imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:90:25:4c:0d:3e:bf:7d:40:f0:1f:93:91:45:08:43 was issued on by GlobalSign nv-sa.

With 127 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:90:25:4c:0d:3e:bf:7d:40:f0:1f:93:91:45:08:43
Serial Number (int): 2077675218008780058321646639005370435
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:66:4a:cb:70:24:10:f0:a8:4b:53:a2:43:2f:1e:7c:9b:80:63:a6
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): ca:86:5b:9b:63:46:d8:6b:48:f4:e4:b3:6b:31:cf:df:05:75:3f:90
Fingerprint (sha256): c2:ff:58:0c:e8:ff:64:e2:c8:67:15:ab:65:af:19:f4:b1:d0:7c:4a:54:f3:01:d1:7b:3f:7b:b0:b3:d5:52:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

127

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitatranslationinterpreting.com
*.capita-mits.co.uk
*.entrust-ed.co.uk
*.cs-nams.co.uk
*.redstartwales.com
mishare.co.uk
acutest.co.uk
*.capitatranslationinterpreting.com
*.southoxon.gov.uk
redstartwales.com
*.vwpension.co.uk
*.trade.co.uk
*.capitatranslationinterpreting.fr
*.electranetuk.com
*.one247.co.uk
*.capitaonboard.com
*.csl-inn.co.uk
redsms.co.uk
capitatranslationinterpreting.it
*.mythreadneedlepensions.co.uk
capitaintelligentcommunications.co.uk
*.de.capita-europe.com
*.easthants.gov.uk
*.staygassafe.co.uk
vwpension.co.uk
my-capita-europe.com
*.financialassessments.co.uk
*.voicegroup.co.uk
*.chhrml.co.uk
*.sigmaseven.com
*.hartlinkonline.ie
*.capitaservicenow.co.uk
eapf.org.uk
*.sigmaseven.co.uk
hartlinkonline.ie
*.capita-europe.com
*.inthost.net
capitapipjobs.co.uk
*.pcse.england.nhs.uk
*.whitehorsedc.gov.uk
staygassafe.co.uk
*.capita-im.co.uk
caterpillarpensions.co.uk
royalmailsps.co.uk
*.capitacm.co.uk
imperva.com
*.glhims.com
*.updata.net
*.capitaservicemanager.co.uk
myattpension.co.uk
*.wmsl.co.uk
*.capitawfm.co.uk
*.capitatranslationinterpreting.it
*.redsms.co.uk
*.capitalinguistportal.com
*.traineradvisor.com
*.capita-pip.co.uk
*.beovax.co.uk
ycbps.co.uk
*.ventura-crm.co.uk
*.pensionscams.co.uk
gassaferegister.co.uk
*.gassaferegister.co.uk
*.uat.pcse.england.nhs.uk
t-mobilepension.co.uk
*.myattpension.co.uk
*.acutest.co.uk
*.eapf.org.uk
*.tascor.co.uk
eepension.co.uk
capitalinguistportal.com
capitatranslationinterpreting.de
*.mi-share.co.uk
*.squidgeit.com
*.harrow.gov.uk
*.optilead.co.uk
pensionscams.co.uk
capitatranslationinterpreting.es
smartmate.co
*.t-mobilepension.co.uk
*.trustmarque.com
*.ycbps.co.uk
*.capita-ti.com
capita-pip.co.uk
*.caterpillarpensions.co.uk
capitatranslationinterpreting.us
*.capitasoftware.com
*.barnet.gov.uk
*.royalmailsps.co.uk
*.retaincloud.com
*.capita-ic.co.uk
*.capitapipjobs.co.uk
capitatranslationinterpreting.fr
*.crm4.dynamics.com
*.eepension.co.uk
*.capitasecureinformationsolutions.co.uk
entrust-ed.co.uk
*.cloud.sigmaseven.com
*.ventura-uk.com
*.capitatranslationinterpreting.de
*.chks.co.uk
mythreadneedlepensions.co.uk
*.smartmate.co
barnet.gov.uk
glhims.com
tascor.co.uk
*.capitahartshead.co.uk
*.capitatranslationinterpreting.us
*.csa.capita.co.in
*.mishare.co.uk
trustmarque.com
*.credit.trade.co.uk
*.my-capita-europe.com
*.securitywatchdog.org.uk
*.havant.gov.uk
*.tflpp.co.uk
traineradvisor.com
*.capitaproperty.co.uk
capita-europe.com
voicegroup.co.uk
*.capitatranslationinterpreting.es
