imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:7f:1d:fb:b4:9a:fb:cd:a5:14:71:ce:84:61:30:9f was issued on by GlobalSign nv-sa.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7f:1d:fb:b4:9a:fb:cd:a5:14:71:ce:84:61:30:9f
Serial Number (int): 1989257828860801412045968846272671903
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e3:4c:49:7b:db:1d:63:c1:4f:87:c0:de:9a:f7:2d:3f:c7:ac:46:59
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 8b:f2:39:ea:9a:7a:cd:22:f2:f1:71:38:74:74:58:c4:71:86:30:97
Fingerprint (sha256): 00:5b:cc:f9:aa:0b:a6:41:78:2b:75:33:9d:cb:63:5d:fd:06:c8:15:3d:f8:e2:06:f2:eb:65:67:35:1d:8c:fa

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

procurements.cloudapps-test.dhcs.ca.gov
filedelivery.paces-dev.dhcs.ca.gov
portal.paces-test.dhcs.ca.gov
agreementportal.cloudapps-dev.dhcs.ca.gov
msrp.cloudapps-dev.dhcs.ca.gov
www.calhope.org
adminportal.cloudapps-test.dhcs.ca.gov
ecrsstage.dhcs.ca.gov
fiscal.cloudapps-dev.dhcs.ca.gov
agreementportal.cloudapps.dhcs.ca.gov
adminportal.cloudapps-dev.dhcs.ca.gov
www.dhcs.ca.gov
ppccloud.cloudapps-test.dhcs.ca.gov
procurements.cloudapps.dhcs.ca.gov
msrp.cloudapps-test.dhcs.ca.gov
contracts.cloudapps-dev.dhcs.ca.gov
iscdbudget.cloudapps.dhcs.ca.gov
imperva.com
api.hipaatime-dev.dhcs.ca.gov
apptest.ext.dhcs.ca.gov
iscdbudget.cloudapps-dev.dhcs.ca.gov
adminportal.cloudapps.dhcs.ca.gov
ppccloud.cloudapps-dev.dhcs.ca.gov
pgaccess.paces-test.dhcs.ca.gov
portal.paces-dev.dhcs.ca.gov
hipaatime-dev.dhcs.ca.gov
procurements.cloudapps-dev.dhcs.ca.gov
ppccloud.cloudapps.dhcs.ca.gov
filedelivery.paces-test.dhcs.ca.gov
medshome.dhcs.ca.gov
msrp.cloudapps.dhcs.ca.gov
ewcportal.dhcs.ca.gov
agreementportal.cloudapps-test.dhcs.ca.gov
calhope.org
filedelivery.paces.dhcs.ca.gov
sps2016.dhcs.ca.gov
pgaccess.paces-dev.dhcs.ca.gov
pave.dhcs.ca.gov
iscdbudget.cloudapps-test.dhcs.ca.gov
portal.paces.dhcs.ca.gov
dhcs.ca.gov
pgaccess.paces.dhcs.ca.gov

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksCHWSSyQK+wVtgwJOWu
PvtNQvcv9zmusXSLDIoFwlebRvltefxl71blQcMuRioD4a81Uq5gruKgeI2SFSRu
9L2p1RCiF4jNvx6uUdTeeCG2O1xOUSMiAZO5uwUzMhE6gWWzEsI9NYqjrsk4fHBU
yD28gCX3swem01clFSjRMpedrN/0AZCKNtFQ4d0LgLfruYsFq7mP1vLDB++iRMuV
dObNgRzdo4S5vxix3jwT5JUdy4semmwvWNOGCgwc3mJ/wuJA2bzRIpHxyJjNlKZt
Z2SDMPdnDbvRwGj2PYatayNjGVVpttm0u78XPCd1sVrn8mlKStC+Xp6X7qAA614l
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1989257828860801412045968846272671903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 16:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 16:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18525731967413392114671351486659856735458375034295928196945468065101363361444011474193933917692918028701835079105978321851283167462959928026993284892332049270485017185057121587132925586871095572547156530580429726556188961870777444745745371010535809870834550748372320722675034161679371426007223914504181316675466114274590361816491682178910231499687231518908907142648117353726552420767420974588337792750610124894660995321150301957441591411565513330170882085573004904674319737125312839416325160966674434779189833726137898400791849779712191112043538461196659504915542076703432186879170625340039928367436398964424321148209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1289 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurements.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filedelivery.paces-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paces-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreementportal.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msrp.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminportal.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrsstage.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiscal.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreementportal.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminportal.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppccloud.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurements.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msrp.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscdbudget.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hipaatime-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptest.ext.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscdbudget.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminportal.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppccloud.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgaccess.paces-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paces-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaatime-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurements.cloudapps-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppccloud.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filedelivery.paces-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medshome.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msrp.cloudapps.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewcportal.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreementportal.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filedelivery.paces.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps2016.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgaccess.paces-dev.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pave.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscdbudget.cloudapps-test.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paces.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhcs.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgaccess.paces.dhcs.ca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e34c497bdb1d63c14f87c0de9af72d3fc7ac4659
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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