imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:57:3b:13:90:6f:15:d1:af:4e:01:bd:04:5f:c3:a7 was issued on by GlobalSign nv-sa.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:57:3b:13:90:6f:15:d1:af:4e:01:bd:04:5f:c3:a7
Serial Number (int): 1782156034679284314111988724844708775
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 8f:c8:3c:c0:c9:28:57:65:e7:73:1f:b5:f4:45:a7:c0:19:19:d6:8a
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 8e:bb:d7:b1:ac:7a:2b:58:86:ac:1e:67:ce:b2:0b:ec:bf:81:aa:57
Fingerprint (sha256): 00:15:9a:60:d3:c7:62:3e:61:c7:8e:fb:ae:68:5c:64:09:e3:9a:9b:6d:b7:aa:2b:ba:60:91:b2:1d:c1:63:da

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zonazurichempresas.es
uat.zurichlife.ie
rallyengine.bluesteel.werally.in
zurichinvest.ch
dev2.rt.zurich.ie
*.foremostmetagent.com
*.zurichseguros.com.ec
zurich.ie
zurich.com
*.zurich.com
www.zurichclaims.es
test-services-gi.rt.zurich.ie
www.baugarantie.zurich.ch
*.zurichconnect.ch
analytics.rt.zurich.ie
socialmediasuitcase.com
*.zurich-irland.de
uat.zurich.ie
*.legislation.qld.gov.au
operaciones.zurichhegeo.es
www.foremostchoicelive.com
farmershawaii.com
foremostmetagent.com
farmerslife.com
www.helppointclaimservices.com
*.hawaiiinsuranceconsultants.com
zurich.ch
www.farmerslife.com
legislation.qld.gov.au
*.zurich.ch
dev1.rt.zurich.ie
hawaiiinsuranceconsultants.com
*.zurichdevelopmentcenter.com
zurichdevelopmentcenter.com
*.socialmediasuitcase.com
helppointclaimservices.com
*.zurichinvest.ch
www.farmershawaii.com
foremostchoicelive.com
*.direct.zurich.ch
*.sandbox.reupmobile.com
imperva.com
*.othsolutions.com.au
*.werally.in
pl.direct.zurich.ch
www.zurich.ie
zurich-irland.de
zurichconnect.ch
zurichclaims.es
n10.farmershawaii.com
zonazurichempresas.es
services.rt.zurich.ie
n10.hawaiiinsuranceconsultants.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKx/xyyO3rOacFV4e1Sw
Axu1rqJNbm9TBvPiKHP/J4C+kTWQIjnnAQUcWRTYkkH5iWPWjYRgBvV18DbRsQk0
8m16A6/INI8B4EcQtsR35TUZ0tsdQ1PilMS5ItxhKDZIuI97hfKxTJ4/QdnrbKsz
EnDO5AxdLhKIsRaGckm5G3qUHLW3Ct+cMNeWuSZTvkHK/rXXTXXAK4XHaSvbF5wF
TNq72xaVIz2miXy7HQxVt7uh7waxrY99eqjlP15XIuYLn4r5yKdxTP87W02sUNzj
X2IfV8kHHrQWbgs97pmYGaMRt6edMhotF5Q3u9cXPek7Jj9t9nJaIID74k6ulnaF
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1782156034679284314111988724844708775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 12:08:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 12:08:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18263378407870365327559161632162774604586525603748289719134817200110702420397567372163697496662258000991036144089757478616015223863321523634413329957490205129030340543903249764399871724952220367950684315284577883863009469947026399080881164658772576869614540502010431659827893360476055736326296872459646572929026056762300752145501053162681117953969739456010171488119305302319430451570357415429240719486933133407595289464248289671884494073131950262081897976379550640316979146970563490769340983276708504624068047004047386422266400175604723485921733035054602258610815712408947257638387197882041431742405599681535041504759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonazurichempresas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.zurichlife.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallyengine.bluesteel.werally.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichinvest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foremostmetagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichseguros.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurichclaims.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-services-gi.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baugarantie.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmediasuitcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-irland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legislation.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operaciones.zurichhegeo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foremostchoicelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foremostmetagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helppointclaimservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legislation.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichdevelopmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmediasuitcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helppointclaimservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichinvest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foremostchoicelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.direct.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.reupmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.othsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werally.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.direct.zurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich-irland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichconnect.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichclaims.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n10.farmershawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonazurichempresas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.rt.zurich.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n10.hawaiiinsuranceconsultants.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fc83cc0c9285765e7731fb5f445a7c01919d68a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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