imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:21:57:a0:2d:13:78:93:e8:1d:82:84:31:79:15:f2 was issued on by GlobalSign nv-sa.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:21:57:a0:2d:13:78:93:e8:1d:82:84:31:79:15:f2
Serial Number (int): 1502351052208449607174409152104044018
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2b:13:fe:3c:ef:db:09:2f:0b:04:e4:05:eb:ad:e2:11:09:33:d2:02
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 97:9e:7e:29:01:48:f2:3d:b1:6e:42:b8:72:fa:51:ac:49:2d:ab:b9
Fingerprint (sha256): 72:36:7f:d4:7f:93:ff:5f:a5:06:0b:5a:22:13:14:27:26:44:ee:5e:82:8f:7b:1b:fe:25:62:15:d1:d4:3d:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.solistica.com.br
femsa-analistas.com
solkos.com.mx
ses.femsa.com
*.femsaventures.com
coleccionfemsa.com
compartefemsa.com
admindsocial.femsa.com
*.coleccionfemsa.com
*.solkos.com.mx
opiniondeservicio.femsa.com
console.solkos.com.mx
unimbera.com.br
lojaimbera.com.br
pro-cut.us
*.solisticaone.com
*.femsafoundation.org
femsa.com
laboral.femsa.com
benefitplus.femsa.com
climaorganizacional.femsa.com
*.femsa.com
femsafoundation.org
*.lojaimbera.com.br
*.etr.repare.com.mx
gestionindicadores.femsa.com
anspacfemsa.femsa.com
*.agv.com.br
careers.femsa.com
alpuntovision360.com
*.unimbera.com.br
cscmakpsp02.femsa.com
donativos.femsa.com
informeanual.femsa.com
www.pro-cut.us
imperva.com
sca.solkos.com.mx
*.alpuntovision360.com
sil.femsa.com
*.xpertal-bridgefe.com.mx
xpertal-bridgefe.com.mx
cscmakpsd01.femsa.com
*.compartefemsa.com
fiori.efemsa.com
*.femsa-analistas.com
*.informeanual.femsa.com
solisticaone.com
*.solistica.com
ric2.femsa.com
femsaventures.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG8pnAgm+d09kcf2+TLN
CFTU+y33g5x0ZtUc6Wf4+K3VB9ljlsc0qEsP2lROQlx2adxNTkeWFs2OPhKiAwMk
iYNapOisOlHJxe75Z5LWbUIe+Rs5grbrHnCdlfUdmQtaTe/OTJTprWY2d1bLNBJM
HwyV7r8rPrQRCcrNL3MPLCSbI2We+J4hDMz4NDzHxfutuEgE+WJwcC2MasfQw7Nr
FTVjRzOS2nyVMUkK41g2IEyroK2ICdUP8oAYmF3AfnyekoXwg+LIqyoQ2VNfRIK3
8N4suy+Z/JHUHvsCrCexQrfHEtanKNb9TD36SUqI335GxR6fkzb1aXmeizE2vJ2g
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1502351052208449607174409152104044018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 01:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 01:21:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22777711183969126213064915330381484173059260963764319401329003736236792989737550923467627675565704012744568912898660204606374266477747584737468517528140988496905923424310189811227368110196418437867859358065355560865249352370000753926292501274965722728726143036213036363664943252217514382027076728475619017879874531048253313304984887924752808262869005901221817227361600733217481122119641943728693294792427828900735585502321120105382459336756945546830393867518004935701738603405019930989375015440629880949596006960882253331941245592296910326271498464714048931218653013988614835699920123402936000124385285360485073264821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solistica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsa-analistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsaventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleccionfemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compartefemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admindsocial.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coleccionfemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiniondeservicio.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-cut.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solisticaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laboral.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climaorganizacional.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojaimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etr.repare.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionindicadores.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anspacfemsa.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpuntovision360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscmakpsp02.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donativos.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informeanual.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro-cut.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sca.solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpuntovision360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sil.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpertal-bridgefe.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpertal-bridgefe.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscmakpsd01.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compartefemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiori.efemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsa-analistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informeanual.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solisticaone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solistica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ric2.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsaventures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b13fe3cefdb092f0b04e405ebade2110933d202
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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