imperva.com
Issued by GlobalSign Atlas R3 DV TLS CA H2 2021
About this certificate
This digital certificate with serial number 01:73:e3:18:63:e4:2f:58:03:0c:c0:01:b6:e2:e1:3f was issued on by GlobalSign nv-sa.
With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=imperva.com
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 01:73:e3:18:63:e4:2f:58:03:0c:c0:01:b6:e2:e1:3fSerial Number (int): 1930948173887224955658384620019441983
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 1c:23:8f:b2:ad:1e:c3:fd:98:68:a8:f4:f7:6f:e3:4a:fb:24:54:48
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69
Fingerprint (sha1): 13:59:f4:c9:05:f9:c5:55:83:37:44:b9:fd:0a:58:51:62:74:02:4f
Fingerprint (sha256): 00:91:ee:5b:3f:e0:24:fd:80:f4:89:b4:34:d5:ac:4a:58:23:bd:91:1f:dd:46:b9:5e:20:13:ee:be:68:cf:58
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl
Check the revocation status for certificate imperva.com
80
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imperva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.taconic.com
*.zurich.com.hk
www.charlotte3d4d.com
*.contasuper.com.br
*.bisk.com
rsn2000.org
venca.es
sis.pt
sirp.pt
www.uniteddisposalassistant.com
*.venca.es
*.library.smu.edu.sg
kirstenwinter.com
www.homewarestyles.com
www.centralkw.ca
didyawheatgrass.com
*.nancyrhine.com
t-mobile.com
*.sirp.pt
*.enel.com
*.agcompany.net
www.custody-divorce.com
www.exititinc.com
*.gerber.com.hk
venca.pt
mughub.com
*.tempo.co.il
centralkw.ca
charlotte3d4d.com
homewarestyles.com
mercurialmaiden.com
*.au.viewcases.com
livingwitnessmissionarychurch.com
vseinc.com
www.didyawheatgrass.com
*.vseinc.com
cten.org
ong-ong.com
uniteddisposalassistant.com
*.360-jambo.com
newtribez.net
*.daveandbusters.com
almirallmed.es
custody-divorce.com
*.iba.gov.au
amanda-hanley.com
taconic.com
*.venca.pt
*.reclameaqui.com.br
*.tnuva.co.il
*.t-mobile.com
*.almirallmed.es
*.ong-ong.com
www.livewebcamtwinks.com
exititinc.com
www.rsn2000.org
www.unitalkinteractive.com
www.mughub.com
imperva.com
www.mercurialmaiden.com
nasurvey.com
zurich.com.hk
www.viviaimelux.com
livewebcamtwinks.com
www.denvermusicinstitute.com
www.amanda-hanley.com
www.nasurvey.com
nancyrhine.com
unitalkinteractive.com
*.store.purina.com
viviaimelux.com
*.tcorp.nsw.gov.au
*.saputo.com
*.sis.pt
www.cten.org
www.newtribez.net
denvermusicinstitute.com
www.livingwitnessmissionarychurch.com
www.kirstenwinter.com
*.csd.t-mobile.com
*.zurich.com.hk
www.charlotte3d4d.com
*.contasuper.com.br
*.bisk.com
rsn2000.org
venca.es
sis.pt
sirp.pt
www.uniteddisposalassistant.com
*.venca.es
*.library.smu.edu.sg
kirstenwinter.com
www.homewarestyles.com
www.centralkw.ca
didyawheatgrass.com
*.nancyrhine.com
t-mobile.com
*.sirp.pt
*.enel.com
*.agcompany.net
www.custody-divorce.com
www.exititinc.com
*.gerber.com.hk
venca.pt
mughub.com
*.tempo.co.il
centralkw.ca
charlotte3d4d.com
homewarestyles.com
mercurialmaiden.com
*.au.viewcases.com
livingwitnessmissionarychurch.com
vseinc.com
www.didyawheatgrass.com
*.vseinc.com
cten.org
ong-ong.com
uniteddisposalassistant.com
*.360-jambo.com
newtribez.net
*.daveandbusters.com
almirallmed.es
custody-divorce.com
*.iba.gov.au
amanda-hanley.com
taconic.com
*.venca.pt
*.reclameaqui.com.br
*.tnuva.co.il
*.t-mobile.com
*.almirallmed.es
*.ong-ong.com
www.livewebcamtwinks.com
exititinc.com
www.rsn2000.org
www.unitalkinteractive.com
www.mughub.com
imperva.com
www.mercurialmaiden.com
nasurvey.com
zurich.com.hk
www.viviaimelux.com
livewebcamtwinks.com
www.denvermusicinstitute.com
www.amanda-hanley.com
www.nasurvey.com
nancyrhine.com
