imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:56:34:25:0c:8f:7b:3b:e0:99:c0:5f:64:6d:67:30 was issued on by GlobalSign nv-sa.

With 148 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:56:34:25:0c:8f:7b:3b:e0:99:c0:5f:64:6d:67:30
Serial Number (int): 1776823146247592429280470326563399472
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ee:cd:5a:7d:08:6d:cc:16:d6:69:fe:6e:e7:94:54:71:a6:6b:b6:09
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 4c:f2:f4:ba:fe:c6:f4:62:c4:f7:67:44:d7:44:b7:94:08:14:c1:56
Fingerprint (sha256): 08:fd:6b:67:fe:78:ce:c0:79:f0:b4:b4:29:32:e9:80:ef:b8:ea:47:5f:f5:d3:68:0e:e1:8a:bb:2f:07:b6:54

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

148

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

completecareplus.com
dev.api.serviceplancenter.com
*.cdpfnol.nprd.aig.com
gigcrmtestauth.glatfelters.com
*.serviceplanspurchase.com
integration02.layalifeinsurance.ie
gigcrmtest.glatfelters.com
matrixdirect.com
aigtheftandloss.dk
gigcrmproddws.glatfelters.com
*.myaig.com
*.aig.de
*.aigrs.com
comfortprotectplans.com
*.servicenetdirect.com
*.vfismisslou.com
aigtheftandloss.de
*.aig.co.jp
app.st3.aiglife.co.uk
*.vendor.ws.safg.com
*.theftandloss.cl
test.api.serviceplancenter.com
*.matrixdirect.com
aigtheftandloss.uk
*.valic.com
serviceplanspurchase.com
hdhvacwarranty.com
serviceplanhub.com
*.glatfelters.com
*.responderhelp.com
*.sunamericafunds.com
claims.comfortsureplan.com
test.comfortsureplan.com
test.mechanicalcontractorschoice.com
*.idp.aig.com
*.api.aig.net
ws-tst.glatfelters.com
mutual-aid.vfis.com
*.vfiscanada.com
*.aigtheftandloss.at
hvaccoverageverification.com
*.policyservice.ws.safg.com
test-claims.comfortsureplan.com
*.hdhvacwarranty.com
*.websvcs.qa.travelguard.ca
*.seguros.nprd.aig.com.es
*.aigtheftandloss.com.au
claims.completecareplus.com
test-claims.contractorspreferred.com
*.pcgbroker.aig.com
secureapp.glatfelters.com
*.aig.com
*.completecareplus.com
*.aigtheftandloss.uk
aigtheftandloss.fi
integration01.layahealthcare.ie
imperva.com
live.cloud.api.aig.net
dev.cloud.api.aig.net
servicenetdirect.com
*.serviceplans.com
iafcf.org
aig.co.il
*.aigtheftandloss.de
*.bipro.aig.de
webservices.servicenetsecure.com
*.aigtheftandloss.dk
*.glatfelterhealthcarepractice.com
*.vfisal.com
vfismichigan.com
wuebanet.de
claims.climateshieldcomplete.com
*.aig.co.il
theftandloss.cl
glatfelters.com
test.climateshieldcomplete.com
*.glatfelterpublicpractice.com
gigcrmtestdws.glatfelters.com
mymemberguard.com
vfispsw.glatfelterspecialtybenefits.com
*.mymemberguard.com
*.websvcs.qa.travelguard.com
50years.vfis.com
*.glatfelterspecialtybenefits.com
www.completecareplus.com
vfismidwest.com
*.glatfelterreligiouspractice.com
*.tga-ins.com
gigcrmprodauth.glatfelters.com
*.iafcf.org
test.servicenetsecure.com
myaig.com
*.qa.travelguard.com
qa.aigtheftandloss.com.au
vfisaz.com
*.sndirect.com
*.vfisaz.com
gigcrmprod.glatfelters.com
maintenance.glatfelters.com
*.hvaccoverageverification.com
glatfelterspecialtybenefits.com
test.mycomfortshield.com
*.snapplerefund.com
*.aigtheftandloss.fi
claims.mechanicalcontractorschoice.com
*.pcgbroker.nprd.aig.com
*.crs.farm
test-claims.mycomfortshield.com
*.stage.crs.farm
*.customerpltfm.corebridgefinancial.com
snapplerefund.com
ws.glatfelters.com
qa.aigtheftandloss.uk
*.validusre.bm
*.customerpltfm.cropriskservices.com
*.dmp.nprd.aiginsurance.ca
qa.serviceplanhub.com
*.vfismidwest.com
*.vfismichigan.com
test-claims.completecareplus.com
*.serviceplanhub.com
secureapptest.glatfelters.com
*.yourserviceplan.com
*.wuebanet.de
ws-dev.glatfelters.com
aigtheftandloss.com.au
integration02.layahealthcare.ie
test.aiguswarranty.com
vfismisslou.com
aigtheftandloss.at
qa.aigtheftandloss.de
test.serviceplancenter.com
sndirect.com
test-claims.mechanicalcontractorschoice.com
*.hip12api.aig.com
sunamericafunds.com
vfiscanada.com
claims.contractorspreferred.com
*.glatfeltercommercialambulance.com
*.comfortprotectplans.com
*.cloud.api.aig.net
*.hip2api.aig.com
*.aig.com.br
integration01.layalifeinsurance.ie
vfisal.com
www.responderhelp.com
test.contractorspreferred.com
test-claims.climateshieldcomplete.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+TF4o9lbEC1rTiM3q7o
h41UMi9+eRszOejEX+O5TsD2zp6EoWONrq8xU3XLWCwRIJj9ePEPGh7JTIQTDa4a
COVJGT6SCFBdo9UOm6L8UZzrrke+fr51S2v9ykFOpXQ5xHu1We04zOjb7wheVa9l
8JcFux/OhbqmalNKKsaVPXsKlD4Bhn9KCsxlimhUSunrhHA1Y67MRECJypodDy0I
A8IhBjIpQ8eFrZ1+azbvI7mn2JEoW+thPb23zqGmRr0UURhf5jO+HYUgxtyy5XdX
/76d/yuSJU7tEhh+KhEjC0tdF6u+Ci6zikiXuenzYIlLeBGtxdR10fPI3xMdmAGc
