*.bettertogether.health

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:ba:71:ee:35:ea:1e:5c:c6:35:ad:f9:f5:d6:75:4c was issued on by GlobalSign nv-sa.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bettertogether.health

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ba:71:ee:35:ea:1e:5c:c6:35:ad:f9:f5:d6:75:4c
Serial Number (int): 2297305996746022390179298502658913612
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3a:81:72:9b:73:bd:42:1f:38:53:a4:8c:cb:44:80:c1:c1:17:87:6d
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): f3:29:d4:bb:39:23:f0:e0:d9:fe:75:9f:de:0a:5c:48:17:5e:ad:28
Fingerprint (sha256): 6b:f2:fa:00:bd:d1:a8:20:cf:22:68:7b:12:89:e5:f3:aa:55:d6:48:cd:56:10:cd:65:4e:52:e6:67:6d:bc:b6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate *.bettertogether.health

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bettertogether.health

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bettertogether.health
*.dlrgroup.com
*.preview.ceros.com
*.stage-preview.ceros.com
2019.pureinsurance.com
ak.bettertogether.health
annualreport.amica.com
awards.moneymarketing.co.uk
betaworks.wsjbarrons.com
buyerdemand.ritchiebros.com
ca.bettertogether.health
ceros.cookmed.co
ceros.mckinsey.com
ceros.seic.com
contentnatives.rhapsodymedia.com
covid19.perceptivemedia.com
digital.citywire.co.uk
discover.brightlark.com
events.mcclatchy.com
experience.coalfire.com
experience.hartmannstudios.com
experience.hollandhart.com
experience.mccarthy.com
experience.rosettastone.com
experiences.moleculardevices.com
explore.averydennison.com
go.e2open.com
go.viavisolutions.com
home.perceptivemedia.com
industrialinsights.castrol.com
innovationcouncil.mccannworldgroup.com
insights.hsf.com
instagram-bio.stanleyblackanddecker.com
interactive.balfourbeatty.com
interactive.paychex.com
la.bettertogether.health
labs.xeim.com
lv.moneymarketing.co.uk
magazine.culturetrip.com
mass-timber.pclbuildings.com
mediakit.localnewsnetwork.ca
medicare.healthfirst.org
moonshot.slalom.com
mt.bettertogether.health
my.aof.com
my.knowledgesuccess.org
or.bettertogether.health
painkiller.vice.com
perspectives.ghd.com
pipe-fab.pclindustrial.com
product.mimecast.com
protocol.techinarbitration.com
prudential.moneymarketing.co.uk
queersbuilt.vice.com
register.thebusinessbriefing.com
resources.stanleysecurity.co.uk
resources.stanleysecuritysolutions.com
service.otiselevator.com
soundsofsolidarity.wsjbarrons.com
tellmemore.pureinsurance.com
thelede.baltimoresun.com
thelede.courant.com
thelede.sunsentinel.com
truthaboutcoronavirus.mccannworldgroup.com
tx.bettertogether.health
verizon.gumgum.com
view.digital-hub.global
view.eagleview.com
view.globalization-partners.com
view.nasco.com
wa.bettertogether.health
webinars.3xlogic.com
www.ambientspace.co.uk
www.bronco-usa.com
www.bupadigital.co.uk
www.cms-digital.law
www.electricdreambus.com
www.hanspringett.com
www.jobsascode.io
www.kubotafsmagazine.com
www.lemans70.com
www.moscow.hsfab.ru
www.puttclub.com
www.revolade-eha.com
www.revolutionizeretail.com
www.stayathomeposters.com
www.supplyny.com
www.upearlytonight.com
www.wsjprintguarantee.com
www2.dailypayevents.com
www4.cramer.com
xp.wired.com
narrative.guidewire.com

Other certificates including the domain name bettertogether.health

(limited to 100 certificates)
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
www.la.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
cpcalendars.qqt.svp.mybluehost.me
ceros2.map.fastly.net
san-004.ceros.com
*.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
*.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com

