imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:00:b6:5a:8e:c0:f3:eb:41:34:6d:63:e1:76:5d:73 was issued on by GlobalSign nv-sa.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:b6:5a:8e:c0:f3:eb:41:34:6d:63:e1:76:5d:73
Serial Number (int): 1332926569047543787447052671970073971
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c5:79:fe:5d:d8:7f:d2:18:83:1e:f2:a5:b9:4d:97:ac:4d:2b:c0:d9
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): 64:f5:c1:7b:8e:8f:68:42:58:57:19:0e:c5:ba:30:72:14:b2:6d:d6
Fingerprint (sha256): 04:37:56:69:45:be:71:8f:5f:30:01:b1:d3:f4:b5:c0:2a:e5:b6:a9:77:7f:e5:e6:b3:6b:e1:e5:56:d0:a9:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vikingline.se
vikingline.ax
www.vikingline.se
vikingline.fi
vikingline.ru
www.vikingline.ax
www.sales.vikingline.com
vikingline.ee
sales.vikingline.com
www.vikingline.ee
www.vikingline.fi
www.vikingline.ru
imperva.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36E24aJ5iBnbL6nItR0l
Ee3HeyeeQLx4mBULXruc/+38+7bBTR9Ab0lZD46IomTSOltlt4SMg61BdeBWtQV0
4I6U2KPg5AU67CbKA9RtqGMnDmcjK/RNfCl5zpQlJFS3CrKmwidYqf6PKGRZ3RWY
ywMJmDKRylHtr2ovxEsl98Zr3B2c+Tp/gLU/Ia88Vr0yxDTfuIEBJPwM7KmzN3qT
63qJvTt3w9H62uYSb7aDGh1blpTIsdC5u1sJ9m2SMmMjf5lKBtzr35ayenae8bl5
rM7/8oNZmkNx42E4DIWUfS1eBnb1StUYn7GrKYuaIsf6VMiVpASdacqywCItd5NY
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1332926569047543787447052671970073971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 15:07:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-27 15:07:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28230639781334734705743845329757084275850505351517054206907273842997106063442307615293070983080713053243250566597101089961879614868166978308441019410439446883280805887426255131251486514102860588039760748602239678206765741376460057190238408740289845559904723367550173673473189748864234396649508760703362626410190516396503769159833436583354035200484328339811912293102211400177528169573794830961073308230387754808203715430872615794337380459471085474308802706290409109308703908798974208621262466538426019618657737242491342075226673528002132398830887883539410465203182607942616465441859801833580665596000647339163373492271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikingline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikingline.ax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikingline.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikingline.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingline.ax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sales.vikingline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikingline.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.vikingline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingline.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingline.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingline.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c579fe5dd87fd218831ef2a5b94d97ac4d2bc0d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181b5274959000004030047304502201583cbf7cfede58df1bd0d7d7e9c626f2f6241c4062f472bfbacd15f4eae5c50022100f566627c45531f8539a9a66f087a28e7b4e525172c57f41dde282d888eab73110077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000181b52749d60000040300483046022100efa2a38eb5faf1178c629d0cdf71cbf4de57569fff5805339e64354ff5cad4b4022100af7811918ee5f9c7de9fbf0841e44a8f522e2365c0e316eb2f0c70c5afb0df9b0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000181b52749fa00000403004730450221008b727812312d3f2ee941373bbd6ff4c06bb7ebc3f63a9d03378141bcea29d026022025b35ca3cc2c0821c74f3285a9c3c2b87679dfcc83f76173110580f2881f81bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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