imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:44:92:fc:97:d5:46:6a:40:ce:55:ef:85:ae:0d:d5 was issued on by GlobalSign nv-sa.

With 134 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:44:92:fc:97:d5:46:6a:40:ce:55:ef:85:ae:0d:d5
Serial Number (int): 1685285426454441098418309113320443349
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: fd:cc:59:a9:89:34:ea:ab:af:18:19:31:d9:b1:42:05:37:72:c1:77
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): e6:f7:f7:3e:8d:08:b7:17:4a:1e:3c:a7:c3:a4:00:e2:40:8e:f6:98
Fingerprint (sha256): 04:c9:b3:4a:0a:e0:65:e4:ea:c4:89:9c:1b:c6:cd:31:73:89:27:dd:e5:de:f7:16:7a:68:5f:6a:9c:e8:59:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

134

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manager-conductor-pci.sensedia.com
www.exchangebank.com
*.danceumbrella.net
*.writingthoughts.com
hadassa-patient-stg.ummanu.health
imshomecare.net
twenty4sevenfs.com
nmerb.org
*.good2give.ngo
burgesskilpatrick.com
danceumbrella.net
bloomingbaby4d.com
karenkernaghanorthophoniewinnipeg.com
menopausechicks.com
osstf.on.ca
*.ukbusiness.london
*.alexmeadowsministries.com
*.dnauctioneer.com
writingthoughts.com
*.nicholasjwedlow.com
abarth.co.il
www.portalimudim.co.il
getyourfreegenerator.com
szmc.ummanu.health
nicholasjwedlow.com
szmcpro.ummanu.health
www.tostudy.co.il
hackney2.com
*.proplan-katze.de
*.menopausechicks.com
www.aboundservices.com
www.sleepyhollowtrees.com
sonomaequity.com
*.americaweloveyou.com
globalconnextions.org
*.kinginsuranceagency.com
beehnerphotography.com
likadesign.com
terryrayinsurance.com
auto1.co.il
*.op2016.contrex.com
alexmeadowsministries.com
coledenton.com
patient.ummanu.health
*.brooklynjewish.org
*.karenkernaghanorthophoniewinnipeg.com
www.suckerpunchdaily.com
dnauctioneer.com
exchangebank.com
guigoz.fr
manitobaxray.com
thecraftyhealer.com
imperva.com
*.wyethnutritionsc.org
dolce-gusto.fr
*.wbuniversity.online
*.oneistheteacher.com
*.hackney2.com
ummanu-clinician.ummanu.health
sleepyhollowtrees.com
www.globalconnextions.org
*.guigoz.fr
*.deleonservicesgroup.com
ukbusiness.london
www.auto1.co.il
bassresource.com
www.northcoloradohealthalliance.org
abraconlink.com
portalimudim.co.il
www.imshomecare.net
texasstress.com
purina-adventuros.es
aboundservices.com
*.kanmasleadership.com
northcoloradohealthalliance.org
healthyskinjournals.com
*.manitobaxray.com
americaweloveyou.com
brooklynjewish.org
dontbankonthebomb.com
kanmasleadership.com
www.eab.finance
*.rjsinternetmarketing.com
sunrisecommunityhealth.org
www.twenty4sevenfs.com
*.seedospeaks.com
naturallylivingtoday.com
ummanu-patient.ummanu.health
roychowthi.com
*.abraconlink.com
*.nmerb.org
*.purina-adventuros.es
*.bassresource.com
www.burgesskilpatrick.com
tostudy.co.il
www.abarth.co.il
*.dolce-gusto.fr
suckerpunchdaily.com
www.healthyskinjournals.com
seedospeaks.com
kinginsuranceagency.com
*.getyourfreegenerator.com
www.dontbankonthebomb.com
brontehistoricalsociety.ca
stgdashboard.lnrproperty.com
stragaproducts.com
www.naturallylivingtoday.com
*.coledenton.com
oneistheteacher.com
www.stragaproducts.com
*.beehnerphotography.com
*.likadesign.com
aesthetics-api.ummanu.health
gypsymoonmusic.com
hadassa-clinician-stg.ummanu.health
*.bloomingbaby4d.com
tnu-patient.ummanu.health
ummanu-api.ummanu.health
*.texasstress.com
www.osstf.on.ca
*.terryrayinsurance.com
eab.finance
deleonservicesgroup.com
aestheticspro.ummanu.health
www.gypsymoonmusic.com
*.roychowthi.com
wbuniversity.online
*.thecraftyhealer.com
login.vodafoneiot.com.au
*.sonomaequity.com
www.sunrisecommunityhealth.org
*.brontehistoricalsociety.ca
rjsinternetmarketing.com
proplan-katze.de