Certificate

The complete raw certificate details for *.bettertogether.health in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOEDCCDPigAwIBAgIQAbpx7jXqHlzGNa359dZ1TDANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTErMCkGA1UE
AxMiR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMTA1MTMx
OTU3MTlaFw0yMjA2MTQxOTU3MThaMCIxIDAeBgNVBAMMFyouYmV0dGVydG9nZXRo
ZXIuaGVhbHRoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tGhUzq9
xPObCdRIwN+Ufe84nbtU0k5P/0fsQ1zmNxZAKVwDEJNdgFOjDJPxc7ez3Y2ZDy86
JyMTowgGXsdCLvbvaC4I9yDU/3RHfe6TzGPpL+ew496T68q8yW4nJurQ8BmUNyJX
tma3XS6DDBpvNKcxGa8eGcwtKFNbaSvBMJHz6Uij+Kfzgfh02gvD76u89eVHKM0j
VKsMvngPtm3WzTGwYzQPA10+ehigkD1p3oWF7fZksgp5mTs0sYhp4nbL0WnFsFgf
I6QKbIY+Z2J5iDHmA7QZCzl/TaiM05pB0rUIR/FybXPSZOzObhkdrcxWzy6biH9T
ulj3WkgB8il//QIDAQABo4ILDTCCCwkwggk5BgNVHREEggkwMIIJLIIXKi5iZXR0
ZXJ0b2dldGhlci5oZWFsdGiCDiouZGxyZ3JvdXAuY29tghMqLnByZXZpZXcuY2Vy
b3MuY29tghkqLnN0YWdlLXByZXZpZXcuY2Vyb3MuY29tghYyMDE5LnB1cmVpbnN1
cmFuY2UuY29tghhhay5iZXR0ZXJ0b2dldGhlci5oZWFsdGiCFmFubnVhbHJlcG9y
dC5hbWljYS5jb22CG2F3YXJkcy5tb25leW1hcmtldGluZy5jby51a4IYYmV0YXdv
cmtzLndzamJhcnJvbnMuY29tghtidXllcmRlbWFuZC5yaXRjaGllYnJvcy5jb22C
GGNhLmJldHRlcnRvZ2V0aGVyLmhlYWx0aIIQY2Vyb3MuY29va21lZC5jb4ISY2Vy
b3MubWNraW5zZXkuY29tgg5jZXJvcy5zZWljLmNvbYIgY29udGVudG5hdGl2ZXMu
cmhhcHNvZHltZWRpYS5jb22CG2NvdmlkMTkucGVyY2VwdGl2ZW1lZGlhLmNvbYIW
ZGlnaXRhbC5jaXR5d2lyZS5jby51a4IXZGlzY292ZXIuYnJpZ2h0bGFyay5jb22C
FGV2ZW50cy5tY2NsYXRjaHkuY29tghdleHBlcmllbmNlLmNvYWxmaXJlLmNvbYIe
ZXhwZXJpZW5jZS5oYXJ0bWFubnN0dWRpb3MuY29tghpleHBlcmllbmNlLmhvbGxh
bmRoYXJ0LmNvbYIXZXhwZXJpZW5jZS5tY2NhcnRoeS5jb22CG2V4cGVyaWVuY2Uu
cm9zZXR0YXN0b25lLmNvbYIgZXhwZXJpZW5jZXMubW9sZWN1bGFyZGV2aWNlcy5j
b22CGWV4cGxvcmUuYXZlcnlkZW5uaXNvbi5jb22CDWdvLmUyb3Blbi5jb22CFWdv
LnZpYXZpc29sdXRpb25zLmNvbYIYaG9tZS5wZXJjZXB0aXZlbWVkaWEuY29tgh5p
bmR1c3RyaWFsaW5zaWdodHMuY2FzdHJvbC5jb22CJmlubm92YXRpb25jb3VuY2ls
Lm1jY2FubndvcmxkZ3JvdXAuY29tghBpbnNpZ2h0cy5oc2YuY29tgidpbnN0YWdy
YW0tYmlvLnN0YW5sZXlibGFja2FuZGRlY2tlci5jb22CHWludGVyYWN0aXZlLmJh
bGZvdXJiZWF0dHkuY29tghdpbnRlcmFjdGl2ZS5wYXljaGV4LmNvbYIYbGEuYmV0
dGVydG9nZXRoZXIuaGVhbHRogg1sYWJzLnhlaW0uY29tghdsdi5tb25leW1hcmtl
dGluZy5jby51a4IYbWFnYXppbmUuY3VsdHVyZXRyaXAuY29tghxtYXNzLXRpbWJl
ci5wY2xidWlsZGluZ3MuY29tghxtZWRpYWtpdC5sb2NhbG5ld3NuZXR3b3JrLmNh
ghhtZWRpY2FyZS5oZWFsdGhmaXJzdC5vcmeCE21vb25zaG90LnNsYWxvbS5jb22C
GG10LmJldHRlcnRvZ2V0aGVyLmhlYWx0aIIKbXkuYW9mLmNvbYIXbXkua25vd2xl
ZGdlc3VjY2Vzcy5vcmeCGG9yLmJldHRlcnRvZ2V0aGVyLmhlYWx0aIITcGFpbmtp
bGxlci52aWNlLmNvbYIUcGVyc3BlY3RpdmVzLmdoZC5jb22CGnBpcGUtZmFiLnBj
bGluZHVzdHJpYWwuY29tghRwcm9kdWN0Lm1pbWVjYXN0LmNvbYIecHJvdG9jb2wu
dGVjaGluYXJiaXRyYXRpb24uY29tgh9wcnVkZW50aWFsLm1vbmV5bWFya2V0aW5n
LmNvLnVrghRxdWVlcnNidWlsdC52aWNlLmNvbYIgcmVnaXN0ZXIudGhlYnVzaW5l
c3NicmllZmluZy5jb22CH3Jlc291cmNlcy5zdGFubGV5c2VjdXJpdHkuY28udWuC
JnJlc291cmNlcy5zdGFubGV5c2VjdXJpdHlzb2x1dGlvbnMuY29tghhzZXJ2aWNl
Lm90aXNlbGV2YXRvci5jb22CIXNvdW5kc29mc29saWRhcml0eS53c2piYXJyb25z
LmNvbYIcdGVsbG1lbW9yZS5wdXJlaW5zdXJhbmNlLmNvbYIYdGhlbGVkZS5iYWx0
aW1vcmVzdW4uY29tghN0aGVsZWRlLmNvdXJhbnQuY29tghd0aGVsZWRlLnN1bnNl
bnRpbmVsLmNvbYIqdHJ1dGhhYm91dGNvcm9uYXZpcnVzLm1jY2FubndvcmxkZ3Jv
dXAuY29tghh0eC5iZXR0ZXJ0b2dldGhlci5oZWFsdGiCEnZlcml6b24uZ3VtZ3Vt
LmNvbYIXdmlldy5kaWdpdGFsLWh1Yi5nbG9iYWyCEnZpZXcuZWFnbGV2aWV3LmNv
bYIfdmlldy5nbG9iYWxpemF0aW9uLXBhcnRuZXJzLmNvbYIOdmlldy5uYXNjby5j
b22CGHdhLmJldHRlcnRvZ2V0aGVyLmhlYWx0aIIUd2ViaW5hcnMuM3hsb2dpYy5j
b22CFnd3dy5hbWJpZW50c3BhY2UuY28udWuCEnd3dy5icm9uY28tdXNhLmNvbYIV
d3d3LmJ1cGFkaWdpdGFsLmNvLnVrghN3d3cuY21zLWRpZ2l0YWwubGF3ghh3d3cu
ZWxlY3RyaWNkcmVhbWJ1cy5jb22CFHd3dy5oYW5zcHJpbmdldHQuY29tghF3d3cu
am9ic2FzY29kZS5pb4IYd3d3Lmt1Ym90YWZzbWFnYXppbmUuY29tghB3d3cubGVt
YW5zNzAuY29tghN3d3cubW9zY293LmhzZmFiLnJ1ghB3d3cucHV0dGNsdWIuY29t
ghR3d3cucmV2b2xhZGUtZWhhLmNvbYIbd3d3LnJldm9sdXRpb25pemVyZXRhaWwu
Y29tghl3d3cuc3RheWF0aG9tZXBvc3RlcnMuY29tghB3d3cuc3VwcGx5bnkuY29t
