*.exp.gumgum.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:eb:90:ce:f3:72:bc:5c:15:75:10:cb:72:23:9e:47 was issued on by GlobalSign nv-sa.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.exp.gumgum.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:eb:90:ce:f3:72:bc:5c:15:75:10:cb:72:23:9e:47
Serial Number (int): 2552354820868568578171380585554222663
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 8d:21:2b:d4:54:fd:f7:0e:09:6e:22:0d:9b:d3:65:ea:e8:85:66:5d
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): f6:ea:64:92:ff:1a:90:ac:81:57:74:9a:ba:25:dd:53:e7:ad:3e:54
Fingerprint (sha256): 41:11:8c:99:b3:7c:b3:5c:81:c0:1b:dc:07:46:47:25:28:f1:f7:33:ae:09:85:30:1b:00:e0:26:b6:f5:40:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate *.exp.gumgum.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exp.gumgum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.exp.gumgum.com
aec.autodesk.com
ar20.balfourbeatty.com
atx.streamrealty.com
blog.botoxcosmetic.com
blog.juvederm.com
brandlab.ensembleiq.com
business.healthing.ca
campaignai.haymarket.com
campaignai.haymarketasia.com
chi.streamrealty.com
content.etq.com
content.oneneck.com
councilcuts.unison.org.uk
datacenters.arcadis.com
den.streamrealty.com
dfw.streamrealty.com
digital.citywireusa.com
discover.cortera.com
discover.dreamvacationweek.com
doordash.atlasobscura.com
engage.avetta.com
engage.mckesson.com
epubs.bdo.co.uk
ermdolphyn.erm.com
events.beckershospitalreview.com
events.driving.ca
exp.lifeandretirement.aig.com
experience.americo.com
experience.bdo.com
experience.cmbinfo.com
experience.cn.ca
experience.connectionsacademy.com
experience.fromthestart.com
experience.kes.global
experience.landauer.com
experience.middleby.com
experience.venminder.com
experience.windriver.com
explore.aveva.com
explore.globusfamily.com
gla.streamrealty.com
go.bos.com
go.hcm2.com
growth.rapidmicrobio.com
hou.streamrealty.com
info.angiodynamics.com
interactive.amrytpharma.com
interactive.cardinalhealth.com
interactive.carpenteradditive.com
interactive.commscope.com
interactive.mandg.com
interactive.singledigits.com
knightfrank.digital-hub.global
mapping.mccarthy.com
markets.societegenerale.fr
media.stress.com
newsletters.financialpost.com
nominate.onlyinyourstate.com
oe.progyny.com
recruiting.mccarthy.com
salary-guide.hays.co.uk
salary-guide.hays.ie
satx.streamrealty.com
shutterfly.mckinney.com
sidetrips.kimptonhotels.com
site.techdata.com
solutions.dlt.com
strategy.macegroup.com
training.americo.com
truthaboutgenz.mccannworldgroup.com
view.knownfor.studio
vodafone.digital-hub.global
watch.siemconfessions.com
www.17daysofmagic.com
www.chooseyourownlunchadventure.com
www.citywireforecast.com
www.europneusdigital.es
www.iacvalencia.com
www.kubotam6002.com
www.pecanaustin.com
www.tnycreativelab.com
www.wiredbrandlab.com
super.ceros.fun

