imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:bd:91:3e:b7:ad:47:03:45:8d:4a:24:ee:03:1c:e0 was issued on by GlobalSign nv-sa.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bd:91:3e:b7:ad:47:03:45:8d:4a:24:ee:03:1c:e0
Serial Number (int): 2313518020431839983768211890267954400
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 85:27:6f:27:dc:77:25:e4:a9:12:85:fe:dd:ca:a5:05:43:88:4b:86
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 4d:99:88:78:0c:f3:04:d5:c7:62:b7:14:42:0b:25:5a:ca:e0:1f:70
Fingerprint (sha256): 06:67:9e:a0:e1:27:d4:31:80:1f:db:b6:9f:41:50:bc:fc:3b:b1:c5:21:30:3f:60:03:1b:e8:f8:32:61:88:05

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate imperva.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.specialprograms.powerschool.com
decisioninsite-staging.com
*.ma.schoolspring.com
*.west.schoolspring.com
*.idaho.schoolspring.com
*.louisianateacherprep.com
*.reporting.demo.powerschool.com
*.schoolspring.com
*.veracode.schoolspring.com
*.mizuni.com
*.demo.schoolspring.com
tedk12.com
*.eschoolsolutions.com
*.staging.powerschoolcorp.com
*.efinanceplus.demo.powerschool.com
*.teachiowa.schoolspring.com
newmexicoschools.com
*.powerschool-registration-by-infosnap.com
louisianateacherprep.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.orchard.schoolspring.com
*.qa-use-01-env1.unified.powerschoolcorp.com
dcschoolreportcard.org
*.tedk12.com
*.maine.schoolspring.com
*.newmexicoschools.com
*.ohiok12jobs.schoolspring.com
*.tnedu.gov
*.support.schoolspring.com
*.tembostaging.com
*.api.schoolspring.com
*.decisioninsite-staging.com
*.demo.mizuni.com
*.registration-essential.staging.powerschool.com
*.tembotools.com
*.txcharter.schoolspring.com
*.ted.peopleadmin.com
*.dcschoolreportcard.org
*.oregon.schoolspring.com
*.enrollindy.org
*.jags.schoolspring.com
*.tedapi.co
*.tedk12.ca
*.atenterprise.powerschool.com
*.esc12.schoolspring.com
*.hrms.powerschool.com
*.hosting.l4u.com
*.sandbox.schoolspring.com
*.atrieveerp.com
*.businessplus.powerschool.com
*.registration-essential.powerschool.com
tedapi.co
tedk12.ca
*.assessment.powerschool.com
*.kentucky.schoolspring.com
*.east.schoolspring.com
*.tembo.dev
*.fastgrowthtexas.schoolspring.com
*.bp.powerschool.com
*.rhodeisland.schoolspring.com
*.teachphilly.schoolspring.com
imperva.com
*.reportmail.l4u.com
*.talented.schoolspring.com
*.perfplusk12.com
*.esc16.schoolspring.com
*.teachnc.schoolspring.com
*.l4u.com
*.decisioninsite.com
*.arkansas.schoolspring.com
*.vermont.schoolspring.com
*.colorado.schoolspring.com
schoolspring.com
*.dex.powerschoolcorp.com
*.iowa.schoolspring.com
*.produs.powerschoolcorp.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwslih/LCdYU5m3/95aAn
sPLpHjox4vmpLiUekweOfm5gJP3DG+c3OrOLzRvM3/wxB8pvXIiBId/oo+L9lkvA
jXavyFuC3bncLocEu2mi383hjdNm5Cdyi2SpIZ83leK28HzRew9aKBCB9WgqBEWO
ivSAWvY+CthbvNRnFv0ZiyIC0c1wBnxoj6XrST1WZlQKW8rXyyJX4hWwhOyG3SLG
vqny0eQw36SYLLh3KJExfuYVsZWKFP/omHSMLc9o8zuwsQpD/x9jLxNXRghZXZPE
vO5WzCNlgfMIJIEfjaIKXf8kUDvZDOw6EOY8RagEl0TM9inRnamKlfMkxNwycHPX
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2313518020431839983768211890267954400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 21:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 12:52:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24589537752356038518990835591334149067251786583959340899297123961193423683134305758850750570397775905040376367803949932386992813085894970230520513313366549182516854578316361187669187232120682270431745487396052219821649189994500214521221160576110878556725275108057036286340546181355478683519958787058361291991666302677256730865657237740743641985838062000986955493071810936766667823795932490249575658766234754615733787913499292639154969719263297192497412947184777311677448184449121688725933115116265410063833315699835303758099386255324792311434459919784384615631031083605464189924596250250591533047478087257559389165387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialprograms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ma.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.west.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idaho.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracode.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachiowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool-registration-by-infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchard.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maine.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiok12jobs.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnedu.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembostaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration-essential.staging.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txcharter.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregon.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enrollindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jags.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atenterprise.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc12.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration-essential.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedapi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assessment.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentucky.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.east.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastgrowthtexas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhodeisland.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachphilly.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reportmail.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talented.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc16.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachnc.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkansas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vermont.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorado.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dex.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.produs.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85276f27dc7725e4a91285feddcaa50543884b86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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