imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:a0:87:99:65:70:34:af:e8:e7:2d:b2:37:c9:94:1e was issued on by GlobalSign nv-sa.

With 130 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a0:87:99:65:70:34:af:e8:e7:2d:b2:37:c9:94:1e
Serial Number (int): 2162745771749480443192016473479025694
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f6:d6:6c:8d:55:cd:38:c9:1a:a0:1e:76:55:56:e1:92:56:56:2a:26
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): d6:23:19:43:4e:ec:86:dd:6c:fc:f2:45:2c:0b:36:33:fd:e2:1a:0e
Fingerprint (sha256): 4f:f1:a9:12:52:a3:c5:b8:1e:7c:0c:51:db:1f:c5:53:77:e4:aa:49:83:7d:cd:ac:f5:8d:83:53:3c:4c:0b:c0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

130

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zurichintermediary.co.uk
www.rapportpreelectoral.gouv.qc.ca
*.basdk12.org
*.alm.co.il
jeri4life.com
*.insightec.com
investor360.top
zurichinvest.ch
*.zurichconnect.zurich.com
api.redgirasol.com
reservations.themishawaka.com
bingobilly.com
elconfidencial.com
www.chrissoentpiet.com
*.finalgalaxy.com
*.jennison.com
pakkettenversturen.nl
*.farmershawaii.com
*.elconfidencial.com
appdroid.pro
*.robby.pro
www.firstnations.bank
*.buchwissen.com
www.gebg.org
finalgalaxy.com
*.bingobilly.com
*.pakkettenversturen.nl
*.noticel.com
*.zurich.es
*.investor360.top
deaddrop.jadeworld.com
hoccollaboration.ca
hilarymorgan.com
governmentbodies.premiers.qld.gov.au
conciergepayment.reward360.us
*.minfarmtech.io
*.premiers.qld.gov.au
totg.scfta.org
newhomesguidecharleston.com
wellscreen.health
buchwissen.com
www.abelaandco.com
www.bluestoneps.com
www.hoccollaboration.ca
*.djo.securevues.com
*.cortina-group.com
feelgoodworld.org
www.phoenixhomeguru.com
*.truckeservices.com
verkaufskarriere.ch
www.samelet.com
*.partner.ga
imperva.com
www.feelgoodworld.org
www.wellscreen.health
osroa.org
qa.neb.ca
*.new.incaptest.co
appdirect.com
service.criskco.com
daynurseries.co.uk
mimshak.com
gebg.org
samelet.com
*.appdroid.pro
bluestoneps.com
www.sprucingupmamahood.com
www.uppercornerhockey.com
autocompleteplus.com
alm.co.il
abelaandco.com
uppercornerhockey.com
we.westent.com
*.bonusvorsorge.at
www.pre-electionreport.gouv.qc.ca
www.osroa.org
*.appdirect.com
www.a1adriverimprovementclinics.com
phoenixhomeguru.com
*.zurichcorp.ru
*.nestlebaby.ru
nextsaude.com.br
firstnations.bank
test.fortifydata.com
robby.pro
*.crl.nestle.com
*.synchronoss.com
www.robbinsbecher.com
*.nextsaude.com.br
chrissoentpiet.com
*.newhomesguidecharleston.com
*.universal-music.co.jp
situsnetwork.com
altnet.link
webprod.leasingandfinance.co.nz
power.honda.co.il
a1adriverimprovementclinics.com
jennison.com
noticel.com
*.altnet.link
sprucingupmamahood.com
*.verkaufskarriere.ch
www.jeri4life.com
magash24.bechirot.gov.il
lucelec.com
pickup.harveynorman.ie
truckeservices.com
*.3ss.hays.com.au
altnet.cloud
*.zurichinvest.ch
www.autocompleteplus.com
*.cr.k12.ia.us
sfpiprod.tempo.co.il
*.zurich.de
partner.ga
*.mimshak.com
*.situsnetwork.com
zurichcorp.ru
*.altnet.cloud
www.chicagoairbnblaundry.com
insightec.com
shop.edensprings.co.uk
sp.ss-1004.com
chicagoairbnblaundry.com
robbinsbecher.com
www.lucelec.com
*.amwins.com
synchronoss.com
*.hilarymorgan.com
*.daynurseries.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO9DCCDdygAwIBAgIQAaCHmWVwNK/o5y2yN8mUHjANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgSDIgMjAyMTAeFw0yMTA5
MTMxNjQ3NDJaFw0yMjAzMTUwNzQyMThaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohYWguL6yW9LlQU8kYcD
pB3UlqOTngrm0ldeHM002mFT6XHEnVQeYDwq5LMVeAb5qICdRwVAsAhJ8X6FMXwv
cZ5qHlLRAdYUOVsGdXyk7sLJ4CSq6vPsFcBrk9A6IF8zH7o4XNu3nrkXVEXrkG8O
3g6LTkWAPblJwUfc00ul6/82G6Xo6QwfuTpsSZLMuXH142gFa/aDkL+96JP1e8oG
sO3dkpS5UZ9tUozUt1gVrPy7T/V+RNBgm5J5iTWn631dP5V6GTeOtP+dXXZ/Zl9x
ZgSSWGzPG6F5Aa5S5VyEeyizeiQHARg8nYYlZJdc+LzrW6sIkh32DE7FluEcbu56
HQIDAQABo4IL+jCCC/YwggocBgNVHREEggoTMIIKD4IaKi56dXJpY2hpbnRlcm1l
ZGlhcnkuY28udWuCInd3dy5yYXBwb3J0cHJlZWxlY3RvcmFsLmdvdXYucWMuY2GC
DSouYmFzZGsxMi5vcmeCCyouYWxtLmNvLmlsgg1qZXJpNGxpZmUuY29tgg8qLmlu
c2lnaHRlYy5jb22CD2ludmVzdG9yMzYwLnRvcIIPenVyaWNoaW52ZXN0LmNoghoq
Lnp1cmljaGNvbm5lY3QuenVyaWNoLmNvbYISYXBpLnJlZGdpcmFzb2wuY29tgh1y
ZXNlcnZhdGlvbnMudGhlbWlzaGF3YWthLmNvbYIOYmluZ29iaWxseS5jb22CEmVs
Y29uZmlkZW5jaWFsLmNvbYIWd3d3LmNocmlzc29lbnRwaWV0LmNvbYIRKi5maW5h
