*.maven.io

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:18:c4:24:a1:41:f5:27:84:5e:ab:3f:27:3d:f8:dc was issued on by GlobalSign nv-sa.

With 136 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.maven.io

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:18:c4:24:a1:41:f5:27:84:5e:ab:3f:27:3d:f8:dc
Serial Number (int): 1457821374792742445168864248358369500
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e9:f9:bc:bf:50:d0:58:23:c9:d1:b7:03:0d:12:c2:5d:75:e2:36:be
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 87:f5:83:15:8f:8e:dc:a8:72:f0:8b:ca:9c:d7:42:28:40:a0:60:0c
Fingerprint (sha256): a3:4b:b7:fb:a2:1a:f5:32:a4:79:e2:e5:70:c6:47:9e:a9:d9:c1:af:1f:7d:0b:bd:47:06:65:a6:9c:0e:93:06

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate *.maven.io

136

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
*.si.com
*.sikids.com
*.themaven.net
allhuskers.com
antiquetrader.com
automaven.io
awomanshealth.com
baseballmaven.io
basketballmaven.io
bassmagazine.com
bellatory.com
bio.com
bitcoinmagazine.com
boatersnewswire.com
bringmethenews.com
caloriebee.com
cannabismaven.io
collegesportsmaven.io
dealbreaker.com
defensemaven.io
djbooth.net
earthmaven.io
edm.com
enfuegonow.com
fadeawayworld.com
fadeawayworld.net
familymaven.io
foodmaven.io
footballmaven.io
gamesmaven.io
healthmaven.io
history-origin.prod.saymedia.com
historymaven.io
howtheyplay.com
indiancountrytoday.com
jamiegeller.com
letterpile.com
lifestylemaven.io
marinascats.com
maven.io
mavencorp.io
mavendoctors.io
mavenroundtable.io
mavensports.io
militarytrader.com
mishtalk.com
moneymaven.io
mtonews.com
musicmaven.io
newsmaven.io
numismaticnews.net
petmaven.io
remedygrove.com
sci-techmaven.io
scriptmag.com
si.com
soapboxie.com
sportsillustrated-origin.prod.saymedia.com
stablemanagement.com
stylemaven.io
taskandpurpose.com
tatring.com
thearthritisconnection.com
theindependent.io
theshoegame.com
theskincareedit.com
thespinecommunity.com
thestreet.thestreet.com
todaysmama.com
uat.thestreet.com
uptownmagazine.com
wokeamerica.com
writingmaven.io
www.antiquetrader.com
www.awomanshealth.com
www.bitcoinmagazine.com
www.djbooth.net
www.enfuegonow.com
www.hortmag.com
www.howcast.com
www.indiancountrytoday.com
www.inkedmag.com
www.jewlish.com
www.mediatakeout.com
www.militarytrader.com
www.momtrends.com
www.mtonews.com
www.numismaticnews.net
www.oldcarsweekly.com
www.opposingviews.com
www.organicauthority.com
www.scriptmag.com
www.secondspleasesarah.com
www.si.com
www.thearthritisconnection.com
www.thecurlingnews.com
www.themaven.net
www.theskincareedit.com
www.thespinecommunity.com
www.thestreet.com
www.uptownmagazine.com
www.wrestlingnewsworld.com
www.writersdigest.com
youmemindbody.com
thestreet.com
athlonsports.com
wildcatsdaily.com
www.athlonsports.com
allbruins.com
link.si.com
link.thestreet.com
giantscountry.com
allbengals.com
sikids.com
allsooners.com
cavsnow.com
cavaliersnow.com
*.fastly.maven.io
alllakers.com
www.alllakers.com
boilermakersnow.com
insidetheknights.com
roundtable.io
roundtablecrypto.io
globalcovidsummit.org
www.globalcovidsummit.org
fastbreakonfannation.com
people.thearenagroup.net
www.morningread.com
allbearcats.com
*.qa-fastly.maven.io
subscription.thestreet.com
thehockeynews.com
www.thehockeynews.com
get.si.com