*.scottishwan.com
*.capita-software.co.uk
optilead.co.uk
*.capitaintelligentcommunications.co.uk
*.amt-sybex.com
mi-share.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPmTCCDoGgAwIBAgIQAZAlTA0+v31A8B+TkUUIQzANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgSDIgMjAyMTAeFw0yMTA5
MzAxNjEyMjFaFw0yMjA0MDEwNzA2NTdaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdVv76KPr27C5kJMdVv
WOGJkeTumG/+peSv29bKRUztftVNKKLPnz9XSl3d0UHAoIrzoJEXkbyHwkz97LQs
DF2NnevCrjgikj/cG29Ckdm3fM7AO1qOGqQ2dA15fYGr/syM91Ji9JzoOO4idUzi
tj7MQraLtet6bn1Fv/jxTmOuThqVU+Z6FN0+B/MTd/J+ZD2/KgcfbbqYf/4peVuq
aK0nTGfXwUbdBsWfiBDnGjHEMtt9Ee6nOC1csp7secKdRuO4c2eQao+p+MKaqiiH
HqPkcdzUHo9AN1eZQbOiR2B4O8OBOcTf8ScZjXOQ7aJU07PotSuoxyi9yiDBStTQ
nQIDAQABo4IMnzCCDJswggrBBgNVHREEggq4MIIKtIIhY2FwaXRhdHJhbnNsYXRp
b25pbnRlcnByZXRpbmcuY29tghMqLmNhcGl0YS1taXRzLmNvLnVrghIqLmVudHJ1
c3QtZWQuY28udWuCDyouY3MtbmFtcy5jby51a4ITKi5yZWRzdGFydHdhbGVzLmNv
bYINbWlzaGFyZS5jby51a4INYWN1dGVzdC5jby51a4IjKi5jYXBpdGF0cmFuc2xh
dGlvbmludGVycHJldGluZy5jb22CEiouc291dGhveG9uLmdvdi51a4IRcmVkc3Rh
cnR3YWxlcy5jb22CESoudndwZW5zaW9uLmNvLnVrgg0qLnRyYWRlLmNvLnVrgiIq
LmNhcGl0YXRyYW5zbGF0aW9uaW50ZXJwcmV0aW5nLmZyghIqLmVsZWN0cmFuZXR1
ay5jb22CDioub25lMjQ3LmNvLnVrghMqLmNhcGl0YW9uYm9hcmQuY29tgg8qLmNz
bC1pbm4uY28udWuCDHJlZHNtcy5jby51a4IgY2FwaXRhdHJhbnNsYXRpb25pbnRl
cnByZXRpbmcuaXSCHioubXl0aHJlYWRuZWVkbGVwZW5zaW9ucy5jby51a4IlY2Fw
aXRhaW50ZWxsaWdlbnRjb21tdW5pY2F0aW9ucy5jby51a4IWKi5kZS5jYXBpdGEt
ZXVyb3BlLmNvbYISKi5lYXN0aGFudHMuZ292LnVrghMqLnN0YXlnYXNzYWZlLmNv
LnVrgg92d3BlbnNpb24uY28udWuCFG15LWNhcGl0YS1ldXJvcGUuY29tghwqLmZp
bmFuY2lhbGFzc2Vzc21lbnRzLmNvLnVrghIqLnZvaWNlZ3JvdXAuY28udWuCDiou
Y2hocm1sLmNvLnVrghAqLnNpZ21hc2V2ZW4uY29tghMqLmhhcnRsaW5rb25saW5l
LmllghgqLmNhcGl0YXNlcnZpY2Vub3cuY28udWuCC2VhcGYub3JnLnVrghIqLnNp
Z21hc2V2ZW4uY28udWuCEWhhcnRsaW5rb25saW5lLmllghMqLmNhcGl0YS1ldXJv
cGUuY29tgg0qLmludGhvc3QubmV0ghNjYXBpdGFwaXBqb2JzLmNvLnVrghUqLnBj
c2UuZW5nbGFuZC5uaHMudWuCFSoud2hpdGVob3JzZWRjLmdvdi51a4IRc3RheWdh
c3NhZmUuY28udWuCESouY2FwaXRhLWltLmNvLnVrghljYXRlcnBpbGxhcnBlbnNp
b25zLmNvLnVrghJyb3lhbG1haWxzcHMuY28udWuCECouY2FwaXRhY20uY28udWuC
C2ltcGVydmEuY29tggwqLmdsaGltcy5jb22CDCoudXBkYXRhLm5ldIIcKi5jYXBp
dGFzZXJ2aWNlbWFuYWdlci5jby51a4ISbXlhdHRwZW5zaW9uLmNvLnVrggwqLndt
c2wuY28udWuCESouY2FwaXRhd2ZtLmNvLnVrgiIqLmNhcGl0YXRyYW5zbGF0aW9u
aW50ZXJwcmV0aW5nLml0gg4qLnJlZHNtcy5jby51a4IaKi5jYXBpdGFsaW5ndWlz
dHBvcnRhbC5jb22CFCoudHJhaW5lcmFkdmlzb3IuY29tghIqLmNhcGl0YS1waXAu
Y28udWuCDiouYmVvdmF4LmNvLnVrggt5Y2Jwcy5jby51a4ITKi52ZW50dXJhLWNy
bS5jby51a4IUKi5wZW5zaW9uc2NhbXMuY28udWuCFWdhc3NhZmVyZWdpc3Rlci5j
by51a4IXKi5nYXNzYWZlcmVnaXN0ZXIuY28udWuCGSoudWF0LnBjc2UuZW5nbGFu
ZC5uaHMudWuCFXQtbW9iaWxlcGVuc2lvbi5jby51a4IUKi5teWF0dHBlbnNpb24u
Y28udWuCDyouYWN1dGVzdC5jby51a4INKi5lYXBmLm9yZy51a4IOKi50YXNjb3Iu
Y28udWuCD2VlcGVuc2lvbi5jby51a4IYY2FwaXRhbGluZ3Vpc3Rwb3J0YWwuY29t
giBjYXBpdGF0cmFuc2xhdGlvbmludGVycHJldGluZy5kZYIQKi5taS1zaGFyZS5j
by51a4IPKi5zcXVpZGdlaXQuY29tgg8qLmhhcnJvdy5nb3YudWuCECoub3B0aWxl
YWQuY28udWuCEnBlbnNpb25zY2Ftcy5jby51a4IgY2FwaXRhdHJhbnNsYXRpb25p
bnRlcnByZXRpbmcuZXOCDHNtYXJ0bWF0ZS5jb4IXKi50LW1vYmlsZXBlbnNpb24u
Y28udWuCESoudHJ1c3RtYXJxdWUuY29tgg0qLnljYnBzLmNvLnVrgg8qLmNhcGl0
YS10aS5jb22CEGNhcGl0YS1waXAuY28udWuCGyouY2F0ZXJwaWxsYXJwZW5zaW9u
cy5jby51a4IgY2FwaXRhdHJhbnNsYXRpb25pbnRlcnByZXRpbmcudXOCFCouY2Fw
