*.maven.io

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:b4:01:d0:75:46:8b:ff:b2:e9:55:7d:e7:81:4b:7b was issued on by GlobalSign nv-sa.

With 133 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.maven.io

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:b4:01:d0:75:46:8b:ff:b2:e9:55:7d:e7:81:4b:7b
Serial Number (int): 2263878228483623546915123971150138235
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3b:68:1b:65:4f:f0:da:ca:a0:84:fe:98:12:9e:9f:99:d4:d6:6d:9c
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 04:24:57:0a:62:ca:18:81:ac:60:68:5c:06:a7:b7:34:df:07:fc:91
Fingerprint (sha256): 9d:80:ed:f7:2a:4c:5b:32:72:82:4b:48:0b:0b:0c:f4:19:b3:73:8e:c0:4b:de:df:9a:4f:e2:e3:55:a6:b5:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate *.maven.io

133

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
*.si.com
*.themaven.net
allhuskers.com
antiquetrader.com
automaven.io
awomanshealth.com
basketballmaven.io
bellatory.com
bitcoinmagazine.com
boatersnewswire.com
bringmethenews.com
caloriebee.com
cannabismaven.io
collegesportsmaven.io
dealbreaker.com
defensemaven.io
earthmaven.io
edm.com
enfuegonow.com
fadeawayworld.net
familymaven.io
foodmaven.io
footballmaven.io
gamesmaven.io
healthmaven.io
history-origin.prod.saymedia.com
historymaven.io
howtheyplay.com
jamiegeller.com
letterpile.com
lifestylemaven.io
marinascats.com
maven.io
mavencorp.io
mavendoctors.io
mavenroundtable.io
mavensports.io
militarytrader.com
moneymaven.io
newsmaven.io
numismaticnews.net
petmaven.io
remedygrove.com
sci-techmaven.io
scriptmag.com
si.com
soapboxie.com
sportsillustrated-origin.prod.saymedia.com
stylemaven.io
tatring.com
thearthritisconnection.com
theindependent.io
theskincareedit.com
thespinecommunity.com
thestreet.thestreet.com
todaysmama.com
uat.thestreet.com
uptownmagazine.com
wokeamerica.com
writingmaven.io
www.antiquetrader.com
www.awomanshealth.com
www.bitcoinmagazine.com
www.enfuegonow.com
www.howcast.com
www.militarytrader.com
www.momtrends.com
www.numismaticnews.net
www.oldcarsweekly.com
www.opposingviews.com
www.scriptmag.com
www.secondspleasesarah.com
www.thearthritisconnection.com
www.thecurlingnews.com
www.theskincareedit.com
www.thespinecommunity.com
www.thestreet.com
www.uptownmagazine.com
www.wrestlingnewsworld.com
www.writersdigest.com
youmemindbody.com
thestreet.com
athlonsports.com
wildcatsdaily.com
www.athlonsports.com
allbruins.com
link.thestreet.com
giantscountry.com
allbengals.com
allsooners.com
cavsnow.com
cavaliersnow.com
*.fastly.maven.io
alllakers.com
www.alllakers.com
boilermakersnow.com
insidetheknights.com
roundtable.io
roundtablecrypto.io
globalcovidsummit.org
www.globalcovidsummit.org
fastbreakonfannation.com
people.thearenagroup.net
www.morningread.com
allbearcats.com
*.qa-fastly.maven.io
subscription.thestreet.com
thehockeynews.com
www.thehockeynews.com
huskiesreport.com
metaledgemag.com
www.metaledgemag.com
sportsnews.charlotteobserver.com
sportsnews.kansascity.com
sportsnews.miamiherald.com
sportsnews.sacbee.com
sportsnews.star-telegram.com
topstocks.thestreet.com
www.roundtablecrypto.io
*.qa2.thestreet.com
www.fadeawayworld.net
watchthis.com
www.watchthis.com
lamag.com
www.lamag.com
cripto247.com
www.cripto247.com
orangecoast.com
www.orangecoast.com
writersdigest.com
theglowmemo.com
www.theglowmemo.com

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPEjCCDfqgAwIBAgIQAbQB0HVGi/+y6VV954FLezANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMjAeFw0yNDA2