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO6zCCDdOgAwIBAgIQARjEJKFB9SeEXqs/Jz343DANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgSDIgMjAyMTAeFw0yMTEy
MDYyMzE3MjlaFw0yMzAxMDcyMzE3MjhaMBUxEzARBgNVBAMMCioubWF2ZW4uaW8w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWi1NKl+HzA6wjupeSLI0
TLwmnpaZMWysyMQ8jsMtbu144W1zifRILMOPvAJpdCJ7/C+dGZQ5I05Vdk7bbJAB
N4MPMA2kW4jPVcIjQOsH1wE9azvQAJxKYQAkdfOSPG1PBTh8ye71Flpw6Y0ahOep
ogDOBXsOFvx5Fdf63bkZpACXS9wnDVTjKuJRCn0ckWhNBsmLnrNMxE0ICgwB2Dn7
GgUlvOxD5/GEsFRSG3QQSgygbCDk2UBoda+fd40vc4rXKqhqg/QHyxxofPENLU1F
IpxI6WdWq65NmEyQMVqVrC5bePFE+BYtrn8WvAjI63HoiwzQwxPfUl9wYGW+A7TR
AgMBAAGjggvyMIIL7jCCChQGA1UdEQSCCgswggoHggoqLm1hdmVuLmlvgggqLnNp
LmNvbYIMKi5zaWtpZHMuY29tgg4qLnRoZW1hdmVuLm5ldIIOYWxsaHVza2Vycy5j
b22CEWFudGlxdWV0cmFkZXIuY29tggxhdXRvbWF2ZW4uaW+CEWF3b21hbnNoZWFs
dGguY29tghBiYXNlYmFsbG1hdmVuLmlvghJiYXNrZXRiYWxsbWF2ZW4uaW+CEGJh
c3NtYWdhemluZS5jb22CDWJlbGxhdG9yeS5jb22CB2Jpby5jb22CE2JpdGNvaW5t
YWdhemluZS5jb22CE2JvYXRlcnNuZXdzd2lyZS5jb22CEmJyaW5nbWV0aGVuZXdz
LmNvbYIOY2Fsb3JpZWJlZS5jb22CEGNhbm5hYmlzbWF2ZW4uaW+CFWNvbGxlZ2Vz
cG9ydHNtYXZlbi5pb4IPZGVhbGJyZWFrZXIuY29tgg9kZWZlbnNlbWF2ZW4uaW+C
C2RqYm9vdGgubmV0gg1lYXJ0aG1hdmVuLmlvggdlZG0uY29tgg5lbmZ1ZWdvbm93
LmNvbYIRZmFkZWF3YXl3b3JsZC5jb22CEWZhZGVhd2F5d29ybGQubmV0gg5mYW1p
bHltYXZlbi5pb4IMZm9vZG1hdmVuLmlvghBmb290YmFsbG1hdmVuLmlvgg1nYW1l
c21hdmVuLmlvgg5oZWFsdGhtYXZlbi5pb4IgaGlzdG9yeS1vcmlnaW4ucHJvZC5z
YXltZWRpYS5jb22CD2hpc3RvcnltYXZlbi5pb4IPaG93dGhleXBsYXkuY29tghZp
bmRpYW5jb3VudHJ5dG9kYXkuY29tgg9qYW1pZWdlbGxlci5jb22CDmxldHRlcnBp
bGUuY29tghFsaWZlc3R5bGVtYXZlbi5pb4IPbWFyaW5hc2NhdHMuY29tgghtYXZl
bi5pb4IMbWF2ZW5jb3JwLmlvgg9tYXZlbmRvY3RvcnMuaW+CEm1hdmVucm91bmR0
YWJsZS5pb4IObWF2ZW5zcG9ydHMuaW+CEm1pbGl0YXJ5dHJhZGVyLmNvbYIMbWlz
aHRhbGsuY29tgg1tb25leW1hdmVuLmlvggttdG9uZXdzLmNvbYINbXVzaWNtYXZl
bi5pb4IMbmV3c21hdmVuLmlvghJudW1pc21hdGljbmV3cy5uZXSCC3BldG1hdmVu
Lmlvgg9yZW1lZHlncm92ZS5jb22CEHNjaS10ZWNobWF2ZW4uaW+CDXNjcmlwdG1h
Zy5jb22CBnNpLmNvbYINc29hcGJveGllLmNvbYIqc3BvcnRzaWxsdXN0cmF0ZWQt
b3JpZ2luLnByb2Quc2F5bWVkaWEuY29tghRzdGFibGVtYW5hZ2VtZW50LmNvbYIN
c3R5bGVtYXZlbi5pb4ISdGFza2FuZHB1cnBvc2UuY29tggt0YXRyaW5nLmNvbYIa
dGhlYXJ0aHJpdGlzY29ubmVjdGlvbi5jb22CEXRoZWluZGVwZW5kZW50Lmlvgg90
aGVzaG9lZ2FtZS5jb22CE3RoZXNraW5jYXJlZWRpdC5jb22CFXRoZXNwaW5lY29t
bXVuaXR5LmNvbYIXdGhlc3RyZWV0LnRoZXN0cmVldC5jb22CDnRvZGF5c21hbWEu
Y29tghF1YXQudGhlc3RyZWV0LmNvbYISdXB0b3dubWFnYXppbmUuY29tgg93b2tl
YW1lcmljYS5jb22CD3dyaXRpbmdtYXZlbi5pb4IVd3d3LmFudGlxdWV0cmFkZXIu
Y29tghV3d3cuYXdvbWFuc2hlYWx0aC5jb22CF3d3dy5iaXRjb2lubWFnYXppbmUu
Y29tgg93d3cuZGpib290aC5uZXSCEnd3dy5lbmZ1ZWdvbm93LmNvbYIPd3d3Lmhv
cnRtYWcuY29tgg93d3cuaG93Y2FzdC5jb22CGnd3dy5pbmRpYW5jb3VudHJ5dG9k
YXkuY29tghB3d3cuaW5rZWRtYWcuY29tgg93d3cuamV3bGlzaC5jb22CFHd3dy5t
ZWRpYXRha2VvdXQuY29tghZ3d3cubWlsaXRhcnl0cmFkZXIuY29tghF3d3cubW9t
dHJlbmRzLmNvbYIPd3d3Lm10b25ld3MuY29tghZ3d3cubnVtaXNtYXRpY25ld3Mu
bmV0ghV3d3cub2xkY2Fyc3dlZWtseS5jb22CFXd3dy5vcHBvc2luZ3ZpZXdzLmNv
bYIYd3d3Lm9yZ2FuaWNhdXRob3JpdHkuY29tghF3d3cuc2NyaXB0bWFnLmNvbYIa
d3d3LnNlY29uZHNwbGVhc2VzYXJhaC5jb22CCnd3dy5zaS5jb22CHnd3dy50aGVh
cnRocml0aXNjb25uZWN0aW9uLmNvbYIWd3d3LnRoZWN1cmxpbmduZXdzLmNvbYIQ
d3d3LnRoZW1hdmVuLm5ldIIXd3d3LnRoZXNraW5jYXJlZWRpdC5jb22CGXd3dy50