aXRhc29mdHdhcmUuY29tgg8qLmJhcm5ldC5nb3YudWuCFCoucm95YWxtYWlsc3Bz
LmNvLnVrghEqLnJldGFpbmNsb3VkLmNvbYIRKi5jYXBpdGEtaWMuY28udWuCFSou
Y2FwaXRhcGlwam9icy5jby51a4IgY2FwaXRhdHJhbnNsYXRpb25pbnRlcnByZXRp
bmcuZnKCEyouY3JtNC5keW5hbWljcy5jb22CESouZWVwZW5zaW9uLmNvLnVrgigq
LmNhcGl0YXNlY3VyZWluZm9ybWF0aW9uc29sdXRpb25zLmNvLnVrghBlbnRydXN0
LWVkLmNvLnVrghYqLmNsb3VkLnNpZ21hc2V2ZW4uY29tghAqLnZlbnR1cmEtdWsu
Y29tgiIqLmNhcGl0YXRyYW5zbGF0aW9uaW50ZXJwcmV0aW5nLmRlggwqLmNoa3Mu
Y28udWuCHG15dGhyZWFkbmVlZGxlcGVuc2lvbnMuY28udWuCDiouc21hcnRtYXRl
LmNvgg1iYXJuZXQuZ292LnVrggpnbGhpbXMuY29tggx0YXNjb3IuY28udWuCFyou
Y2FwaXRhaGFydHNoZWFkLmNvLnVrgiIqLmNhcGl0YXRyYW5zbGF0aW9uaW50ZXJw
cmV0aW5nLnVzghIqLmNzYS5jYXBpdGEuY28uaW6CDyoubWlzaGFyZS5jby51a4IP
dHJ1c3RtYXJxdWUuY29tghQqLmNyZWRpdC50cmFkZS5jby51a4IWKi5teS1jYXBp
dGEtZXVyb3BlLmNvbYIZKi5zZWN1cml0eXdhdGNoZG9nLm9yZy51a4IPKi5oYXZh
bnQuZ292LnVrgg0qLnRmbHBwLmNvLnVrghJ0cmFpbmVyYWR2aXNvci5jb22CFiou
Y2FwaXRhcHJvcGVydHkuY28udWuCEWNhcGl0YS1ldXJvcGUuY29tghB2b2ljZWdy
b3VwLmNvLnVrgiIqLmNhcGl0YXRyYW5zbGF0aW9uaW50ZXJwcmV0aW5nLmVzghEq
LnNjb3R0aXNod2FuLmNvbYIXKi5jYXBpdGEtc29mdHdhcmUuY28udWuCDm9wdGls
ZWFkLmNvLnVrgicqLmNhcGl0YWludGVsbGlnZW50Y29tbXVuaWNhdGlvbnMuY28u
dWuCDyouYW10LXN5YmV4LmNvbYIObWktc2hhcmUuY28udWswDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU7GZK
y3AkEPCoS1OiQy8efJuAY6YwVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGg
MgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y
ZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggr
BgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3Iz
ZHZ0bHNjYWgyMjAyMTBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYWgyMjAyMS5jcnQwHwYDVR0j
BBgwFoAUKjS5qvq/PIjxR/LSEni+xeWqsGkwSAYDVR0fBEEwPzA9oDugOYY3aHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhaDIyMDIx
LmNybDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnutx
0JwwidUBDUuTxknDZifrPp1wH+nVjmmeYdIfzRSp0GAdLiQPj2XU8LbJsgca0bD7
Wo56yGYNrP60aiEJ5ZkRjbVvY7t1dWHp7Jnn6/9uEUhTEM2R/ln4pxyDrjQha3A9
GN0eMIqCVrDIFemoI1u8bR2XDvC5FzM7wZZKSvomcM16CNSSkFhJzjZpi5HecV7V
btIZjxAfSrP0ncLtUfNKQZtuNP6uNzcWLYipSwqcjSUeLUswfycPDA+Ho1Ewbf6A
eYgHmOriEyukFNVEQ9Vu9md/+ESy6faP1fEvyFpbgMngTnswONeONEIDEOSlpa5J
/99/KNbxcHY1tpUKfw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdVv76KPr27C5kJMdVv
WOGJkeTumG/+peSv29bKRUztftVNKKLPnz9XSl3d0UHAoIrzoJEXkbyHwkz97LQs
DF2NnevCrjgikj/cG29Ckdm3fM7AO1qOGqQ2dA15fYGr/syM91Ji9JzoOO4idUzi
tj7MQraLtet6bn1Fv/jxTmOuThqVU+Z6FN0+B/MTd/J+ZD2/KgcfbbqYf/4peVuq
aK0nTGfXwUbdBsWfiBDnGjHEMtt9Ee6nOC1csp7secKdRuO4c2eQao+p+MKaqiiH
HqPkcdzUHo9AN1eZQbOiR2B4O8OBOcTf8ScZjXOQ7aJU07PotSuoxyi9yiDBStTQ
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2077675218008780058321646639005370435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 16:12:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 07:06:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19294407979747692107814480175211470949549430727584330910960674474049228062681274098046147130481952781739394765204226075183535169565207957886327449785037139555843834662989195055627979439246164233009054293256571260557937493974626192399411430635248877898715389191407821212562128585469092378842206772805055633318057282365336745534256778457526565846993102201341407852208160931687812573188100158145964041516852344921998436418400567656941917104943213197295644663136022714107824135217571130969443466405998322385137730540211492055450311051472788648460993642281901646416827193668087766016567106782723239924780013793578281390237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-mits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cs-nams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acutest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southoxon.