san-005.ceros.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:4a:e7:07:35:e6:6c:98:f9:fc:3a:2c:74:c6:13:e6 was issued on by GlobalSign nv-sa.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-005.ceros.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4a:e7:07:35:e6:6c:98:f9:fc:3a:2c:74:c6:13:e6
Serial Number (int): 1718143771213345549674597808815346662
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2f:9f:61:38:97:a2:89:2e:fd:a3:33:4e:ec:b4:99:6b:d2:7c:5b:ea
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): dd:bc:e6:3b:37:96:5b:c4:97:c4:5a:ac:1f:2b:ee:d9:7f:b9:c9:a1
Fingerprint (sha256): 4a:43:c4:e8:74:f5:2c:50:40:c7:21:5f:6d:c9:fd:82:55:cb:a4:65:a0:8e:86:64:ef:8b:06:22:b3:4b:81:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate san-005.ceros.com

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-005.ceros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-005.ceros.com
prospectus.joinmentera.com
lifescience.macegroup.com
www.levelcrossing3.com
holidaysavings.kslresorts.com
weddings.vesperapismobeach.com
www.vanderbiltshop.com
experience.bv.com
sunmaid.purewow.com
esg-report.pimco.com
www.5grvtv.com
www.marqueeplace.com
lgimfixedincome.citywirecontent.com
xmas.lombardinternational.com
longform.belfasttelegraph.co.uk
longform.independent.ie
chooseyourescape.nationalpost.com
immersivetravel.nationalpost.com
longform.sundayworld.com
native.belfasttelegraph.co.uk
native.independent.ie
native.sundayworld.com
onechat.aiglife.co.uk
bestgolfgifts.golfdigest.com
solutions.travelzoo.com
www.adobeopoly.com
enforcer-x-280.pyronix.uk
personal-help-alarm.pyronix.uk
mediakit.thehill.com
www.pringleschallenge.com
hrmagazine-workplacetrends.com
www.talkaboutgrief.co.uk

Other certificates including the domain name ceros.com

(limited to 100 certificates)
tracking.duckvideo.co
san-006.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
new.ceros.com
san-001.ceros.com
ceros2.map.fastly.net
pilot.ceros.com
lucistatus.paradox.ai
san-001.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
lucistatus.paradox.ai
demo.ceros.com
san-003.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
san-001.ceros.com
agency.ibex.co
san-005.ceros.com
san-003.ceros.com
h3.shared.global.fastly.net
san-002.ceros.com
preview.ceros.com
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1.map.fastly.net
h3.shared.global.fastly.net
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
san-004.ceros.com
login-test.auth.ceros.com
san-002.ceros.com
m.ssl.fastly.net
san-003.ceros.com
san-001.ceros.com
m.ssl.fastly.net
san-004.ceros.com
demo.ceros.com
san-003.ceros.com
m.ssl.fastly.net
lucistatus.paradox.ai
san-005.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
*.pinterestceros.com
m.ssl.fastly.net
san-004.ceros.com
view.ceros.com
view.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
view.ceros.com
san-001.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-002.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-005.ceros.com
san-003.ceros.com
cheetah.apstra.com
m.ssl.fastly.net
m.ssl.fastly.net
new.ceros.com
san-004.ceros.com
discover.newswire.com
ceros1.map.fastly.net
m.ssl.fastly.net
view.ceros.com
san-001.ceros.com
san-001.ceros.com
stage-auth0.ceros.com
resources.ceros.com
san-006.ceros.com
san-002.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
lucistatus.paradox.ai
san-004.ceros.com
san-006.ceros.com
*.ceros.com
h3.shared.global.fastly.net
outreach.ceros.com
h3.shared.global.fastly.net
san-003.ceros.com
ceros1.map.fastly.net
help.inspect.ceros.com
ceros.map.fastly.net
lucistatus.paradox.ai
san-003.ceros.com
san-004.ceros.com
m.ssl.fastly.net
san-002.ceros.com
san-003.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
m.ssl.fastly.net
ceros1.map.fastly.net
san-004.ceros.com
view.ceros.com

Certificate

The complete raw certificate details for san-005.ceros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN76gPid2P2aPbSBOh8S
mCnX8k+9zxvGh/wWlIq+gYvXy4NnRgQj6PDJAqeDoFHmDjsAMgTaY+DLzltXKVxc
3wVI8u0zxlu24wr9ysxUhXgTK3bEfysi8W+lh85Aa0ci6tgDVNOJNM9FhAkT6gUE
bGU3VmOwN2uiGznM2k6Nzav28RdS9qo5mo2E6CHamghOqFI3WnJCTCMDa2mqyCvT
KYXkw+vfNkq+bCP5BruZQr7cyidhZQ7hAV/JCFD1yqE5crno3ub57iuFyEoZin/L
yCDmf/i2f1+D5fN/w/COc8K4F4Sc2lxHqT1YNpvWPyOCktnL06DD76A+lOZtQqjz
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1718143771213345549674597808815346662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 12:52:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 12:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san-005.ceros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20308083606003113353336127809394475454117626011425065259070336031203113593138213179598935958841245869940198523826192508074257431299056247337630869506094959094464109388394006131253319821012632589342423516458915803449269437149035910998569456520446072399881417399245489663155147140894346649208480138438794775156717195125781893930999416968231366485959617867392080829530132714416613501603569265701950727353954439849686939746748641312828377955078023822531157813436145691622739210655368745900075694333857321943546478120343831261288392485132727129978734822795609699070478115588977371269359757151282521509258675934191816340439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-005.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospectus.joinmentera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifescience.macegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelcrossing3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaysavings.kslresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.vesperapismobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanderbiltshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunmaid.purewow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esg-report.pimco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5grvtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marqueeplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgimfixedincome.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmas.lombardinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longform.belfasttelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longform.independent.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooseyourescape.nationalpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersivetravel.nationalpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longform.sundayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.belfasttelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.independent.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.sundayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onechat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestgolfgifts.golfdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.travelzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobeopoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enforcer-x-280.pyronix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal-help-alarm.pyronix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediakit.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pringleschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrmagazine-workplacetrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talkaboutgrief.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f9f613897a2892efda3334eecb4996bd27c5bea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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