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9XzWDsSHJLnOE0/WO2l
W7wjvseQ2xwppHD3DqEnNvETXWIKCZzUGC6zD3vJVtHdQPQvIE6r6gwjNorhNXq2
bzZRBXawTsFagDGtVe9uwdV50vhbvXwgRSOTPPBQQnQSNjt2saE/Q3ENVIJ2WPIk
1g9DQC7ssfAM3MPGORlGxCUpS10YGRZcF3KuVYl8YL0cFZKQQLq0e0td65gIgTAh
IfDm49YOa6sQHahefjjoADj3TMsoNRW/S/1h+P8pu4pv+a49rXGcI/WO27geCwuq
d2rVZm4PbmSALROvvC2XfoB+2RnpS6+vbEqehesGBJJBvlPhh7XmHxKtArYzhs75
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1685285426454441098418309113320443349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-29 19:42:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 10:37:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20682346665239924571830301303285899782671092535888643506781460610503580984361389263955123370965171574892145256688428881398699401107075275516630934581935667840534266212819447109546892013810747605599072731245059075591297522508879618285157790725460294724019616010832813406254946001966998346527264283380268599623548668524457022858936988893892870126218442218081462261419465087379692471538367663130622055490747523546586657413765320206723917420718544693892402517841478582562532525223412055885739950160237701911447046708075132659169758958384778621420002145793601884541482852313455151898942773408366619455182257679053406271963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager-conductor-pci.sensedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danceumbrella.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writingthoughts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadassa-patient-stg.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imshomecare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty4sevenfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmerb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.good2give.ngo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burgesskilpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danceumbrella.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomingbaby4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karenkernaghanorthophoniewinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menopausechicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osstf.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukbusiness.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexmeadowsministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnauctioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writingthoughts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicholasjwedlow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abarth.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalimudim.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyourfreegenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szmc.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicholasjwedlow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szmcpro.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tostudy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackney2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplan-katze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menopausechicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboundservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleepyhollowtrees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomaequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americaweloveyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalconnextions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinginsuranceagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beehnerphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likadesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terryrayinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto1.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op2016.contrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexmeadowsministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coledenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brooklynjewish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karenkernaghanorthophoniewinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suckerpunchdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnauctioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guigoz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manitobaxray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecraftyhealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyethnutritionsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolce-gusto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbuniversity.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneistheteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackney2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ummanu-clinician.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepyhollowtrees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalconnextions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guigoz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deleonservicesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbusiness.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto1.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoloradohealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abraconlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalimudim.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imshomecare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasstress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purina-adventuros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboundservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanmasleadership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoloradohealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyskinjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manitobaxray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americaweloveyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklynjewish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontbankonthebomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanmasleadership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eab.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjsinternetmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecommunityhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twenty4sevenfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seedospeaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallylivingtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ummanu-patient.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roychowthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abraconlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmerb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purina-adventuros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bassresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burgesskilpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tostudy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolce-gusto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suckerpunchdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyskinjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seedospeaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinginsuranceagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getyourfreegenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbankonthebomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brontehistoricalsociety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgdashboard.lnrproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stragaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturallylivingtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coledenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneistheteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stragaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beehnerphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.likadesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesthetics-api.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsymoonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadassa-clinician-stg.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloomingbaby4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnu-patient.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ummanu-api.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasstress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osstf.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terryrayinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eab.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleonservicesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aestheticspro.ummanu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gypsymoonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roychowthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbuniversity.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecraftyhealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.vodafoneiot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonomaequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecommunityhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brontehistoricalsociety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjsinternetmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplan-katze.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdcc59a98934eaabaf181931d9b142053772c177
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000373a7f20e64124a5a38e7c89cba90889d0375556f9ef888199102e972de0979bb839233474014296efe3bf525a77ed67f477aa09b605e3a3a3c18cf3bfa2644e0d0db1e2f482d2e53bb6af86a90e2a9db41227ab70f3e10713b26e28eb92ee6ead8870e737d9c069caf5cb1827dbe60da0adf49b5afdc868688743f9a5d17efd130dfd95922d64a57578e4f3359ca66d23aeab3200bc742a9e3ee712260bdd9a84c7fa731714c29aaded3af46065cf95948773f05811bc85f2f2af1c7e5ae55bd9dbcc21186d4ea4679cc909abb367d2b208214f5281df4a536006202bdddd47974064659d86a07314f5641fa010e7e79edb7ca19aac884ee2902073cd86180