imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:3d:71:ba:9e:f5:86:90:21:cc:a6:6d:bf:eb:e7:e9 was issued on by GlobalSign nv-sa.

With 116 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:3d:71:ba:9e:f5:86:90:21:cc:a6:6d:bf:eb:e7:e9
Serial Number (int): 1648264802074434483622326416687491049
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:68:d1:d6:ab:06:3f:e3:a1:08:f9:55:3c:d4:c4:6a:b3:bd:5c:c2
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 6f:34:ea:a1:83:4c:a3:65:40:90:09:d4:03:4c:4e:ee:d4:a8:fd:47
Fingerprint (sha256): 06:cc:f8:24:97:11:93:18:3c:b3:23:70:28:bf:10:06:89:2f:01:14:50:a6:c7:55:8f:f8:af:4e:cb:1a:b2:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

116

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chernigivske.com
*.hub.donuslabs.net
*.nilebreweries.com
www.abwp.us
*.metrics.ab-inbev.com
backus-programa.pe
budnetec.com
www.stellaperfectpour.com
nilebreweries.com
*.mybees-platform.com
*.nutrlusa.com
sabfoundation.co.za
*.fritesartois.com
kirinusa.beer
*.tadaexperiences.co.uk
*.mydiekirch.lu
180-360.ab-inbev.com
drinkomission.com
tadaexperiences.co.uk
dbbrewingcompany.com
*.cbeqa.com
*.hoegaarden.co.il
www.labattbettertogether.ca
keepitbrightperks.com
planbees.io
www.keepitbrightperks.com
*.tripelkarmeliet.com
*.soudonus.com.br
brahma.com.py
www.chernigivske.com
*.consumoresponsable.com.mx
www.beyondbeerrefresh.com
*.backus-programa.pe
www.hooptea.com
nutrlusa.com
*.portal.tadaexperiences.be
labattbettertogether.ca
*.becks.it
imperva.com
mydiekirch.lu
qa.api.abwp.us
jetskol.com
abwp.us
*.abwp.us
leffe.co.il
nfl.budlight.com
labattmobility.com
*.budlight.com
ciscobrewers.com
*.cidrerielacroix.com
fritesartois.com
hooptea.com
qa.abwp.us
www.wholesalerstrategicsourcing.com
*.labattmobilityqa.com
stellaperfectpourday.com
*.dbbrewingcompany.com
*.brahma.com.py
cheerscommunity.com
beyondbeerrefresh.com
beesbank.com.br
www.stellaperfectpourday.com
*.membeers.com
*.stellaartois.co.il
*.millstreetbrewery.com
*.planbees.io
*.stg.beesbank.com.br
biobrew.com
*.budpayments.com
stellaartois.co.il
*.abverify.com
budexchange.com
*.budnetec.com
www.vezasur.com
*.biobrew.com
www.ciscobrewers.com
*.budexchange.com
*.bees.com
*.cbeapi.com
wholesalerstrategicsourcing.com
*.beesbank.com.br
cbeapi.com
neonharddrinks.com
barbarian.pe
www.kirinusa.beer
www.drinkneonburst.com
*.anheuser-busch.com
stellaperfectpour.com
www.wynwoodbrewing.com
labattmobilityqa.com
mobile.abinbevefes.com
*.dev.ze.delivery
cbeqa.com
vezasur.com
budpayments.com
membeers.com
www.drinkomission.com
*.alchemy.beertech.com
pagamentos-caixa-tmp.soudonus.com.br
www.neonharddrinks.com
cidrerielacroix.com
becks.it
drinkneonburst.com
backoffice.budlight.com
consumoresponsable.com.mx
*.leffe.co.il
www.cheerscommunity.com
wynwoodbrewing.com
*.ab-inbev.com
*.labattmobility.com
*.jetskol.com
*.sabfoundation.co.za
*.dr.mybees-platform.dev
hoegaarden.co.il
*.180-360.ab-inbev.com
*.barbarian.pe

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijroxNxn+hWdnAlaDtlr
SvjpvX+eDOKiz+gXY0fW3UPRq7yeqlHYmgTzdhvH2p9ylMF+qTVvVtPAzzIiZd3d
5t4OykLfKDob5d7IVuKCHRPQCBBkBGvz+OpEQ/uanZLMr0bliQPZ0KGTkt+SrZA5
Vo1gDVSb505ieFixGQqklf1NVmn27KbCpa8sUPVXFv1o60RtE0S7DyJA6XH/k3vQ
bLdFnFJQpfOOUYGb7ZQcN2KIDCFGz5xGjumSPVmxodgnT9TjfwvXCxLa7nkHfVtp
ReVP79mnonUnLPpYGPotA7hZvtkSdeQV+yk282xdNzmWj+v3439QU11GjfYSO5sV
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1648264802074434483622326416687491049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 14:15:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 14:15:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17449935321074243758535065911305401414190116656118092711395321710666789832682370054396539852597051013623960032055478322484379649350648874219493464675732538309222078226868587813282733259306155677112880357341329227087836494869404534680173887964715259808821053758791453788246569699950724804885681416800500312509798263644724094719730706874302531891223998449198235375128973579342599970696440718401303555935894761082144268508861929493621259118359457370801133042036041800375880523258911931823135489626660530245548311476011499839620821824499457837081517774158340983265287415215454634539219620282229087023937328230659891336511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.donuslabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybees-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbbrewingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripelkarmeliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.tadaexperiences.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaperfectpourday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dbbrewingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellaperfectpourday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstreetbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarian.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anheuser-busch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.abinbevefes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ze.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alchemy.beertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamentos-caixa-tmp.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.mybees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbarian.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0668d1d6ab063fe3a108f9553cd4c46ab3bd5cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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