imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:84:e6:3b:23:4e:fc:64:49:da:d5:a3:71:a9:7c:66 was issued on by GlobalSign nv-sa.

With 178 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:84:e6:3b:23:4e:fc:64:49:da:d5:a3:71:a9:7c:66
Serial Number (int): 2019280820709404789690168272824663142
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cc:67:43:6f:d6:88:f0:6e:90:8b:fe:fe:d1:aa:bd:48:01:4f:b4:1c
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 93:05:89:dc:bf:98:4c:87:07:04:8e:ec:c7:c6:f0:39:27:2e:d4:8d
Fingerprint (sha256): 4e:25:2b:15:14:0f:ec:3e:bf:bf:f0:d8:32:d1:f8:f6:d0:fd:0c:c8:5f:01:1c:8f:a9:b9:0d:b8:24:00:5f:92

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

178

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.snapplerefund.com
test.cropriskservices.com
www.servicenetsecure.com
layahealthcare.ie
*.aigportal.de
*.uat.aiglife.co.uk
api.aig.com
*.americanhome.co.jp
www.servicenethvacregistration.com
dev.pci.api.aig.com
*.aiglossandtheft.com
*.layahealthcare.ie
matrixdirect.com
*.aigdirect.com
mobilemail2.validusholdings.com
app.aiglife.co.uk
layalifeinsurance.ie
sponsorfit.valic.com
www.aigtheftandloss.com
techmark.co.jp
stage.pci.api.aig.com
*.aigdirectdigital.com
beta-m.cropriskservices.com
*.aig.co.jp
aiguswarranty.com
serviceplancenter.com
*.matrixdirect.com
view.myretirementmanager.com
www.agsourcetrac.com
integration04.layalifeinsurance.ie
*.valic.com
dev.api.aig.com
americangeneraltermlife.com
hdhvacwarranty.com
*.cropriskservices.com
app.uat.aiglife.co.uk
uat.aiglife.co.uk
www-443.aig.co.jp
test.comfortsureplan.com
test.mechanicalcontractorschoice.com
comfortsureplan.com
mail.validusholdings.com
*.dmp.aig.com
americanhome-morph.jp
myplan.myretirementmanager.com
www-1000.aig.com
integration03.layalifeinsurance.ie
mutual-aid.vfis.com
app.it1.aiglife.co.uk
it1.aiglife.co.uk
*.aig.com.hk
perf.api.aig.com
mobilemail3.validusholdings.com
cvm.uat.aiglife.co.uk
*.comfortpromise.com
demo-m.cropriskservices.com
*.aglife.com
*.hdhvacwarranty.com
*.wwiprate.com
*.agla.americangeneral.com
*.layalifeinsurance.ie
st2.aiglife.co.uk
*.hip8api.aig.eu
www.mycomfortshield.com
app.st1.aiglife.co.uk
mbl.aiu.co.jp
stage.api.aig.com
cg.cropriskservices.com
*.aig.com.mx
*.group.aiglife.co.uk
qa.api.aig.com
www.techmark.co.jp
*.aig.com.my
climateshieldcomplete.com
st3.aiglife.co.uk
*.aig.com
esign.cropriskservices.com
servicenet.com
www.aiguswarranty.com
imperva.com
st1.aiglife.co.uk
www2.aig.co.jp
*.groupprs.aiglife.co.uk
aigcorporate.com
qa.pci.api.aig.com
servicenethvacregistration.com
webservices.servicenetsecure.com
aigdirectdigital.com
www-401.aigseguros.com.br
vfis.com
aigtheftandloss.com
app.st2.aiglife.co.uk
test.climateshieldcomplete.com
agsourcetrac.com
www-176.aiginsurance.com
www.serviceplancenter.com
*.www.aiglife.co.uk
b2b.groupprs.aiglife.co.uk
servicenetsecure.com
50years.vfis.com
www.mechanicalcontractorschoice.com
m.cropriskservices.com
www-510.aig.co.jp
pci.api.aig.com
contractorspreferred.com
integration04.layahealthcare.ie
ure.groupprs.aiglife.co.uk
www.vfis.com
*.uat.aigdirect.com
www.servicenet.com
test-m.cropriskservices.com
test.servicenetsecure.com
nonprod-connector-secure.api.aig.com
www.contractorspreferred.com
mobile.aiglife.co.uk
live.api.aig.com
test.mycomfortshield.com
app.sta.aiglife.co.uk
integration03.layahealthcare.ie
*.snapplerefund.com
qa.aigtheftandloss.com
*.aig.com.ec
test.servicenethvacregistration.com
test.servicenet.com
perf.pci.api.aig.com
mechanicalcontractorschoice.com
*.www-502.aig.co.jp
cvm.sta.aiglife.co.uk
api.serviceplancenter.com
www-502.aig.co.jp
login.valic.com
snapplerefund.com
www5.fujikasai.co.jp
aigdirect.com
assessments.group.aiglife.co.uk
groups.valic.com
mycomfortshield.com
preprod.layahealthcare.ie
*.aigcorporate.com
demo-sponsorfit.valic.com
sta.aiglife.co.uk
www-434.aig.co.jp
*.aiglife.co.uk
uw.sta.aiglife.co.uk
group.aiglife.co.uk
*.americanhome-morph.jp
*.talbotuw.com
demo.aiglife.co.uk
*.yourserviceplan.com
uw.uat.aiglife.co.uk
demo.valic.com
test.aiguswarranty.com
test.serviceplancenter.com
*.hip12api.aig.com
build-m.cropriskservices.com
aigportal.de
comfortpromise.com
gps.valic.com
www-465.aig.co.jp
www.climateshieldcomplete.com
uat.pci.api.aig.com
claims.mycomfortshield.com