MDMyMTQyNThaFw0yNTA3MDUyMTQyNTdaMBUxEzARBgNVBAMMCioubWF2ZW4uaW8w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57X2Bex3nJBrsgfiSRnWu
jIq5zepRmA36dVusgv73NbWRt6dQmgSRzixbA5KfaF64VLTe/NjjCuWNMWkiWjLL
NKn2+apeLV+lQr+fFBhquX9gugd2vb42M1y33BCVpAHG+p1Bev0Lp3hGEfWhc6j/
JZCImfrUm/zEZOeMvgIm4DVh85OpNkkg5Os3YP98m+k/Bwr04RVR7IJOe8MNwmB9
NV6fKsWNiMS1nHYMJp2qWNaTvvOoSX/cSCDAHrdqJkkJK7SBKoOsWELLondRvVay
GDVLfY0JrNICdUIegf6LwB9pAw0dmx1AWrlGYuFjjRQXd2FEteKPvYwT0T7fNccL
AgMBAAGjggwZMIIMFTCCCjsGA1UdEQSCCjIwggouggoqLm1hdmVuLmlvgggqLnNp
LmNvbYIOKi50aGVtYXZlbi5uZXSCDmFsbGh1c2tlcnMuY29tghFhbnRpcXVldHJh
ZGVyLmNvbYIMYXV0b21hdmVuLmlvghFhd29tYW5zaGVhbHRoLmNvbYISYmFza2V0
YmFsbG1hdmVuLmlvgg1iZWxsYXRvcnkuY29tghNiaXRjb2lubWFnYXppbmUuY29t
ghNib2F0ZXJzbmV3c3dpcmUuY29tghJicmluZ21ldGhlbmV3cy5jb22CDmNhbG9y
aWViZWUuY29tghBjYW5uYWJpc21hdmVuLmlvghVjb2xsZWdlc3BvcnRzbWF2ZW4u
aW+CD2RlYWxicmVha2VyLmNvbYIPZGVmZW5zZW1hdmVuLmlvgg1lYXJ0aG1hdmVu
LmlvggdlZG0uY29tgg5lbmZ1ZWdvbm93LmNvbYIRZmFkZWF3YXl3b3JsZC5uZXSC
DmZhbWlseW1hdmVuLmlvggxmb29kbWF2ZW4uaW+CEGZvb3RiYWxsbWF2ZW4uaW+C
DWdhbWVzbWF2ZW4uaW+CDmhlYWx0aG1hdmVuLmlvgiBoaXN0b3J5LW9yaWdpbi5w
cm9kLnNheW1lZGlhLmNvbYIPaGlzdG9yeW1hdmVuLmlvgg9ob3d0aGV5cGxheS5j
b22CD2phbWllZ2VsbGVyLmNvbYIObGV0dGVycGlsZS5jb22CEWxpZmVzdHlsZW1h
dmVuLmlvgg9tYXJpbmFzY2F0cy5jb22CCG1hdmVuLmlvggxtYXZlbmNvcnAuaW+C
D21hdmVuZG9jdG9ycy5pb4ISbWF2ZW5yb3VuZHRhYmxlLmlvgg5tYXZlbnNwb3J0
cy5pb4ISbWlsaXRhcnl0cmFkZXIuY29tgg1tb25leW1hdmVuLmlvggxuZXdzbWF2
ZW4uaW+CEm51bWlzbWF0aWNuZXdzLm5ldIILcGV0bWF2ZW4uaW+CD3JlbWVkeWdy
b3ZlLmNvbYIQc2NpLXRlY2htYXZlbi5pb4INc2NyaXB0bWFnLmNvbYIGc2kuY29t
gg1zb2FwYm94aWUuY29tgipzcG9ydHNpbGx1c3RyYXRlZC1vcmlnaW4ucHJvZC5z
YXltZWRpYS5jb22CDXN0eWxlbWF2ZW4uaW+CC3RhdHJpbmcuY29tghp0aGVhcnRo
cml0aXNjb25uZWN0aW9uLmNvbYIRdGhlaW5kZXBlbmRlbnQuaW+CE3RoZXNraW5j
YXJlZWRpdC5jb22CFXRoZXNwaW5lY29tbXVuaXR5LmNvbYIXdGhlc3RyZWV0LnRo
ZXN0cmVldC5jb22CDnRvZGF5c21hbWEuY29tghF1YXQudGhlc3RyZWV0LmNvbYIS
dXB0b3dubWFnYXppbmUuY29tgg93b2tlYW1lcmljYS5jb22CD3dyaXRpbmdtYXZl
bi5pb4IVd3d3LmFudGlxdWV0cmFkZXIuY29tghV3d3cuYXdvbWFuc2hlYWx0aC5j
b22CF3d3dy5iaXRjb2lubWFnYXppbmUuY29tghJ3d3cuZW5mdWVnb25vdy5jb22C
D3d3dy5ob3djYXN0LmNvbYIWd3d3Lm1pbGl0YXJ5dHJhZGVyLmNvbYIRd3d3Lm1v
bXRyZW5kcy5jb22CFnd3dy5udW1pc21hdGljbmV3cy5uZXSCFXd3dy5vbGRjYXJz
d2Vla2x5LmNvbYIVd3d3Lm9wcG9zaW5ndmlld3MuY29tghF3d3cuc2NyaXB0bWFn
LmNvbYIad3d3LnNlY29uZHNwbGVhc2VzYXJhaC5jb22CHnd3dy50aGVhcnRocml0
aXNjb25uZWN0aW9uLmNvbYIWd3d3LnRoZWN1cmxpbmduZXdzLmNvbYIXd3d3LnRo
ZXNraW5jYXJlZWRpdC5jb22CGXd3dy50aGVzcGluZWNvbW11bml0eS5jb22CEXd3
dy50aGVzdHJlZXQuY29tghZ3d3cudXB0b3dubWFnYXppbmUuY29tghp3d3cud3Jl
c3RsaW5nbmV3c3dvcmxkLmNvbYIVd3d3LndyaXRlcnNkaWdlc3QuY29tghF5b3Vt
ZW1pbmRib2R5LmNvbYINdGhlc3RyZWV0LmNvbYIQYXRobG9uc3BvcnRzLmNvbYIR
d2lsZGNhdHNkYWlseS5jb22CFHd3dy5hdGhsb25zcG9ydHMuY29tgg1hbGxicnVp
bnMuY29tghJsaW5rLnRoZXN0cmVldC5jb22CEWdpYW50c2NvdW50cnkuY29tgg5h
bGxiZW5nYWxzLmNvbYIOYWxsc29vbmVycy5jb22CC2NhdnNub3cuY29tghBjYXZh
bGllcnNub3cuY29tghEqLmZhc3RseS5tYXZlbi5pb4INYWxsbGFrZXJzLmNvbYIR
d3d3LmFsbGxha2Vycy5jb22CE2JvaWxlcm1ha2Vyc25vdy5jb22CFGluc2lkZXRo
ZWtuaWdodHMuY29tgg1yb3VuZHRhYmxlLmlvghNyb3VuZHRhYmxlY3J5cHRvLmlv
ghVnbG9iYWxjb3ZpZHN1bW1pdC5vcmeCGXd3dy5nbG9iYWxjb3ZpZHN1bW1pdC5v
cmeCGGZhc3RicmVha29uZmFubmF0aW9uLmNvbYIYcGVvcGxlLnRoZWFyZW5hZ3Jv
dXAubmV0ghN3d3cubW9ybmluZ3JlYWQuY29tgg9hbGxiZWFyY2F0cy5jb22CFCou
cWEtZmFzdGx5Lm1hdmVuLmlvghpzdWJzY3JpcHRpb24udGhlc3RyZWV0LmNvbYIR