bGdhbGF4eS5jb22CDiouamVubmlzb24uY29tghVwYWtrZXR0ZW52ZXJzdHVyZW4u
bmyCEyouZmFybWVyc2hhd2FpaS5jb22CFCouZWxjb25maWRlbmNpYWwuY29tggxh
cHBkcm9pZC5wcm+CCyoucm9iYnkucHJvghV3d3cuZmlyc3RuYXRpb25zLmJhbmuC
ECouYnVjaHdpc3Nlbi5jb22CDHd3dy5nZWJnLm9yZ4IPZmluYWxnYWxheHkuY29t
ghAqLmJpbmdvYmlsbHkuY29tghcqLnBha2tldHRlbnZlcnN0dXJlbi5ubIINKi5u
b3RpY2VsLmNvbYILKi56dXJpY2guZXOCESouaW52ZXN0b3IzNjAudG9wghZkZWFk
ZHJvcC5qYWRld29ybGQuY29tghNob2Njb2xsYWJvcmF0aW9uLmNhghBoaWxhcnlt
b3JnYW4uY29tgiRnb3Zlcm5tZW50Ym9kaWVzLnByZW1pZXJzLnFsZC5nb3YuYXWC
HWNvbmNpZXJnZXBheW1lbnQucmV3YXJkMzYwLnVzghAqLm1pbmZhcm10ZWNoLmlv
ghUqLnByZW1pZXJzLnFsZC5nb3YuYXWCDnRvdGcuc2NmdGEub3JnghtuZXdob21l
c2d1aWRlY2hhcmxlc3Rvbi5jb22CEXdlbGxzY3JlZW4uaGVhbHRogg5idWNod2lz
c2VuLmNvbYISd3d3LmFiZWxhYW5kY28uY29tghN3d3cuYmx1ZXN0b25lcHMuY29t
ghd3d3cuaG9jY29sbGFib3JhdGlvbi5jYYIUKi5kam8uc2VjdXJldnVlcy5jb22C
EyouY29ydGluYS1ncm91cC5jb22CEWZlZWxnb29kd29ybGQub3Jnghd3d3cucGhv
ZW5peGhvbWVndXJ1LmNvbYIUKi50cnVja2VzZXJ2aWNlcy5jb22CE3ZlcmthdWZz
a2FycmllcmUuY2iCD3d3dy5zYW1lbGV0LmNvbYIMKi5wYXJ0bmVyLmdhggtpbXBl
cnZhLmNvbYIVd3d3LmZlZWxnb29kd29ybGQub3JnghV3d3cud2VsbHNjcmVlbi5o
ZWFsdGiCCW9zcm9hLm9yZ4IJcWEubmViLmNhghIqLm5ldy5pbmNhcHRlc3QuY2+C
DWFwcGRpcmVjdC5jb22CE3NlcnZpY2UuY3Jpc2tjby5jb22CEmRheW51cnNlcmll
cy5jby51a4ILbWltc2hhay5jb22CCGdlYmcub3JnggtzYW1lbGV0LmNvbYIOKi5h
cHBkcm9pZC5wcm+CD2JsdWVzdG9uZXBzLmNvbYIad3d3LnNwcnVjaW5ndXBtYW1h
aG9vZC5jb22CGXd3dy51cHBlcmNvcm5lcmhvY2tleS5jb22CFGF1dG9jb21wbGV0
ZXBsdXMuY29tgglhbG0uY28uaWyCDmFiZWxhYW5kY28uY29tghV1cHBlcmNvcm5l
cmhvY2tleS5jb22CDndlLndlc3RlbnQuY29tghIqLmJvbnVzdm9yc29yZ2UuYXSC
IXd3dy5wcmUtZWxlY3Rpb25yZXBvcnQuZ291di5xYy5jYYINd3d3Lm9zcm9hLm9y
Z4IPKi5hcHBkaXJlY3QuY29tgiN3d3cuYTFhZHJpdmVyaW1wcm92ZW1lbnRjbGlu
aWNzLmNvbYITcGhvZW5peGhvbWVndXJ1LmNvbYIPKi56dXJpY2hjb3JwLnJ1gg8q
Lm5lc3RsZWJhYnkucnWCEG5leHRzYXVkZS5jb20uYnKCEWZpcnN0bmF0aW9ucy5i
YW5rghR0ZXN0LmZvcnRpZnlkYXRhLmNvbYIJcm9iYnkucHJvghAqLmNybC5uZXN0
bGUuY29tghEqLnN5bmNocm9ub3NzLmNvbYIVd3d3LnJvYmJpbnNiZWNoZXIuY29t
ghIqLm5leHRzYXVkZS5jb20uYnKCEmNocmlzc29lbnRwaWV0LmNvbYIdKi5uZXdo
b21lc2d1aWRlY2hhcmxlc3Rvbi5jb22CFyoudW5pdmVyc2FsLW11c2ljLmNvLmpw
ghBzaXR1c25ldHdvcmsuY29tggthbHRuZXQubGlua4Ifd2VicHJvZC5sZWFzaW5n
YW5kZmluYW5jZS5jby5ueoIRcG93ZXIuaG9uZGEuY28uaWyCH2ExYWRyaXZlcmlt
cHJvdmVtZW50Y2xpbmljcy5jb22CDGplbm5pc29uLmNvbYILbm90aWNlbC5jb22C
DSouYWx0bmV0LmxpbmuCFnNwcnVjaW5ndXBtYW1haG9vZC5jb22CFSoudmVya2F1
ZnNrYXJyaWVyZS5jaIIRd3d3Lmplcmk0bGlmZS5jb22CGG1hZ2FzaDI0LmJlY2hp
cm90Lmdvdi5pbIILbHVjZWxlYy5jb22CFnBpY2t1cC5oYXJ2ZXlub3JtYW4uaWWC
EnRydWNrZXNlcnZpY2VzLmNvbYIRKi4zc3MuaGF5cy5jb20uYXWCDGFsdG5ldC5j
bG91ZIIRKi56dXJpY2hpbnZlc3QuY2iCGHd3dy5hdXRvY29tcGxldGVwbHVzLmNv
bYIOKi5jci5rMTIuaWEudXOCFHNmcGlwcm9kLnRlbXBvLmNvLmlsggsqLnp1cmlj
aC5kZYIKcGFydG5lci5nYYINKi5taW1zaGFrLmNvbYISKi5zaXR1c25ldHdvcmsu
Y29tgg16dXJpY2hjb3JwLnJ1gg4qLmFsdG5ldC5jbG91ZIIcd3d3LmNoaWNhZ29h
aXJibmJsYXVuZHJ5LmNvbYINaW5zaWdodGVjLmNvbYIWc2hvcC5lZGVuc3ByaW5n
cy5jby51a4IOc3Auc3MtMTAwNC5jb22CGGNoaWNhZ29haXJibmJsYXVuZHJ5LmNv
bYIRcm9iYmluc2JlY2hlci5jb22CD3d3dy5sdWNlbGVjLmNvbYIMKi5hbXdpbnMu
Y29tgg9zeW5jaHJvbm9zcy5jb22CEiouaGlsYXJ5bW9yZ2FuLmNvbYIUKi5kYXlu
dXJzZXJpZXMuY28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU9tZsjVXNOMkaoB52VVbhklZWKiYwVwYD
VR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZo
dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8E
AjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYWgyMjAyMTBKBggrBgEF
BQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxh
c3IzZHZ0bHNjYWgyMjAyMS5jcnQwHwYDVR0jBBgwFoAUKjS5qvq/PIjxR/LSEni+
xeWqsGkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNv
bS9jYS9nc2F0bGFzcjNkdnRsc2NhaDIyMDIxLmNybDATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwDIFSEtq/DYNMS51AOBLpqfO4yzV9yX
9UiLCcAeHDfSrzxhp1JmSLTDcidm7OyRCvmpQCBD77hsZ16Q48g4bmpcgKw9iVU5
K+Yxqpwy8IhfoXpK90jFdP60Ly+9JPw511/VtDt33yPZC0pIL4RVmHTGUBCbV2X1
vxKzE6fVfVLybR4wgrendZpksKKbrzVlWAMIsnIlLCSbUcxQCQh+8hG/iu8ZrqlQ
73XLpq1NUGT0wkHtHMHjxI758zrGcwRUyOWsl55ZA/A5FaNwSWA2Sv0O+AC+tec7
VaemURwGyzdlGMGLy/d3wzeR02Z1JYUL9UyeEWpcVd4g0nKgjP4LOw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohYWguL6yW9LlQU8kYcD
pB3UlqOTngrm0ldeHM002mFT6XHEnVQeYDwq5LMVeAb5qICdRwVAsAhJ8X6FMXwv
cZ5qHlLRAdYUOVsGdXyk7sLJ4CSq6vPsFcBrk9A6IF8zH7o4XNu3nrkXVEXrkG8O
3g6LTkWAPblJwUfc00ul6/82G6Xo6QwfuTpsSZLMuXH142gFa/aDkL+96JP1e8oG
