*.bettertogether.health

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:d6:49:bd:13:cc:ef:02:c3:fc:ff:7e:de:1a:ec:2d was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bettertogether.health

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d6:49:bd:13:cc:ef:02:c3:fc:ff:7e:de:1a:ec:2d
Serial Number (int): 2441875119663115503722364705804315693
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: da:5b:24:a9:d2:f3:6d:e9:99:f5:80:de:23:eb:2c:f8:d5:30:a0:d6
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 9c:2f:0c:d4:02:35:f5:24:19:d6:0b:fb:a0:60:6f:ae:bb:91:54:15
Fingerprint (sha256): ba:f3:12:24:7d:ac:80:76:0b:64:87:70:eb:6d:8c:9d:7e:8d:21:08:78:1b:6c:5b:6f:4b:7d:77:51:3e:d9:25

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate *.bettertogether.health

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bettertogether.health

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bettertogether.health
*.dlrgroup.com
*.preview.ceros.com
*.stage-preview.ceros.com
2019.pureinsurance.com
ak.bettertogether.health
annualreport.amica.com
awards.moneymarketing.co.uk
betaworks.wsjbarrons.com
buyerdemand.ritchiebros.com
ca.bettertogether.health
ceros.cookmed.co
ceros.mckinsey.com
ceros.seic.com
contentnatives.rhapsodymedia.com
covid19.perceptivemedia.com
digital.citywire.co.uk
discover.brightlark.com
events.mcclatchy.com
experience.coalfire.com
experience.hartmannstudios.com
experience.hollandhart.com
experience.mccarthy.com
experience.rosettastone.com
experiences.moleculardevices.com
explore.averydennison.com
go.e2open.com
go.viavisolutions.com
home.perceptivemedia.com
industrialinsights.castrol.com
innovationcouncil.mccannworldgroup.com
insights.hsf.com
instagram-bio.stanleyblackanddecker.com
interactive.balfourbeatty.com
interactive.paychex.com
la.bettertogether.health
labs.xeim.com
lv.moneymarketing.co.uk
magazine.culturetrip.com
mass-timber.pclbuildings.com
mediakit.localnewsnetwork.ca
medicare.healthfirst.org
moonshot.slalom.com
mt.bettertogether.health
my.aof.com
my.knowledgesuccess.org
or.bettertogether.health
painkiller.vice.com
perspectives.ghd.com
pipe-fab.pclindustrial.com
product.mimecast.com
protocol.techinarbitration.com
prudential.moneymarketing.co.uk
queersbuilt.vice.com
register.thebusinessbriefing.com
resources.stanleysecurity.co.uk
resources.stanleysecuritysolutions.com
service.otiselevator.com
soundsofsolidarity.wsjbarrons.com
tellmemore.pureinsurance.com
thelede.baltimoresun.com
thelede.courant.com
thelede.sunsentinel.com
truthaboutcoronavirus.mccannworldgroup.com
tx.bettertogether.health
verizon.gumgum.com
view.digital-hub.global
view.eagleview.com
view.globalization-partners.com
view.nasco.com
wa.bettertogether.health
webinars.3xlogic.com
www.ambientspace.co.uk
www.bronco-usa.com
www.bupadigital.co.uk
www.cms-digital.law
www.electricdreambus.com
www.hanspringett.com
www.jobsascode.io
www.kubotafsmagazine.com
www.lemans70.com
www.moscow.hsfab.ru
www.puttclub.com
www.revolade-eha.com
www.revolutionizeretail.com
www.stayathomeposters.com
www.supplyny.com
www.upearlytonight.com
www.wsjprintguarantee.com
www2.dailypayevents.com
www4.cramer.com
xp.wired.com

Other certificates including the domain name bettertogether.health

(limited to 100 certificates)
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
www.la.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
cpcalendars.qqt.svp.mybluehost.me
ceros2.map.fastly.net
san-004.ceros.com
*.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
*.bettertogether.health
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
san-004.ceros.com

Certificate

The complete raw certificate details for *.bettertogether.health in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3DZHLBX5mRV3jcFnNxJ
hxLom2XoHM9aXDxogmFxhiowhwQkSTABmvAcVqNnCHFhWtht9XGx+rSQeDNwunvC
odm2tz1uf1YcCqU9//2rf3VlNvx5fJPuxD5nRprjowrUhZnB2bPU/xr0V9hPbGSS
TVych0/fXMKOrmyoqTUXrpFOUhczRERuftKqiQ61ldWlkKaFX11oQvHSLju8VrvI
XmcKJihrkwazMU5X+XF9WB1pPWfJshajn78jTK7YfGYPTz/rfPJV+7qXzDW4coC+
M2oTu+hBJBPpQT/SIzukVH25QsSOKmOWHyIrvDwHPQOpT+LLhNusht4lqbknn4dT
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2441875119663115503722364705804315693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 20:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-05 20:07:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bettertogether.health'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25682023377274319146673704495757036191842137644925848890569971789894419544607013667187298119901774558582266276786123958033581383207668860575135426806839495722980096782067827614435676118330099769979277226670271082921383495342521084954723258972099971627043497604993698525614061608831618045706157310864271497684391875583961125479868820775513003595062021631256935054620512645201595783878762825439952934293735503510786077555900448297197154708645195889203429179957556501610267537278663330797790188353527641342137966170491703171998717717814663378978881001803187134883232381864893555866952975087074639324407554675205239952369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2327 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlrgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-preview.ceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.pureinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport.amica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaworks.wsjbarrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyerdemand.ritchiebros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.cookmed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.mckinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentnatives.rhapsodymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.perceptivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.citywire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.brightlark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mcclatchy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coalfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.hartmannstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.hollandhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.rosettastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.moleculardevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.e2open.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.viavisolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.perceptivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialinsights.castrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcouncil.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.hsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagram-bio.stanleyblackanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.balfourbeatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactive.paychex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.xeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lv.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.culturetrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mass-timber.pclbuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediakit.localnewsnetwork.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicare.healthfirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshot.slalom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.knowledgesuccess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painkiller.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectives.ghd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipe-fab.pclindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.mimecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocol.techinarbitration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prudential.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queersbuilt.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.thebusinessbriefing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stanleysecurity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stanleysecuritysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.otiselevator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundsofsolidarity.wsjbarrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellmemore.pureinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelede.sunsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthaboutcoronavirus.mccannworldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tx.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizon.gumgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.digital-hub.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.eagleview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.globalization-partners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.nasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wa.bettertogether.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.3xlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambientspace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronco-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bupadigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms-digital.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricdreambus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanspringett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsascode.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kubotafsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemans70.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moscow.hsfab.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puttclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolade-eha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolutionizeretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stayathomeposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplyny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upearlytonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsjprintguarantee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.dailypayevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.cramer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp.wired.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da5b24a9d2f36de999f580de23eb2cf8d530a0d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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