ghZ3d3cudXBlYXJseXRvbmlnaHQuY29tghl3d3cud3NqcHJpbnRndWFyYW50ZWUu
Y29tghd3d3cyLmRhaWx5cGF5ZXZlbnRzLmNvbYIPd3d3NC5jcmFtZXIuY29tggx4
cC53aXJlZC5jb22CF25hcnJhdGl2ZS5ndWlkZXdpcmUuY29tMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFDqB
cptzvUIfOFOkjMtEgMHBF4dtMFYGA1UdIARPME0wQQYJKwYBBAGgMgEKMDQwMgYI
KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv
MAgGBmeBDAECATAJBgNVHRMEAjAAMIGaBggrBgEFBQcBAQSBjTCBijA+BggrBgEF
BQcwAYYyaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0
bHNjYTIwMjAwSAYIKwYBBQUHMAKGPGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5j
b20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2EyMDIwLmNydDAfBgNVHSMEGDAWgBRC
bVctTx8md3SmJ2T2gPqPSGj+fDBGBgNVHR8EPzA9MDugOaA3hjVodHRwOi8vY3Js
Lmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIwLmNybDATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPaCB2DHpdtDaQIc
b6Jj9XsHNYt5bH2FLCiPxcDKAudWQZKpS1j6Q/ZJixjj48L70XA7sEgb4VjX/uus
Zve2PiH4rt/QlaNf90a4FxOHrE1qJS6vz89066EorM/tEg6G3x739f7KqOEp52Zw
1rlGH02FMoHQX7aq8Qw9it4A4/nWxbvKadE3SKpxqLFV+9LJygFDvPVy3ijRxFUp
pCb7mkDPNXT7pNoHfLw16PxX9RYU7PNGK1kXMLG+sMQ37J3wirFBUyJ+7f6q+nfv
VZrZ6cQBQn+L6Fg69Yfs3gioQH/C+CUDM72Ub2bOPoE6/wfo3pIBCUTMAuYFkeoW
aP6aYA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tGhUzq9xPObCdRIwN+U
fe84nbtU0k5P/0fsQ1zmNxZAKVwDEJNdgFOjDJPxc7ez3Y2ZDy86JyMTowgGXsdC
LvbvaC4I9yDU/3RHfe6TzGPpL+ew496T68q8yW4nJurQ8BmUNyJXtma3XS6DDBpv
NKcxGa8eGcwtKFNbaSvBMJHz6Uij+Kfzgfh02gvD76u89eVHKM0jVKsMvngPtm3W
zTGwYzQPA10+ehigkD1p3oWF7fZksgp5mTs0sYhp4nbL0WnFsFgfI6QKbIY+Z2J5
iDHmA7QZCzl/TaiM05pB0rUIR/FybXPSZOzObhkdrcxWzy6biH9Tulj3WkgB8il/
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2297305996746022390179298502658913612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 19:57:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 19:57:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bettertogether.health'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27623322975245722972405753982726441343726850102498188798541587717900877284978891270386472320318554971953308067504269605151622449752794813029124301852000821032248905418069444626012981427029350534358852380832656650086821000840952803260632057847622921308466218447483321241097993908799657451856536075274735602647954876678837463751377009387800207593246017778589517313600659665883389184402246146942876996724941167019329311409645355895898971613805540162388233688470417603047772682019738578710142958486193509807784706877005387766923428165470528967543935566960252666652679231349186188516409257229036708389856835459202253684733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2352 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlrgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-preview.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.pureinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport.amica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaworks.wsjbarrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyerdemand.ritchiebros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.cookmed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.mckinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentnatives.rhapsodymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.perceptivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.citywire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.brightlark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mcclatchy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coalfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.hartmannstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.hollandhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.moleculardevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.e2open.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.viavisolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.perceptivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialinsights.castrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcouncil.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.hsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagram-bio.stanleyblackanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.balfourbeatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.paychex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.xeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.culturetrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mass-timber.pclbuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediakit.localnewsnetwork.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicare.healthfirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshot.slalom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.knowledgesuccess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painkiller.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectives.ghd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipe-fab.pclindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.mimecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocol.techinarbitration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prudential.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queersbuilt.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.thebusinessbriefing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stanleysecurity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stanleysecuritysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.otiselevator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundsofsolidarity.wsjbarrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellmemore.pureinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.sunsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthaboutcoronavirus.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tx.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizon.gumgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.eagleview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.globalization-partners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.nasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wa.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.3xlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambientspace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronco-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bupadigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms-digital.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricdreambus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanspringett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsascode.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotafsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemans70.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moscow.hsfab.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puttclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolade-eha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolutionizeretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stayathomeposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplyny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upearlytonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsjprintguarantee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.dailypayevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.cramer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp.wired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narrative.guidewire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a81729b73bd421f3853a48ccb4480c1c117876d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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