imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:a1:b5:5a:3f:d4:a3:7d:32:f0:2b:33:18:a4:d2:56 was issued on by GlobalSign nv-sa.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a1:b5:5a:3f:d4:a3:7d:32:f0:2b:33:18:a4:d2:56
Serial Number (int): 2168866056436530304987573716049515094
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1b:f0:77:dd:72:3f:29:aa:13:e5:d6:27:bb:62:06:76:53:6a:f3:3a
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 99:d6:d1:45:81:00:5e:95:01:59:63:12:9b:29:57:b0:cc:1d:84:6d
Fingerprint (sha256): 08:bf:a6:08:7c:e6:39:e2:5f:0c:4c:9a:a6:9c:cc:ba:e8:f8:e0:51:60:f0:da:35:e2:2c:fb:6d:7c:d5:71:3c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cropriskservices.com
*.hip1api.aig.com
*.glatfelterpublicentities.com
*.serviceplanspurchase.com
*.winflexapi.aig.com
manage.aig.co.il
*.aigtheftandloss.ch
access.aig.co.il
statistics.aig.co.il
intagent.aig.co.jp
vpx.aig.co.il
*.aigtheftandloss.se
*.hip7api.aig.com
*.aig.co.jp
formsts.aig.co.il
nmalltst.aig.co.il
*.valic.com
serviceplanspurchase.com
*.sunamerica.com
dev-hip11api.aig.co.jp
*.dmp.aig.com
myatlas.asia
*.websvcs.uat.travelguard.com
*.websvcs.dev.travelguard.com
sit-hip11api.aig.co.jp
*.wwiprate.com
uat-hip11api.aig.co.jp
*.websvcs.travelguard.ca
my.aig.co.il
*.websvcs.dev.travelguard.ca
travelguardagents.ca
ptagcsstintagent.aig.co.jp
*.aig.com
*.aig.com.es
vpn.aig.co.il
aigtheftandloss.nl
*.api.aig.com
aigtheftandloss.no
imperva.com
*.websvcs.uat.travelguard.ca
*.aighomeprotection.com
*.corebridgefinancial.com
aigtheftandloss.nz
*.retirestronger.com
nmmediatst.aig.co.il
*.emea-sme.nprd.aig.com
*.hip9api.aig.com
*.westernworld.com
*.commercialnprd.api.aig.com
*.polaris401k.com
*.glatfelterhealthcare.com
*.myatlas.asia
glatfelterpublicentities.com
*.aigtheftandloss.nz
*.apps.layahealthcare.ie
*.api.valic.com
*.dmp.corebridgefinancial.com
*.aigtheftandloss.nl
polaris401k.com
*.uat.travelguard.com
*.aigtheftandloss.no
*.serviceplanpurchase.com
*.customerpltfm.aig.com
travel.aig.co.il
*.securecmessage.aig.com
aigtheftandloss.ie
serviceplanpurchase.com
retirestronger.com
*.dev.travelguard.com
*.aigtheftandloss.ie
*.vfis.com
www-400.aig.com.tw
*.travelguard.com
*.aig.com.au
mgaccess.aig.co.il
corebridgefinancial.com
*.glatfelterministrycare.com
nmrdn.aig.co.il
glatfelterministrycare.com
*.hip7apima.aig.com
*.hip9apima.aig.com
forms.aig.co.il
*.producermanagementportal.aig.com
*.travelguardagents.ca
glatfelterhealthcare.com
*.websvcs.travelguard.com
*.aigseguros.com.br
*.aig.com.sg
aigtheftandloss.se
*.americanhome-digital.jp
aigtheftandloss.ch
aighomeprotection.com
intagentcert.aig.co.jp
www.cropriskservices.com
model-my.valic.com
*.paymentvendor.ws.safg.com
intagentcertpt.aig.co.jp

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCcfukE37UojTxPWK3Co
lwmJ8+y6lhpYTQv7iI+6aBeic98RUn8UqEkxxw7hHuyP6aJ4XHVT18lHiL/HweRo
MU5sAtkmH+kscziPmZjN1D2Wbf8qgE6AcFlS196HwsbWwEBw1dUGDzDY8JtpaTY+
k9zwVj82AQbFFZPOrzuYuRNn0L4P5LOwVZCRBdHpw4w2O0eay9Lj0lzCiTVZzftR
eX7eSkRWT/yVmmgVOBBcG+Vto73J/CWVEal4WLTVN4RuwBHDK3LS1o99zay4LCqG
iSF9hLGNRy4/tSZaDe4SeLSso/oMaKyGeS4ZeeNyju3HQxUeajY9Wd9pDV7tgthY
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2168866056436530304987573716049515094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 14:26:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 14:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20722374746212791652543761403199580699002921478148082785304838800426966640297383756875301478298088510120600700064543753216802101692645907873775217422897502311779449833317418318726265497373199175141983038560341984520811765390560116940966916910995064292481889034822606742388941863580570346054254294131254316507490262580285307703428663926409515243455233436896365094895901221631707955441254155506843747612219553897022132693662303509221123076164824504508567898077748349334577135587992938841655802481757348802847285692906597509653689467435519287341637246548235551775289475743827248392255764365230902039173427169740006643919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip1api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterpublicentities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winflexapi.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statistics.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagent.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpx.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip7api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsts.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmalltst.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myatlas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.uat.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.dev.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwiprate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.dev.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelguardagents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptagcsstintagent.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.uat.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aighomeprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retirestronger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmmediatst.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emea-sme.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip9api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialnprd.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polaris401k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myatlas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterpublicentities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polaris401k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securecmessage.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirestronger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-400.aig.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgaccess.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterministrycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmrdn.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterministrycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip7apima.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip9apima.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.producermanagementportal.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelguardagents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-digital.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aighomeprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagentcert.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'model-my.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paymentvendor.ws.safg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagentcertpt.aig.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bf077dd723f29aa13e5d627bb620676536af33a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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