sO3dkpS5UZ9tUozUt1gVrPy7T/V+RNBgm5J5iTWn631dP5V6GTeOtP+dXXZ/Zl9x
ZgSSWGzPG6F5Aa5S5VyEeyizeiQHARg8nYYlZJdc+LzrW6sIkh32DE7FluEcbu56
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2162745771749480443192016473479025694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-13 16:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 07:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20461497371037224082853941974763069334842511569608718895989797461814843841385175018988605210359373389658171760755586842348575523207103375625175113479753077127393763506874302630473801733446775071241869413104659579654436189469637860318534941916531619655739266581831240087848116610579336987964667038600088850760311608512481214231055444801377278545338940925365969194405462570830790997259163241607325025779076015655754958398624875302024775190949801190702729539699111758601840275011138345073771925647189550460050802968866008465866627162971860450773285523889491837828470681708375849636986515144887281330981832734078300748317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2579 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichintermediary.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapportpreelectoral.gouv.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alm.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeri4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insightec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor360.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichinvest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichconnect.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.redgirasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.themishawaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingobilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elconfidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrissoentpiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finalgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakkettenversturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elconfidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdroid.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robby.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstnations.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buchwissen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gebg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bingobilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakkettenversturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noticel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investor360.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deaddrop.jadeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoccollaboration.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilarymorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governmentbodies.premiers.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conciergepayment.reward360.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minfarmtech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiers.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totg.scfta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomesguidecharleston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellscreen.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchwissen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abelaandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluestoneps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoccollaboration.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djo.securevues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortina-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feelgoodworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixhomeguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truckeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verkaufskarriere.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samelet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partner.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feelgoodworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellscreen.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osroa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.neb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new.incaptest.