san-005.ceros.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:ef:db:c8:a3:32:a9:79:11:8f:e0:4a:c5:28:fc:c7 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-005.ceros.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ef:db:c8:a3:32:a9:79:11:8f:e0:4a:c5:28:fc:c7
Serial Number (int): 2574644688817745449930051021611531463
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1e:49:90:a5:0b:18:33:d5:11:9e:7f:3b:4d:c2:fe:9e:21:11:db:2b
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): a2:d0:51:6a:de:70:c0:c4:c1:6c:ac:99:cd:bc:c8:b5:a0:e3:e7:d5
Fingerprint (sha256): 5b:96:7f:16:d1:9f:22:b4:05:d1:09:77:c2:f7:31:10:9f:9e:a3:01:bf:3c:07:a1:5e:c6:b0:45:b7:3d:a2:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate san-005.ceros.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-005.ceros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-005.ceros.com
prospectus.joinmentera.com
lifescience.macegroup.com
www.levelcrossing3.com
holidaysavings.kslresorts.com
weddings.vesperapismobeach.com
www.vanderbiltshop.com
experience.bv.com
sunmaid.purewow.com
esg-report.pimco.com
www.5grvtv.com
lgimfixedincome.citywirecontent.com
xmas.lombardinternational.com
longform.independent.ie
chooseyourescape.nationalpost.com
immersivetravel.nationalpost.com
longform.sundayworld.com
native.independent.ie
native.sundayworld.com
onechat.aiglife.co.uk
bestgolfgifts.golfdigest.com
solutions.travelzoo.com
www.adobeopoly.com
enforcer-x-280.pyronix.uk
personal-help-alarm.pyronix.uk
mediakit.thehill.com
www.pringleschallenge.com
hrmagazine-workplacetrends.com
www.talkaboutgrief.co.uk
vanguard-active.citywirecontent.com
mpl.wunderkind.co
project1mm.wunderkind.co
view.mayerbrown.com
mycausemycleats.detroitlions.com
knowledge.staffmarkgroup.com
motion.ravemobilesafety.com
2023.risk-outlook.com
about.cambridgeassociates.com
interactive.cripps.co.uk
view.navigatecorp.com
reports.doverfuelingsolutions.com
reports.openlending.com
saintsandsinners.dma.org
sales.lexisnexis.com
www.nyugiving.com
experience.elakesidefoodservice.com
experience.elakeside.com
view.4beckerfarm.com
voting.cointelegraph.com
projects.90min.com
www.metromeditation.dk
www.metromeditation.no
www.metromeditation.se
studioid.cfodive.com
www.mediafeed.us
www.experiencenorthend.com
learn.minervasurgical.com
weddings.kimptonhotels.com
synovus.marsdenmarketing.com
ourdifference.savills.com
twobillion.trupanion.com
getcreativelinks.usatoday.com
interactive.nrucfc.coop
thesource.nmrk.com
interact.ivans.com
ccp.qa.columbiathreadneedleus.com
tesco.grantthornton.co.uk
2022.vistaequitypartners.com
www.westlakenorth.com
www.celebrationmed.com
www.kubotalifestyle.com
meetingroommountainsluxembourg.lombardinternational.com
engage.hexcel.com
opspowerhour.employbridge.com
www.becorcoran.com
savills.digital-hub.global
insights.parexel.com
www.krusewoodscorporatepark.com
ses.smiths.com
ccp.columbiathreadneedleus.com
www.ccp.columbiathreadneedleus.com
info.napariverinsurance.com
www.hrmagazine-employeedevelopmenttool.com
experience.wates.co.uk
holocaust-survivors.hollywoodreporter.com
se.lombardinternational.com
digitalmagazines.unicredit.eu
my.ihglobaltelehealth.com
www.quickturnengine.com
excellence.insurity.com
adsalesconference.wbd.com
truthaboutneweurope.mccannworldgroup.com

