imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:10:8e:c3:10:65:dd:54:8e:be:48:3f:3e:34:29:b3 was issued on by GlobalSign nv-sa.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:10:8e:c3:10:65:dd:54:8e:be:48:3f:3e:34:29:b3
Serial Number (int): 1415200302251788801433879317161716147
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 36:54:82:ca:f2:3f:eb:c6:1f:ad:94:88:fc:c8:80:40:4e:90:77:9e
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): 77:37:7b:3d:40:48:a7:16:e6:fc:8e:57:bf:64:41:e0:ed:5e:a6:41
Fingerprint (sha256): 05:d2:d9:49:ae:69:29:76:33:a4:6b:7b:0d:8f:97:26:a7:89:c9:16:02:87:4c:30:5c:dd:72:de:f8:2b:1b:5c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www4.rentcentric.com
plans.wellingtonfl.gov
vivo.casino
frontiersusa.org
rentcentric.com
st-my.gepower.com
*.bwproducers.com
www.rentcentric.com
*.rentcentric.com
sphere.hacienda.gob.mx
bwproducers.com
*.foremoststar.com
*.frontiersusa.org
www.vivo.casino
imperva.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3V5vOAGcs2Me/OZ2QvO
SKHdrcs8Io91xM1R8lWCbzqRrXaDyV79V7taac3XdbDxInP1M+IkKeM3sh5pOBSt
WyG/aypM1jnpLcKzQ56/ShbfZZqyMy9l0UqyHQ2/Kos1f9r22ALBVKqw5QcZwfuc
KPYRBRAJbnI0v0fISObFz1PlYPch/Nw6DtxB4SiQMeS+MiRHVR1E3LuAJiHHMeep
ZI21I4JW0WVawqh9OT0sZn5t2OxMK9CBO6oZK7KYh/AbFxOe3j2h0cVD3A2MYTAN
fs5F5ac+KmtfXAO6TXk7S7WMEqhTfy4BUDYozR6CyI4Gv9AmOPx2uGIPemQOutQi
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1415200302251788801433879317161716147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-10 01:25:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 16:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23664492375622972625180248912072611479551578543904356074645450219557751604234636723962997966231309398021403848088737265825550129737657078554519302095303260081666022357101408835429065685475848348539458064778236629650715554649857294297146487515940405503453046446370155180316842455155784915251457367038217262854667999389784846159013785952857233450454097726431409742807288919965401266388141927755476738684031286197495949565843441394655099473132515147259676574375018311872617215952139314154343461670140234114350433532377051113228414159872296952617050442774004382435251111298948504124334078558426789168565585190279458333197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plans.wellingtonfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivo.casino'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-my.gepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwproducers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentcentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphere.hacienda.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwproducers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foremoststar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivo.casino'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							365482caf23febc61fad9488fcc880404e90779e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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