Other certificates including the domain name gumgum.com

(limited to 100 certificates)
*.gumgum.com
ceros2.map.fastly.net
techblog.gumgum.com
insights.gumgum.com
san-003.ceros.com
sales.gumgum.com
corporatestatus.tyro.com
san-003.ceros.com
san-003.ceros.com
insights.gumgum.com
san-003.ceros.com
ceros4.map.fastly.net
techblog.gumgum.com
ceros4.map.fastly.net
san-002.ceros.com
ceros2.map.fastly.net
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
ceros4.map.fastly.net
san-003.ceros.com
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
*.dlrgroup.com
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
enomstatus.com
corporatestatus.tyro.com
san-002.ceros.com
*.advertising-api.gumgum.com
gumgum.com
san-003.ceros.com
ixlwvc.com
san-003.ceros.com
*.verity-api.dev.va.ggops.com
san-003.ceros.com
ceros4.map.fastly.net
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
san-002.ceros.com
insights.gumgum.com
*.exp.gumgum.com
ceros2.map.fastly.net
ceros2.map.fastly.net
gumdrops.gumgum.com
corporatestatus.tyro.com
www.store.gumgum.com
san-003.ceros.com
gumgum.com
ceros4.map.fastly.net
san-003.ceros.com
*.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
*.gumgum.com
san-002.ceros.com
*.gumgum.com
ceros4.map.fastly.net
3-14.exp.gumgum.com
san-002.ceros.com
*.gumgum.com
sports-api--dev.sports.ggops.com
san-004.ceros.com
ceros4.map.fastly.net
corporatestatus.tyro.com
san-003.ceros.com
*.ceros.com
*.gumgum.com
san-003.ceros.com
san-003.ceros.com
techblog.gumgum.com
gumgum.com
techblog.gumgum.com
ceros4.map.fastly.net
ceros2.map.fastly.net
*.gumgum.com
san-002.ceros.com
san-002.ceros.com
5752754626625536-fe1.pantheonsite.io
*.gumgum.com
corporatestatus.tyro.com
5752754626625536-fe1.pantheonsite.io
3.14-hersheys.exp.gumgum.com
ceros2.map.fastly.net
5752754626625536-fe1.pantheonsite.io
techblog.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
san-003.ceros.com
*.gumgum.com
ceros2.map.fastly.net
enomstatus.com

Certificate

The complete raw certificate details for *.exp.gumgum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vQh0Csz7tN5N+vANT0w
FuOwRMV/z+SlUREpxImV2JpNLNS9593/huUCnuC3PZwOnNPBb9AZ3PUQoeebnItP
7DNiY67Dwz1/1Rd77JMo5rq48ZJTkuwKJJDjO1FzL3+rSb9LwVlVinCTlga4IEHI
XhikMMv7Kbsuq4U49zOF6kDb47OL+DrKBrafO8++bUMul8z+vsV2OSNnJEq2xdm8
OXhnf/h9Ta9XXNL8sjLN9pJq6c27g9irF4dFuytAJEHX9BgBKNM148mYJD2Vg+dy
g8SGgSomSEFtycLlb+zCg9IBUM83ifKPrHWThOV1vCQMyODQ/ortjw75MjvzWN6S
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2552354820868568578171380585554222663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 22:21:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 22:21:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exp.gumgum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28145289719269606913811980958066593701287750738746343836169877496690470056905909353706254520781761027617985355744622311692106343117922908193819876609415716006232181229487156494153075648948988205001013604575958265830552970799497093611829695288135818766001142205235295650814691035781079429085930458586681028808590948285449280639117257123845533958016631326564556532085190146216060666503929465358245845650835982729141028311094717720355162415438654716672257274916090104275221021387922493645081824183517781113812769691122053997171839111393246871770984886360282702544717432055854968585218437737959579231308308609899723395709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exp.gumgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aec.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar20.balfourbeatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atx.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.botoxcosmetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.juvederm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandlab.ensembleiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.healthing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignai.haymarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignai.haymarketasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chi.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.etq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.oneneck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'councilcuts.unison.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenters.arcadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfw.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.citywireusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.cortera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.dreamvacationweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordash.atlasobscura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.avetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epubs.bdo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ermdolphyn.erm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.beckershospitalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.driving.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exp.lifeandretirement.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.americo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.cmbinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.cn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.connectionsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.fromthestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.kes.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.landauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.middleby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.venminder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.windriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.aveva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.globusfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gla.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.bos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.hcm2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hou.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.angiodynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.amrytpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.cardinalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.carpenteradditive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.mandg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.singledigits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightfrank.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.stress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.financialpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.onlyinyourstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oe.progyny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salary-guide.hays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salary-guide.hays.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satx.streamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterfly.mckinney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidetrips.kimptonhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.dlt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.macegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.americo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthaboutgenz.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.knownfor.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.siemconfessions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17daysofmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooseyourownlunchadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citywireforecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europneusdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iacvalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotam6002.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pecanaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnycreativelab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiredbrandlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super.ceros.fun'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d212bd454fdf70e096e220d9bd365eae885665d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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