imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:1a:20:15:5d:85:52:07:e1:c0:40:37:af:7e:4f:11 was issued on by GlobalSign nv-sa.

With 137 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1a:20:15:5d:85:52:07:e1:c0:40:37:af:7e:4f:11
Serial Number (int): 1464878443948831471089969101793021713
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4f:52:74:bd:a6:c7:e9:ca:d4:11:de:a2:04:ef:08:66:ff:94:5d:a7
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): b3:f2:18:a0:e8:4a:ef:ec:c1:dc:9e:16:59:8a:c4:97:b3:05:1c:b8
Fingerprint (sha256): 05:4b:fc:22:ea:29:1e:13:20:87:14:d6:0a:7c:42:69:69:60:37:5c:be:68:30:5b:0d:a2:e7:37:11:36:8e:17

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

137

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

klab.tch.harvard.edu
tech.childrenshospital.org
covidcard.tch.harvard.edu
chbft.childrens.harvard.edu
soptestdmz.chboston.org
uchd.chboston.org
chestnuthillpeds.com
*.watertownpediatrician.com
www.brooklinepediatrics.com
kossowsky.tch.harvard.edu
medfordpedi.com
halfpintsdhq.childrens.harvard.edu
accessmanager.chboston.org
c3po-r3.chboston.org
chatwithchildrenstest.chboston.org
www.hydeparkpedi.com
www.pediatricassociatesofmalden.com
jvals.chboston.org
twist.chboston.org
pedinw.org
fnndsc.childrens.harvard.edu
sop.chboston.org
www.impaccstudy.org
extapps2.childrenshospital.org
phoda.chboston.org
biobank.childrens.harvard.edu
test.pathways.childrenshospital.org
websso.childrenshospital.org
pl-gic-dev.childrens.harvard.edu
devmobileconnect.childrens.harvard.edu
www.pedinw.org
carppo.tch.harvard.edu
crisiscare.childrens.harvard.edu
myhealthrecordtest.childrenshospital.org
watertownpediatrician.com
wecopetest.chboston.org
webssotest.childrenshospital.org
informqa2.tch.harvard.edu
pedinw.com
divenn.tch.harvard.edu
*.pediatricsatnewtonwellesley.com
biomarkers.tch.harvard.edu
testextapps2.childrenshospital.org
*.vrheum.org
experiencejournal.childrenshospital.org
www.bchmedia.org
bwaterpeds.com
childrenshospital.org
apps.childrenshospital.org
*.phcapediatrics.com
imperva.com
iqic.chboston.org
hmptestdmz.chboston.org
rebeccahornepediatrics.com
chiarle.tch.harvard.edu
mcmanusgroup.tch.harvard.edu
chatwithchildrens.chboston.org
kohane.tch.harvard.edu
*.tch.harvard.edu
www.greaterlowellpediatrics.com
*.childrens.harvard.edu
researchstudy1.tch.harvard.edu
bostonchildrens.org
neponsetvalleypediatrics.com
tempwww.childrenshospital.org
rstudio.impaccstudy.org
pediatricassociatesofmalden.com
*.neponsetvalleypediatrics.com
postroadpediatrics.com
informqarpt2.tch.harvard.edu
www.bostonchildrens.org
www.rebeccahornepediatrics.com
informprodrpt2.tch.harvard.edu
www.chestnuthillpeds.com
ashenbergpedi.com
es.childrenshospital.org
phcapediatrics.com
chpptest.tch.harvard.edu
*.needhampediatrics.com
jira.chppoc.org
mychart.childrenshospital.org
test.api-pathways.childrenshospital.org
www.bwaterpeds.com
pediatricsatnewtonwellesley.com
www.postroadpediatrics.com
redcap.tch.harvard.edu
pl-gic.childrens.harvard.edu
growthcalctest.chip.org
testapps.childrenshospital.org
phodatest.chboston.org
www.briarpatchpedi.com
iqicdb.chboston.org
bostonchildrenshospital.org
accessmanagertest.chboston.org
www.bostonchildrenshospital.org
*.service-workbench-dev.childrens.harvard.edu
1180pediatrics.com
*.ashenbergpedi.com
singularpediatrics.com
iap.tch.harvard.edu
bchmedia.org
greaterlowellpediatrics.com
pl-portal.childrens.harvard.edu
testextapps.childrenshospital.org
briarpatchpedi.com
jvalstest.chboston.org
hmp.chboston.org
precisionmedicine.bostonchildrens.org
*.hcbchvault.org
www.pedinw.com
*.childrenshospital.org
*.service-workbench.childrens.harvard.edu
*.bostonchildrens.org
www.singularpediatrics.com
*.chppoc.org
brooklinepediatrics.com
hcbchvault.org
commonwealthpediatrics.com
mycharttest.childrenshospital.org
covidpass.tch.harvard.edu
www.1180pediatrics.com
hydeparkpedi.com
*.belmontcambridgehealthcare.com
impaccstudy.org
*.immunevista.childrens.harvard.edu
mypatientstest.childrenshospital.org
growthcalc.chip.org
vrheum.org
zscore.chboston.org
informprod2.tch.harvard.edu
mypatients.childrenshospital.org
needhampediatrics.com
belmontcambridgehealthcare.com
wecope.chboston.org
*.chboston.org
www.commonwealthpediatrics.com
*.medfordpedi.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPQZau2wdnWBHQYBm8y
7984LbJAGLckCc1FkbzLTKZy7KzZikmKNbC1LsQNiEE89Ry1b8P2Hy7yfccVvxsc
EpdKJbEYM5xiklBAt8B3NMU65g5IZvDJMLA/0QUK6mPHTiM+CQ6roTzR+rZ2KXmC
uAzIm997ZzCBnOVkAVXMUd+pkcek91CbZqo4UATG/ea54Gb9gQVUNZKv6IFGq4Pg
b6a6J/Fspr+D4YOooHj1o6+IREGyZi7b3EF+82O928KdvB9x6LwoAnkSjaUfso/P
nylthmuQR3PDU0G1F4QF0dN2UlqQF+mMHlJI97eqZQRyL1eQV5+Q8I//iWxARPBr
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1464878443948831471089969101793021713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 16:39:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 16:39:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21107347390342362143697306646701225806933126792632426717754621728351805428164391648787058806456658401772528311853165684197593370695064697138113279247356236975001842834466895581857047201158656767231710432603356881721755730855890320070024772949102515487102087207240965426213663771622068966742869976413000949509231895268884015091361380454973588762697356219653467873665944014314930598208332194415078206407021019372558060380705642696047377176961014104912449817731578708095233187367312240920917618002070137366460185499634215921534977013783166533718857246629656315050259249778892958916213483292719522551509195175620735167379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klab.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidcard.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chbft.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soptestdmz.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchd.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestnuthillpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watertownpediatrician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklinepediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kossowsky.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medfordpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfpintsdhq.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessmanager.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c3po-r3.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatwithchildrenstest.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydeparkpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pediatricassociatesofmalden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvals.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twist.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedinw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnndsc.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sop.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impaccstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extapps2.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoda.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobank.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.pathways.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websso.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-gic-dev.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devmobileconnect.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedinw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carppo.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisiscare.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthrecordtest.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watertownpediatrician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wecopetest.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webssotest.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informqa2.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedinw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divenn.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pediatricsatnewtonwellesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomarkers.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testextapps2.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrheum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiencejournal.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwaterpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phcapediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqic.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmptestdmz.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebeccahornepediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiarle.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcmanusgroup.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatwithchildrens.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohane.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterlowellpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchstudy1.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neponsetvalleypediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempwww.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstudio.impaccstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatricassociatesofmalden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neponsetvalleypediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postroadpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informqarpt2.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebeccahornepediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informprodrpt2.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chestnuthillpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashenbergpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phcapediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chpptest.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.needhampediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.chppoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychart.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api-pathways.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bwaterpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatricsatnewtonwellesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postroadpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcap.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-gic.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthcalctest.chip.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapps.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phodatest.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briarpatchpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqicdb.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonchildrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessmanagertest.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostonchildrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.service-workbench-dev.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1180pediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashenbergpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singularpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iap.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterlowellpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-portal.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testextapps.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briarpatchpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvalstest.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmp.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisionmedicine.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hcbchvault.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedinw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.service-workbench.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singularpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chppoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklinepediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcbchvault.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonwealthpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycharttest.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidpass.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1180pediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydeparkpedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belmontcambridgehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impaccstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immunevista.childrens.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypatientstest.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthcalc.chip.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrheum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zscore.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informprod2.tch.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypatients.childrenshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needhampediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmontcambridgehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wecope.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commonwealthpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medfordpedi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f5274bda6c7e9cad411dea204ef0866ff945da7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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