imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:1f:2e:70:8b:04:cf:f9:4e:c7:6b:da:d3:85:82:85 was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1f:2e:70:8b:04:cf:f9:4e:c7:6b:da:d3:85:82:85
Serial Number (int): 1491131105819699301056840379568325253
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: dd:96:cc:2a:ac:03:13:20:3a:21:49:e8:f3:61:a9:a3:f9:e9:21:b8
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 3a:88:b6:a1:db:31:16:dd:d1:11:c5:33:bb:b3:7e:b3:f7:4e:7a:3a
Fingerprint (sha256): 72:7e:a6:4d:cc:7c:0f:84:3a:7c:12:b1:f1:55:78:e0:cd:fa:8e:a1:dd:d8:2f:64:02:ff:4e:bc:c9:3d:fd:45

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg-www.sata.com.co
www.satatools.us
dev-www.sata.com.co
dev-www.crescenttool.com.au
*.quackenbushtools.co.uk
stg-www.crescenttool.com
*.clecotools.de
satatools.eu
sata.com.co
*.atgsupplierlink.com
gearwrench.com.au
apextoolgroup.com
atgsupplierlink.com
www.sataferramentas.com.br
sataferramentas.com.br
atgcustomerlink.com
*.clecotools.co.uk
dev-www.gearwrench.com.au
*.crescenttool.com.au
www.sata.com.co
satatools.us
*.apex-tools.com
imperva.com
*.clecotools.com
clecotools.co.uk
dev-www.satatools.eu
stg-www.gearwrench.com
dev-www.crescenttool.com
*.apextoolgroup.com
stg-www.satatools.eu
*.gearwrench.com.au
dev-www.gearwrench.com
quackenbushtools.co.uk
*.satatools.eu
dev-www.satatools.us
clecotools.de
*.atgcustomerlink.com
stg-www.sataferramentas.com.br
*.sataferramentas.com.br
stg-www.satatools.us
stg-www.crescenttool.com.au
stg-www.gearwrench.com.au
apex-tools.com
clecotools.com
crescenttool.com.au

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF93/BFTVqRWcMx84C+N
xz4sQ6CzDnFNmEDEbZ7dMIjGA4+pwW9uXa+r/e0KECXVJE84teKHmekNtSA1XWjb
vPwcVED3KkncFgAPTNpCrTAJf0ejvZeljLr9UJPUs2/8/aPsBwkCI1dvcnUyiTOf
g7+QCSyYI/j1YFwnzKk9IbxopDuhMxVtoZGKwAKFnEhQFPGA8JbhiplG41YmLL9X
tbvDl5KZK/I196kjE1dVkHTYjV9lrW0jhcIZ8leOUHr6oJIVUbwzlo21vm5I/iTS
dMR603aj7I7f7OVw2dkl8umz+m4ZaLmyt2vSJkDTJg0Ri5RDD2oYGytdwAQghYxJ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1491131105819699301056840379568325253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 20:43:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 20:43:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22769972259525778004418057284737066550096080307502880086693154983350880409503706050016482413933391217414967441842700167419693556440399778265557447648342389807588116803414825628707184114928641472289661882130249876195811295913564989396360633723117760784698842124774250048549810676632711761736239550933276920814138333821686432546553218226527898657735031861224084552376788430228552416635256606271410640120948983500735918211187749415726206235353224817733642594628855737010785331935880796390240672751264584599538858425100739864925483989391266368073969311784737446123436880840058819427924133634461695483069652756959383538073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.sata.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satatools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.sata.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.crescenttool.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quackenbushtools.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.crescenttool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clecotools.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satatools.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sata.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atgsupplierlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearwrench.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apextoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atgsupplierlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atgcustomerlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clecotools.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.gearwrench.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crescenttool.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sata.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satatools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apex-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clecotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clecotools.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.satatools.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.gearwrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.crescenttool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apextoolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.satatools.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearwrench.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.gearwrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quackenbushtools.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satatools.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.satatools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clecotools.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atgcustomerlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.sataferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sataferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.satatools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.crescenttool.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.gearwrench.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apex-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clecotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crescenttool.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd96cc2aac0313203a2149e8f361a9a3f9e921b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185acdf88b6000004030047304502210087e847c9ba4c0e41f2161f06d8130568c94d39c60e50001ad955e9d44db63fd8022010a6617a793adee028dbcc65c29b1c5adc0b051137ba5764c8d57ac1e52cb7530076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000185acdf89150000040300473045022100f78ee958284bf026dac4fbce1bf578e3c04690c5d54323ebb3ce14cbfa89a84c022006f9af8b0bc4ff00a779e9437a0b9bdca6d0c209bb772031cd92deead25a235e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185acdf88e30000040300473045022100ab25525512e1584dadec5b6fef2b5e6b4d4582438494f44f78d49a116c41ae1802200902b0ba9ac765aa3d3705e6741a2f965984bfb1bdadb8ef51833382bd50ddcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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