Other certificates including the domain name ceros.com

(limited to 100 certificates)
tracking.duckvideo.co
san-006.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
new.ceros.com
san-001.ceros.com
ceros2.map.fastly.net
pilot.ceros.com
lucistatus.paradox.ai
san-001.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
lucistatus.paradox.ai
demo.ceros.com
san-003.ceros.com
san-001.ceros.com
h3.shared.global.fastly.net
san-001.ceros.com
agency.ibex.co
san-005.ceros.com
san-003.ceros.com
h3.shared.global.fastly.net
san-002.ceros.com
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1.map.fastly.net
h3.shared.global.fastly.net
san-001.ceros.com
ceros1.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
san-004.ceros.com
login-test.auth.ceros.com
san-002.ceros.com
m.ssl.fastly.net
san-003.ceros.com
san-001.ceros.com
m.ssl.fastly.net
san-004.ceros.com
demo.ceros.com
san-003.ceros.com
m.ssl.fastly.net
lucistatus.paradox.ai
san-005.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
*.pinterestceros.com
m.ssl.fastly.net
san-004.ceros.com
view.ceros.com
view.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
view.ceros.com
san-001.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-002.ceros.com
san-004.ceros.com
m.ssl.fastly.net
ceros.map.fastly.net
san-005.ceros.com
san-003.ceros.com
cheetah.apstra.com
m.ssl.fastly.net
m.ssl.fastly.net
new.ceros.com
san-004.ceros.com
discover.newswire.com
ceros1.map.fastly.net
m.ssl.fastly.net
view.ceros.com
san-001.ceros.com
san-001.ceros.com
stage-auth0.ceros.com
san-006.ceros.com
san-002.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
lucistatus.paradox.ai
san-004.ceros.com
san-006.ceros.com
*.ceros.com
h3.shared.global.fastly.net
outreach.ceros.com
h3.shared.global.fastly.net
san-003.ceros.com
ceros1.map.fastly.net
ceros.map.fastly.net
lucistatus.paradox.ai
san-003.ceros.com
san-004.ceros.com
m.ssl.fastly.net
san-002.ceros.com
san-003.ceros.com
dns-vetting1-jeffg-noah.map.fastly.net
m.ssl.fastly.net
ceros1.map.fastly.net
san-004.ceros.com
view.ceros.com
secure0033.hubspot.com
*.dlrgroup.com
san-005.ceros.com

Certificate

The complete raw certificate details for san-005.ceros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuzreL1W0oIuZH1UZ8FC
IAYvhrEHXAsBPjavHWpFpsPecbNnwOSnckKBV6kz7sABwXjg7rAfFDOV7E2y9C5a
21YV1yiU9fGc5XfM8JA0YblFIgIAY/cA4ZEJEi/KjkbfMIqVry1o9myht+LDy19e
yvQCN7ar7Xazx2KhPkAoosGoPEPHkWOhIX1t3OLa59hSVUwTetW0aCqp5W0ohFCW
fGFDCaOmtlbo2Ewb17WUuWAOYOfx8I9hMQguO8xrKSA4k0lFxwOUN/h76R7xiLZh
xX1Oz/ZJYE2WYtHnvNHgosxlmzLcqbQaMpBTOpP+7U+cgOoboEZAPq7DB40+tOz4
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2574644688817745449930051021611531463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 18:44:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 18:44:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san-005.ceros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23092201016966822270997910722487401759841931491535902829810983227601823895704655584877121474294489620691401328758512888668354579940345415579924765370032508917259721389989422885248149179879718792447761240132630122923163304748490700846865594851269369680084237790934850867013397327872968509842878110863498921303121108376827089315549233582282592912505676978171733418071074286297988034238848513002884747453364532208200956479594463992057763247953780926458264757854601965213826486678709683398721379154362087988223807852133912101333476389346331945622426000585291941555847687264427317530055732893496512420001357117515778291779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2501 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-005.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospectus.joinmentera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifescience.macegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelcrossing3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaysavings.kslresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.vesperapismobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanderbiltshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.bv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunmaid.purewow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esg-report.pimco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5grvtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgimfixedincome.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmas.lombardinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longform.independent.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooseyourescape.nationalpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersivetravel.nationalpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longform.sundayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.independent.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.sundayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onechat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestgolfgifts.golfdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.travelzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobeopoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enforcer-x-280.pyronix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal-help-alarm.pyronix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediakit.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pringleschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrmagazine-workplacetrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talkaboutgrief.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguard-active.citywirecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpl.wunderkind.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project1mm.wunderkind.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.mayerbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycausemycleats.detroitlions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.staffmarkgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motion.ravemobilesafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023.risk-outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.cambridgeassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.cripps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.navigatecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.doverfuelingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.openlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsandsinners.dma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyugiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elakesidefoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elakeside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.4beckerfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voting.cointelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.90min.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metromeditation.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metromeditation.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metromeditation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioid.cfodive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediafeed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencenorthend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.minervasurgical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.kimptonhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synovus.marsdenmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourdifference.savills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twobillion.trupanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcreativelinks.usatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.nrucfc.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesource.nmrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interact.ivans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccp.qa.columbiathreadneedleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesco.grantthornton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022.vistaequitypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlakenorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebrationmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotalifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingroommountainsluxembourg.lombardinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.hexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opspowerhour.employbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.becorcoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savills.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krusewoodscorporatepark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.smiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccp.columbiathreadneedleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccp.columbiathreadneedleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.napariverinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrmagazine-employeedevelopmenttool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.wates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holocaust-survivors.hollywoodreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.lombardinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmagazines.unicredit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ihglobaltelehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickturnengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellence.insurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsalesconference.wbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthaboutneweurope.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e4990a50b1833d5119e7f3b4dc2fe9e2111db2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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