unitalkinteractive.com
*.store.purina.com
viviaimelux.com
*.tcorp.nsw.gov.au
*.saputo.com
*.sis.pt
www.cten.org
www.newtribez.net
denvermusicinstitute.com
www.livingwitnessmissionarychurch.com
www.kirstenwinter.com
*.csd.t-mobile.com
Other certificates including the domain name imperva.com
(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
Certificate
The complete raw certificate details for imperva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMBDCCCuygAwIBAgIQAXPjGGPkL1gDDMABtuLhPzANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgSDIgMjAyMTAeFw0yMTEx MjMxNDA3MjhaFw0yMjA1MjUwNTAyMDRaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp0B2qRlCkj72NKq3LtT 9UvoQzKNOWr+VIia0mxDsg3BjngPtJyzJzdZlYxyAY8QVyDPb72EpEtg9MJZpGP7 ITIdH5QC8b46XMcuo8ObK5CvdTRtzPj40BLR/goLXdX6rv+VeRLsNDJ1fF9nO2ZA eujtlO65TAokDGvlk8Wj1v+xrZ6MJ65ROTjAbTKM+xn1uGAAexHCiBYtd/gETbQ5 zW9b202JX9nEm8utucHIfkmD5RfXfi8qR8mmlVLsGyHXMsYedMmkKdcmskhcrA7T dQoijmtlihAkj2/aGz0qNg/l+oTPO8W1E6d3lDwRZ0yMlrDD3Ia8oMezXWpcfCLC YwIDAQABo4IJCjCCCQYwggXABgNVHREEggW3MIIFs4INKi50YWNvbmljLmNvbYIP Ki56dXJpY2guY29tLmhrghV3d3cuY2hhcmxvdHRlM2Q0ZC5jb22CEyouY29udGFz dXBlci5jb20uYnKCCiouYmlzay5jb22CC3JzbjIwMDAub3Jnggh2ZW5jYS5lc4IG c2lzLnB0ggdzaXJwLnB0gh93d3cudW5pdGVkZGlzcG9zYWxhc3Npc3RhbnQuY29t ggoqLnZlbmNhLmVzghQqLmxpYnJhcnkuc211LmVkdS5zZ4IRa2lyc3RlbndpbnRl ci5jb22CFnd3dy5ob21ld2FyZXN0eWxlcy5jb22CEHd3dy5jZW50cmFsa3cuY2GC E2RpZHlhd2hlYXRncmFzcy5jb22CECoubmFuY3lyaGluZS5jb22CDHQtbW9iaWxl LmNvbYIJKi5zaXJwLnB0ggoqLmVuZWwuY29tgg8qLmFnY29tcGFueS5uZXSCF3d3 dy5jdXN0b2R5LWRpdm9yY2UuY29tghF3d3cuZXhpdGl0aW5jLmNvbYIPKi5nZXJi ZXIuY29tLmhrggh2ZW5jYS5wdIIKbXVnaHViLmNvbYINKi50ZW1wby5jby5pbIIM Y2VudHJhbGt3LmNhghFjaGFybG90dGUzZDRkLmNvbYISaG9tZXdhcmVzdHlsZXMu Y29tghNtZXJjdXJpYWxtYWlkZW4uY29tghIqLmF1LnZpZXdjYXNlcy5jb22CIWxp dmluZ3dpdG5lc3NtaXNzaW9uYXJ5Y2h1cmNoLmNvbYIKdnNlaW5jLmNvbYIXd3d3 LmRpZHlhd2hlYXRncmFzcy5jb22CDCoudnNlaW5jLmNvbYIIY3Rlbi5vcmeCC29u Zy1vbmcuY29tght1bml0ZWRkaXNwb3NhbGFzc2lzdGFudC5jb22CDyouMzYwLWph bWJvLmNvbYINbmV3dHJpYmV6Lm5ldIIUKi5kYXZlYW5kYnVzdGVycy5jb22CDmFs bWlyYWxsbWVkLmVzghNjdXN0b2R5LWRpdm9yY2UuY29tggwqLmliYS5nb3YuYXWC EWFtYW5kYS1oYW5sZXkuY29tggt0YWNvbmljLmNvbYIKKi52ZW5jYS5wdIIUKi5y ZWNsYW1lYXF1aS5jb20uYnKCDSoudG51dmEuY28uaWyCDioudC1tb2JpbGUuY29t ghAqLmFsbWlyYWxsbWVkLmVzgg0qLm9uZy1vbmcuY29tghh3d3cubGl2ZXdlYmNh bXR3aW5rcy5jb22CDWV4aXRpdGluYy5jb22CD3d3dy5yc24yMDAwLm9yZ4Iad3d3 LnVuaXRhbGtpbnRlcmFjdGl2ZS5jb22CDnd3dy5tdWdodWIuY29tggtpbXBlcnZh LmNvbYIXd3d3Lm1lcmN1cmlhbG1haWRlbi5jb22CDG5hc3VydmV5LmNvbYINenVy aWNoLmNvbS5oa4ITd3d3LnZpdmlhaW1lbHV4LmNvbYIUbGl2ZXdlYmNhbXR3aW5r cy5jb22CHHd3dy5kZW52ZXJtdXNpY2luc3RpdHV0ZS5jb22CFXd3dy5hbWFuZGEt aGFubGV5LmNvbYIQd3d3Lm5hc3VydmV5LmNvbYIObmFuY3lyaGluZS5jb22CFnVu aXRhbGtpbnRlcmFjdGl2ZS5jb22CEiouc3RvcmUucHVyaW5hLmNvbYIPdml2aWFp bWVsdXguY29tghIqLnRjb3JwLm5zdy5nb3YuYXWCDCouc2FwdXRvLmNvbYIIKi5z aXMucHSCDHd3dy5jdGVuLm9yZ4IRd3d3Lm5ld3RyaWJlei5uZXSCGGRlbnZlcm11 c2ljaW5zdGl0dXRlLmNvbYIld3d3LmxpdmluZ3dpdG5lc3NtaXNzaW9uYXJ5Y2h1 cmNoLmNvbYIVd3d3LmtpcnN0ZW53aW50ZXIuY29tghIqLmNzZC50LW1vYmlsZS5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAdBgNVHQ4EFgQUHCOPsq0ew/2YaKj092/jSvskVEgwVwYDVR0gBFAwTjAIBgZn gQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEF BQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5j b20vY2EvZ3NhdGxhc3IzZHZ0bHNjYWgyMjAyMTBKBggrBgEFBQcwAoY+aHR0cDov L3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYWgy MjAyMS5jcnQwHwYDVR0jBBgwFoAUKjS5qvq/PIjxR/LSEni+xeWqsGkwSAYDVR0f BEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFz cjNkdnRsc2NhaDIyMDIxLmNybDCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF9TR+x0wAABAMARzBF AiEA0zLPM22u1RBxeNbxsAyYDxL1M4fH0pIo8GvD4ajbdugCIAF8le1rkjJ3NspL gN48MsTijN7o+RJlw0khBBxh8yBxAHUARqVV63X6kSAwtaKJafTzfREsQXS+/Um4 havy/HD+bUcAAAF9TR+xzAAABAMARjBEAiBRfd1ecs75lOzLyh8ExtIR3wvc4Vte scpQBE1Z6EAtUQIgNSaxT78WT7hUdEcnFiWdYaj/cGTpZth9qQRLwyo81HkAdgBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAX1NH7I/AAAEAwBHMEUC IDJhQUqquYj0X3DWWGONCWUANZb2dSSg9Wsr9s6apWaoAiEAnNnsNTpnMpqQybl3 4YS6HxYZLCNzi77wMbHcB7T2aDQwDQYJKoZIhvcNAQELBQADggEBAAR7vN9fC7Df IYEj4R3hQWMbfMrWzWpXKFKYi6Z7HaB4irzAvNP35P9aOSdUsgtAiRg8TYSp4KDa 9cY5JznuvtYLQHfbDCjSMWsZauFnNj8fOhOsApdnOLlDBq0SVNTZOqGW27AgSjR/ w7dzgwj84PeajUVB/meo5FLOSVQuWdwdljGim/do48ULLoIC2HZSzplvRZG3mpKF lqe/UXTmvsHUFkH2u47RujdIN28+SfVR3yfBsp3m7A0FlVPXOjc5NTynrfApZTzH agvOCGEnL40gljb/nmMw1ELeYLukE3nBwow2vyzJyAvvliBQtvildgmo3knMhMx8 o4lChUzMxuQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp0B2qRlCkj72NKq3LtT 9UvoQzKNOWr+VIia0mxDsg3BjngPtJyzJzdZlYxyAY8QVyDPb72EpEtg9MJZpGP7 ITIdH5QC8b46XMcuo8ObK5CvdTRtzPj40BLR/goLXdX6rv+VeRLsNDJ1fF9nO2ZA eujtlO65TAokDGvlk8Wj1v+xrZ6MJ65ROTjAbTKM+xn1uGAAexHCiBYtd/gETbQ5 zW9b202JX9nEm8utucHIfkmD5RfXfi8qR8mmlVLsGyHXMsYedMmkKdcmskhcrA7T dQoijmtlihAkj2/aGz0qNg/l+oTPO8W1E6d3lDwRZ0yMlrDD3Ia8oMezXWpcfCLC YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1930948173887224955658384620019441983 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 14:07:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 05:02:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18003262462040242481755467006919821586032603469700016427148665660064243477329821245960303685716196054618623215405334791474936729912974061775649775096050792941176138241221338920030478409126227450431154888622300869708195300464229614945027314483001794235472357194863222867804651501529296864513485628756729708917287365193806798371936129617412000745387935061543070684588261841044348827042996022905202866852524597924733724869674434179395383449262155921607106536216105451325985927521720972576529504161611922686967717239870593603747244865600080054426828980562652022748679591106831715110513696497922743807128080826989153534563 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1463 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taconic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlotte3d4d.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contasuper.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bisk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsn2000.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venca.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sis.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirp.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniteddisposalassistant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venca.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.smu.edu.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirstenwinter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homewarestyles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralkw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'didyawheatgrass.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nancyrhine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirp.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agcompany.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custody-divorce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exititinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerber.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venca.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mughub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempo.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralkw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotte3d4d.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homewarestyles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurialmaiden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.au.viewcases.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwitnessmissionarychurch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vseinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.didyawheatgrass.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vseinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cten.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ong-ong.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniteddisposalassistant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.360-jambo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtribez.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daveandbusters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almirallmed.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custody-divorce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iba.gov.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amanda-hanley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taconic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venca.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reclameaqui.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnuva.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almirallmed.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ong-ong.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livewebcamtwinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exititinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsn2000.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitalkinteractive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mughub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercurialmaiden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasurvey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viviaimelux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewebcamtwinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvermusicinstitute.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amanda-hanley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasurvey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancyrhine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitalkinteractive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.purina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viviaimelux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcorp.nsw.gov.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saputo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sis.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cten.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtribez.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvermusicinstitute.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwitnessmissionarychurch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirstenwinter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csd.t-mobile.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1c238fb2ad1ec3fd9868a8f4f76fe34afb245448 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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