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electranetuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaonboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csl-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easthants.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialassessments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chhrml.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigmaseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicenow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigmaseven.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inthost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehorsedc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-im.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmsl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitawfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beovax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-crm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acutest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi-share.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squidgeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrow.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustmarque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitasoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaincloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm4.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitasecureinformationsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.sigmaseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitahartshead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csa.capita.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustmarque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitywatchdog.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havant.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tflpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottishwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amt-sybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-share.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec664acb702410f0a84b53a2432f1e7c9b8063a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009eeb71d09c3089d5010d4b93c649c36627eb3e9d701fe9d58e699e61d21fcd14a9d0601d2e240f8f65d4f0b6c9b2071ad1b0fb5a8e7ac8660dacfeb46a2109e599118db56f63bb757561e9ec99e7ebff6e11485310cd91fe59f8a71c83ae34216b703d18dd1e308a8256b0c815e9a8235bbc6d1d970ef0b917333bc1964a4afa2670cd7a08d492905849ce36698b91de715ed56ed2198f101f4ab3f49dc2ed51f34a419b6e34feae3737162d88a94b0a9c8d251e2d4b307f270f0c0f87a351306dfe8079880798eae2132ba414d54443d56ef6677ff844b2e9f68fd5f12fc85a5b80c9e04e7b3038d78e34420310e4a5a5ae49ffdf7f28d6f1707635b6950a7f