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimshak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samelet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appdroid.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestoneps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprucingupmamahood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uppercornerhockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocompleteplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alm.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abelaandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppercornerhockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we.westent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonusvorsorge.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-electionreport.gouv.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osroa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a1adriverimprovementclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixhomeguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichcorp.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestlebaby.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextsaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstnations.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.fortifydata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robby.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crl.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synchronoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsbecher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextsaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrissoentpiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newhomesguidecharleston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universal-music.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altnet.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webprod.leasingandfinance.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'power.honda.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1adriverimprovementclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altnet.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucingupmamahood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verkaufskarriere.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeri4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magash24.bechirot.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickup.harveynorman.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3ss.hays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altnet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichinvest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocompleteplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfpiprod.tempo.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimshak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.situsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichcorp.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altnet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagoairbnblaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.edensprings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ss-1004.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagoairbnblaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbinsbecher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilarymorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daynurseries.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6d66c8d55cd38c91aa01e765556e19256562a26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b00c815212dabf0d834c4b9d403812e9a9f3b8cb357dc97f5488b09c01e1c37d2af3c61a7526648b4c3722766ecec910af9a9402043efb86c675e90e3c8386e6a5c80ac3d8955392be631aa9c32f0885fa17a4af748c574feb42f2fbd24fc39d75fd5b43b77df23d90b4a482f84559874c650109b5765f5bf12b313a7d57d52f26d1e3082b7a7759a64b0a29baf3565580308b272252c249b51cc5009087ef211bf8aef19aea950ef75cba6ad4d5064f4c241ed1cc1e3c48ef9f33ac6730454c8e5ac979e5903f03915a3704960364afd0ef800beb5e73b55a7a6511c06cb376518c18bcbf777c33791d3667525850bf54c9e116a5c55de20d272a08cfe0b3b