imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:93:26:fa:29:5c:d9:ee:de:4c:de:d8:70:6f:5a:52 was issued on by GlobalSign nv-sa.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:93:26:fa:29:5c:d9:ee:de:4c:de:d8:70:6f:5a:52
Serial Number (int): 2093286185396238601808287355716459090
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 17:be:0f:0a:d1:4c:95:3d:63:41:ff:b8:24:11:ba:8f:3f:4b:18:cd
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): fc:11:03:d9:a2:2b:2f:87:86:c2:81:3a:d7:23:ec:63:87:e9:7f:65
Fingerprint (sha256): 03:1d:cb:40:e9:54:74:90:3a:a3:0d:a9:4b:e3:92:29:39:cd:fb:f1:79:0b:24:09:7b:70:08:78:dc:e8:5d:20

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate imperva.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.alacctas.com
www.hoosierchildcarefamily.com
latots.org
hoosierchildcare.com
hoosierchildcarefamily.com
www.echildcarenj.org
alacctas.com
www.ebt-link.illinois.gov
uat.workforcesolutionschildcare.com
workforcesolutionschildcare.com
www.workforcesolutionschildcare.com
uat.alacctas.com
www.vaecc.org
parent.vaecc.org
uat.hoosierchildcare.com
www.hoosierchildcare.com
www.latots.org
ebt-link.illinois.gov
uat.hoosierchildcarefamily.com
uat.vaecc.org
vaecc.org
imperva.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8NshkXWwQ1ktjbK/qtm
q+0x3LJgL35VigwbocirUK/tRdyjbr0nuxsQW9of3wfGI8EEEMuQI93wts2jk2/l
/qwshsE+AxUKLlq+aXnpseh8UP6dxKMfXR5UNut07QRu+8vaWBGEMAvvJH9uRval
6JLWc6aHQxnfYiTjjWB033jvsVSfIaOuG5wtiPW0GmtXgX+uXqxvEG08T6dLrkW1
VlNUNdu2avad5RJt/gBYgS32108JBlf4iKfzjJtRjCQn5bGVQeJvbdhVMN0qxL1x
z+3197S2GekiN9FnezLxb6wJ97xKwcjBNp32vTSA72gDPnC1FR55z75AyvgGbw9w
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2093286185396238601808287355716459090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-20 18:01:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 18:01:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24712836596879225577453791493240414496549491587747259524641401214681339211507451558984566402930676128283793474846266790937618629765946588822027117294888619032455885561465088008957944448919193128814868905600339304131579693940238663472724769170575223799137766395993980408624606822846448813216940848188125628143971042784319877349522176142302450232093007988426750334211558454268172709373335640546417993939786735624585709783065987864317564514381496224711550160311014105965266063328938987962395688376360010886884963022197917070417788913219505435110577453498862952245059725939583015447039797458482233641589255989529941078181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (499 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alacctas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echildcarenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alacctas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebt-link.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforcesolutionschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.alacctas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parent.vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoosierchildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebt-link.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.hoosierchildcarefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17be0f0ad14c953d6341ffb82411ba8f3f4b18cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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