www.comfortsureplan.com
app.demo.aiglife.co.uk
*.aig.com.br
fts.aiglife.co.uk
*.aig.com.sg
my.valic.com
uat.api.aig.com
portal.aiglife.co.uk
rma.cropriskservices.com
*.developers.aig.com
qa.webservices.servicenetsecure.com
test.contractorspreferred.com
groupprs.aiglife.co.uk
aiglossandtheft.com
*.cloud.api.aig.com
www.americangeneraltermlife.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl9Ulrs2uF9H6tlTNxba
skHPMed/rifo9ot2bP18a1kXM+kb6toAumSEhPzuhlZWJRgTzJdAvxkb8WGjYh58
lG8WptynszxVMu3OCVp4UKOvtbErOwG7f231LunSEZw+ftDZs8+miarFUVMdsKTw
gcslLpadaL83hyPxGSaPEkwwceJqcYE3PC1ENzab6wuD2VxXgpQSJrBDK1VqNZWq
P+Gq8MlTqnh9iDqH5yOfLCh6K1HC+BBQHvnPrcD8NHI7051n+Q+oQbB1pG7u2x22
4+GWOFYxr8MVDQ4SLIHVLQ6ds9WDHeGvVEKZjC2BelWc4m/JM/Z2DAa1VxF6K3Va
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2019280820709404789690168272824663142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 19:58:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 19:58:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23022380688435215220419236569505874856988166569258955973352061504012207564120521499342489755221814205921520676932482542435045907821432351923263880712175729958514696832165386225824178411689308321257080893032058149958506756400140468088590143494135660552155433593973942437535152985308387408836702456304204527728095631378318558281536106367579589759851719029541927691611127439552976848264199111271213107989425295400369380853611320857126641341242454091625101322755210656546893261688923667267061553689375085674052683738486456272018695985830988170834987553927112816014457836237055637747990308133991641019188881041941161401059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4015 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemail2.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorfit.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration04.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-443.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-1000.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration03.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutual-aid.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.it1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemail3.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvm.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwiprate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agla.americangeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st2.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip8api.aig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbl.aiu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st3.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-401.aigseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st2.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-176.aiginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50years.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-510.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration04.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ure.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-connector-secure.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration03.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvm.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.fujikasai.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessments.group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-sponsorfit.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-434.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uw.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talbotuw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uw.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip12api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-465.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.demo.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fts.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rma.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developers.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc67436fd688f06e908bfefed1aabd48014fb41c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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