aGVzcGluZWNvbW11bml0eS5jb22CEXd3dy50aGVzdHJlZXQuY29tghZ3d3cudXB0
b3dubWFnYXppbmUuY29tghp3d3cud3Jlc3RsaW5nbmV3c3dvcmxkLmNvbYIVd3d3
LndyaXRlcnNkaWdlc3QuY29tghF5b3VtZW1pbmRib2R5LmNvbYINdGhlc3RyZWV0
LmNvbYIQYXRobG9uc3BvcnRzLmNvbYIRd2lsZGNhdHNkYWlseS5jb22CFHd3dy5h
dGhsb25zcG9ydHMuY29tgg1hbGxicnVpbnMuY29tggtsaW5rLnNpLmNvbYISbGlu
ay50aGVzdHJlZXQuY29tghFnaWFudHNjb3VudHJ5LmNvbYIOYWxsYmVuZ2Fscy5j
b22CCnNpa2lkcy5jb22CDmFsbHNvb25lcnMuY29tggtjYXZzbm93LmNvbYIQY2F2
YWxpZXJzbm93LmNvbYIRKi5mYXN0bHkubWF2ZW4uaW+CDWFsbGxha2Vycy5jb22C
EXd3dy5hbGxsYWtlcnMuY29tghNib2lsZXJtYWtlcnNub3cuY29tghRpbnNpZGV0
aGVrbmlnaHRzLmNvbYINcm91bmR0YWJsZS5pb4ITcm91bmR0YWJsZWNyeXB0by5p
b4IVZ2xvYmFsY292aWRzdW1taXQub3Jnghl3d3cuZ2xvYmFsY292aWRzdW1taXQu
b3JnghhmYXN0YnJlYWtvbmZhbm5hdGlvbi5jb22CGHBlb3BsZS50aGVhcmVuYWdy
b3VwLm5ldIITd3d3Lm1vcm5pbmdyZWFkLmNvbYIPYWxsYmVhcmNhdHMuY29tghQq
LnFhLWZhc3RseS5tYXZlbi5pb4Iac3Vic2NyaXB0aW9uLnRoZXN0cmVldC5jb22C
EXRoZWhvY2tleW5ld3MuY29tghV3d3cudGhlaG9ja2V5bmV3cy5jb22CCmdldC5z
aS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAdBgNVHQ4EFgQU6fm8v1DQWCPJ0bcDDRLCXXXiNr4wVwYDVR0gBFAwTjAI
BgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3
dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggr
BgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYWgyMjAyMTBKBggrBgEFBQcwAoY+aHR0
cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNj
YWgyMjAyMS5jcnQwHwYDVR0jBBgwFoAUKjS5qvq/PIjxR/LSEni+xeWqsGkwSAYD
VR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0
bGFzcjNkdnRsc2NhaDIyMDIxLmNybDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAssDhFi66WLViATcFq+gfcFL0cJkaS/YZE13BKYdyr7dD
2qfvVW1lEjWF9IBF/8GhwVsmjPzTIqOOpMwlfledmYuWb/osqtf2ymcIsMj6dCwt
WLJKu13zo93C7LWAQ0J81ycUZvogvwesC5LD+G8RvIDo6OzWEDcUCBPFrbMUR/x/
dwe4x7M7Blcb4eMZY7O85XMPA7eyJ/USOO/71wkm8bmEGyUPF6QjOr6HFIUsnhTK
pT2a5zuHVKoUQijBNLiO91WPjB8Y7OBcL/nR30GkjS5DKLWUm5IDtsC5JKNsdtVL
XKxpucCDBs3ToTdoVGtB7UEutUFWKrdbAXhsxyUVZA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFotTSpfh8wOsI7qXkiy
NEy8Jp6WmTFsrMjEPI7DLW7teOFtc4n0SCzDj7wCaXQie/wvnRmUOSNOVXZO22yQ
ATeDDzANpFuIz1XCI0DrB9cBPWs70ACcSmEAJHXzkjxtTwU4fMnu9RZacOmNGoTn
qaIAzgV7Dhb8eRXX+t25GaQAl0vcJw1U4yriUQp9HJFoTQbJi56zTMRNCAoMAdg5
+xoFJbzsQ+fxhLBUUht0EEoMoGwg5NlAaHWvn3eNL3OK1yqoaoP0B8scaHzxDS1N
RSKcSOlnVquuTZhMkDFalawuW3jxRPgWLa5/FrwIyOtx6IsM0MMT31JfcGBlvgO0
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1457821374792742445168864248358369500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 23:17:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:17:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22262409589704382571104735316932057513652486486889121496965810266295932597994480055928093880353222318247026437854531129728561040420402432573360654706686676842138680966521492426563921181675577092059852348543274682238344009604358971645791278151615725832436364534890997525608683779806202731003397125288911740941096256997764434670367199666478955129716290316825228914867502823326900663283990768929362862240969939709023248169604124075302871215835853372652333683555176493795802204224954421849105128689758314585818514050349995878617179341058830995484647149694794748488087504498350677468911018551580070263731109276421923779793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2571 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhuskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatersnewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringmethenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloriebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabismaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtheyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiegeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letterpile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinascats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavencorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavendoctors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenroundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavensports.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remedygrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sci-techmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsillustrated-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablemanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskandpurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindependent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshoegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writingmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkedmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jewlish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediatakeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momtrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldcarsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opposingviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondspleasesarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecurlingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestlingnewsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmemindbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcatsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantscountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbengals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsooners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavaliersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilermakersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidetheknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtablecrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcovidsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalcovidsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbreakonfannation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.thearenagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbearcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa-fastly.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehockeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehockeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.si.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9f9bcbf50d05823c9d1b7030d12c25d75e236be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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