imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:22:d1:f0:4a:f7:db:d9:e6:b7:3c:83:59:f1:05:c0 was issued on by GlobalSign nv-sa.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:22:d1:f0:4a:f7:db:d9:e6:b7:3c:83:59:f1:05:c0
Serial Number (int): 1510024150542800256885855384910235072
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5f:d8:d6:f3:92:7a:31:22:3c:56:da:61:bd:2f:7a:02:29:b6:01:30
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 0e:ff:77:e6:5d:b2:4b:43:76:04:9e:df:e6:d4:d0:ce:ae:10:16:95
Fingerprint (sha256): 0a:8b:c6:0f:18:1b:e1:2e:7b:a9:0b:6e:6e:a6:5e:37:c3:ae:cd:c8:c9:9d:ba:f9:15:3b:07:65:e7:72:54:34

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cropriskservices.com
*.polaris401k.com
*.hip1api.aig.com
*.glatfelterpublicentities.com
*.serviceplanspurchase.com
*.winflexapi.aig.com
access.aig.co.il
*.glatfelterhealthcare.com
*.myatlas.asia
glatfelterpublicentities.com
intagent.aig.co.jp
vpx.aig.co.il
*.apps.layahealthcare.ie
*.hip7api.aig.com
*.aig.co.jp
*.api.valic.com
formsts.aig.co.il
polaris401k.com
*.valic.com
serviceplanspurchase.com
*.uat.travelguard.com
dev-hip11api.aig.co.jp
*.serviceplanpurchase.com
*.customerpltfm.aig.com
*.dmp.aig.com
travel.aig.co.il
*.securecmessage.aig.com
myatlas.asia
*.websvcs.uat.travelguard.com
*.websvcs.dev.travelguard.com
sit-hip11api.aig.co.jp
serviceplanpurchase.com
*.dev.travelguard.com
uat-hip11api.aig.co.jp
*.vfis.com
www-400.aig.com.tw
*.travelguard.com
*.websvcs.travelguard.ca
travelguardagents.ca
ptagcsstintagent.aig.co.jp
*.aig.com
*.aig.com.es
*.glatfelterministrycare.com
*.api.aig.com
imperva.com
*.websvcs.uat.travelguard.ca
glatfelterministrycare.com
*.hip7apima.aig.com
*.hip9apima.aig.com
*.aighomeprotection.com
forms.aig.co.il
*.corebridgefinancial.com
*.producermanagementportal.aig.com
*.travelguardagents.ca
glatfelterhealthcare.com
*.websvcs.travelguard.com
*.aigseguros.com.br
*.aig.com.sg
*.americanhome-digital.jp
*.cloud.api.valic.com
aighomeprotection.com
intagentcert.aig.co.jp
www.cropriskservices.com
*.hip9api.aig.com
*.commercialnprd.api.aig.com
model-my.valic.com
*.paymentvendor.ws.safg.com
intagentcertpt.aig.co.jp

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5nRgau8XEFJbzmhlsw4
80CJlQlwxLfeBG6clRD6SWmP9fKyuu/pjF4bhD0uO8lTTjpjWlIgbTQe5Cj+uc+I
AUsGjvWZAj7iq8qQhs2ZXV7uhb2cKF/nAPjY4tXNMHW1oI7jelxDu+K59Rw3x+Kj
wQLxKYFCYfS0G63PD6FAkCqRvt0hWx+rOHOcg8r/biTZhj4WoHnTTkrdTxEArBT6
RJ/jm0EYIGaICo5k+MXMMUmTEpZ5EemdzA9EipkwIjPX8HxHQm/oa5QYtj6tfW9q
wO55T0fp2EXVP01li5QHazTulhIppmoqpxLQ6hffE0cz6mDzwgnDrsSfrnfqTZQ/
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1510024150542800256885855384910235072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-27 09:08:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 09:08:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21157647601904487611845228269318004744402388607316353937914845464990910288403028757371664599468559546393090268580791163394792894791771368074962941502352585731007446718411111062742639445960850248789528331873808239503244943098371782596806766473117573604166416069126718257698491914213624799724397953844928979798312470787026395713287857547148361974121403841009622950357456960964534647300754768105819930934514290978649172220069309229621721553197166250653844294837237195860889904070175632955963266604980099387909131313672708952916864343432076708184453954399453745360672141823466785853097720985787004087981135253430221422449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1527 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polaris401k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip1api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterpublicentities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winflexapi.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myatlas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterpublicentities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagent.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpx.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip7api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsts.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polaris401k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securecmessage.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myatlas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.uat.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.dev.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-hip11api.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-400.aig.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelguardagents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptagcsstintagent.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterministrycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.uat.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterministrycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip7apima.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip9apima.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aighomeprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.producermanagementportal.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelguardagents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-digital.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aighomeprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagentcert.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip9api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialnprd.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'model-my.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paymentvendor.ws.safg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagentcertpt.aig.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fd8d6f3927a31223c56da61bd2f7a0229b60130
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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