dGhlaG9ja2V5bmV3cy5jb22CFXd3dy50aGVob2NrZXluZXdzLmNvbYIRaHVza2ll
c3JlcG9ydC5jb22CEG1ldGFsZWRnZW1hZy5jb22CFHd3dy5tZXRhbGVkZ2VtYWcu
Y29tgiBzcG9ydHNuZXdzLmNoYXJsb3R0ZW9ic2VydmVyLmNvbYIZc3BvcnRzbmV3
cy5rYW5zYXNjaXR5LmNvbYIac3BvcnRzbmV3cy5taWFtaWhlcmFsZC5jb22CFXNw
b3J0c25ld3Muc2FjYmVlLmNvbYIcc3BvcnRzbmV3cy5zdGFyLXRlbGVncmFtLmNv
bYIXdG9wc3RvY2tzLnRoZXN0cmVldC5jb22CF3d3dy5yb3VuZHRhYmxlY3J5cHRv
LmlvghMqLnFhMi50aGVzdHJlZXQuY29tghV3d3cuZmFkZWF3YXl3b3JsZC5uZXSC
DXdhdGNodGhpcy5jb22CEXd3dy53YXRjaHRoaXMuY29tgglsYW1hZy5jb22CDXd3
dy5sYW1hZy5jb22CDWNyaXB0bzI0Ny5jb22CEXd3dy5jcmlwdG8yNDcuY29tgg9v
cmFuZ2Vjb2FzdC5jb22CE3d3dy5vcmFuZ2Vjb2FzdC5jb22CEXdyaXRlcnNkaWdl
c3QuY29tgg90aGVnbG93bWVtby5jb22CE3d3dy50aGVnbG93bWVtby5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQUO2gbZU/w2sqghP6YEp6fmdTWbZwwVwYDVR0gBFAwTjAIBgZngQwBAgEw
QgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSB
kTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2Ev
Z3NhdGxhc3IzZHZ0bHNjYTIwMjRxMjBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRxMi5j
cnQwHwYDVR0jBBgwFoAUrw0C0MMbnlj47zdiLecDXZ5BSoowSAYDVR0fBEEwPzA9
oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRs
c2NhMjAyNHEyLmNybDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAMlAav8689+tk6nmKpHCoy05aSjgNP4dfn5KK9hBYi8oykS/w6j7+G3QO
+eegNQ6XITM1bPgIANdw/Miq1vpU70Y5QMu1t7vdOYEmCDlpiE0AG9fiK7Ln3tjX
qZJqu9B4IZfG6PIB7D6NosMGep3SRhSv8RYbyr6Tv7M6/pElD/H7dP5AKF21TGCu
ZB1yrZ09XziIUoDaj+WnaZSGcSOa7u3pjNB8l/3U6ovm0KMkV0n1YyuLhl9Uz1hl
qp8vOVGOx43jN3tSt7hQsheY95NefmekFj9BjYTt4jdR0d+CeV/CkaqBE3Yp+G8I
+dp8X4DlNwRY07JUqiU8zDYjWd34aw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue19gXsd5yQa7IH4kkZ1
royKuc3qUZgN+nVbrIL+9zW1kbenUJoEkc4sWwOSn2heuFS03vzY4wrljTFpIloy
yzSp9vmqXi1fpUK/nxQYarl/YLoHdr2+NjNct9wQlaQBxvqdQXr9C6d4RhH1oXOo
/yWQiJn61Jv8xGTnjL4CJuA1YfOTqTZJIOTrN2D/fJvpPwcK9OEVUeyCTnvDDcJg
fTVenyrFjYjEtZx2DCadqljWk77zqEl/3EggwB63aiZJCSu0gSqDrFhCy6J3Ub1W
shg1S32NCazSAnVCHoH+i8AfaQMNHZsdQFq5RmLhY40UF3dhRLXij72ME9E+3zXH
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2263878228483623546915123971150138235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:42:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 21:42:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23471197229213479701167820565827971706847678298215035503346285192686601159393251764507946306111026452987544535391985737270884751753639627489357344318451771744578424495212406385437849455230167659054077332897995773937990345122541848929037920314938419657622004644648708874523047268471884473066729788715269428257822944152600205575202047407425336074788265783291519011727071231158721381375808507039586069855031133199894927466857227137839533635428707972320123895761645323143020963356658608169649532477895076677946316221747596856992920116825633130254080947952319196665701397709670157709825933024152101277581804259803942733579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhuskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatersnewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringmethenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloriebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabismaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtheyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiegeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letterpile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinascats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavencorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavendoctors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenroundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavensports.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remedygrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sci-techmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsillustrated-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindependent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writingmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momtrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldcarsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opposingviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondspleasesarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecurlingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestlingnewsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmemindbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcatsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantscountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbengals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsooners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavaliersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilermakersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidetheknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtablecrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcovidsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalcovidsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbreakonfannation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.thearenagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa-fastly.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehockeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehockeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huskiesreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaledgemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaledgemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnews.charlotteobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnews.kansascity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnews.miamiherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnews.sacbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnews.star-telegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topstocks.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundtablecrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa2.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadeawayworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchthis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchthis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cripto247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cripto247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangecoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangecoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writersdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theglowmemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theglowmemo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b681b654ff0dacaa084fe98129e9f99d4d66d9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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