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1776823146247592429280470326563399472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 14:06:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 14:06:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26749094512927889799703018377944588914850525025025548034588571634021137306559067457033048765781406803730837212574330382401673845901508839324977207385544727232925893570749630189236486378011520231890820837003417704985664529030868357238838733937578140033451285122900645280039123769210603711561637208995003813956548033943453761824404380019207545321641152529841833427749502039315251442795591780207491584164330654343550082572328094661402191729769555562328414335768207853700200274055081231961729265802730900286182810501372582507606844552074913164061369382814634412860257095304052428970700410518834617008583739799690367048757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3516 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpfnol.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtestauth.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration02.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtest.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmproddws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortprotectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicenetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismisslou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st3.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendor.ws.safg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theftandloss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.responderhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunamericafunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-tst.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutual-aid.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfiscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvaccoverageverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policyservice.ws.safg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.qa.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.nprd.aig.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgbroker.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureapp.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration01.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iafcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bipro.aig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterhealthcarepractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuebanet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theftandloss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterpublicpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtestdws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymemberguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfispsw.glatfelterspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymemberguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.qa.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50years.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterreligiouspractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tga-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmprodauth.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iafcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfisaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfisaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmprod.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvaccoverageverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgbroker.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crs.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.crs.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.validusre.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.nprd.aiginsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureapptest.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wuebanet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-dev.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration02.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismisslou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip12api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunamericafunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfiscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfeltercommercialambulance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortprotectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip2api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration01.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.responderhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eecd5a7d086dcc16d669fe6ee7945471a66bb609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002eb97bd453939306fe32bdffd6ed44782fa3ba773a0d22f245298e1046dcc5bcda9743c8c344371301554237978fc1e5905a7f3a289a55203ef02dfebd0ee52f834d4b3b5f4012b9b1f36f4d4c65dc30abb89f07f1527561afb882d2d6410b483b59f06db28bf9d36bd5fe5dd3fd0d849b161ff978d3a1f238fa326336b74efccf26c7407bceb9251aadc3e956905522c682e3d1d4ff81515cf213becb8e4e1734cad9bd664a8528a016deb6eb0499badd6a6027aea4920935f40f7a27572112d9cd225b6d8f81387ab138e3b2837aba3dd636d3a450d09e2e76b618ae2faba982545299e03d38c570883823777b5dfe461c624b4e2776ce97ae87fda981de52