553cd4c46ab3bd5cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0d4f5fbb0000040300483046022100d3e70589481c07c6e4cc46d116c7f09f8d0494f2cf23fc77e99ecbc50fb37767022100b3e420c3c0e0aad29f43ebeed92f06d589fb62aae2c66fd6f0b330b0d6ae4b64007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d0d4f603a0000040300473045022100c7188de9634f7c2c34f02ea9a037539bef7890f1e14f702ef2e1af0b6854788802205c57ef02a0b63ceeaff53c6ade89c547982871ff12c9b91fcb6a67602d41230f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d0d4f60c300000403004730450220611505c4910b20ee614d73905d508572c52f0301e4791e2c70dacff80bd397dc022100deb9cd8d56d22a3923baf761a32ad9caec18d444930423afea4d9aa2f43cf2c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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