imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:14:a3:f2:ee:6f:cb:4c:d2:cd:14:0b:ee:98:aa:41 was issued on by GlobalSign nv-sa.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:14:a3:f2:ee:6f:cb:4c:d2:cd:14:0b:ee:98:aa:41
Serial Number (int): 1436399212728919260718959520925657665
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f4:39:53:42:26:f0:4d:6f:a5:87:67:f8:5c:23:a2:f9:ef:c7:05:b9
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 80:9c:a0:a8:fe:21:b4:25:c1:fd:d5:71:95:7c:c1:c0:97:bd:60:b7
Fingerprint (sha256): 0c:52:cf:c2:2f:04:c7:d6:19:69:01:1a:bf:c4:01:47:da:c1:6d:90:e3:39:1d:02:da:b4:d3:0c:63:c5:d4:a6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.saltzerhealth.com
*.sclhealth.org
saltzersurgerycenter.com
*.alluceo.io
*.saltzergastro.com
claimsportal.intermountainnv.org
mychart.sclhealth.org
register.intermountainnv.org
alluceo.io
saltzerhealth.com
*.saltzersurgerycenter.com
saltzergastro.com
prod.intermountainhealth.org
*.intermountain.net
rcm.intermountainhealthcare.org
*.intermountainhealthcare.org
rcm-dev.intermountainhealthcare.org
rcm-tst.intermountainhealthcare.org
sclhealth.org
uat.intermountainhealth.org
imperva.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i/aXmx2q/Ju3iLOqN2s
+hulqWIhoVOC5eI71vDAotCdHMcXzOATi34GdqPQYcl5AmhShwdbAb4xxPZElMOZ
yIQeOuTerysgzVZBNyfJf1rRU8BAFPuWUfCPM3ejg5Ut6tTJHbBXucpiYBf2Mso8
bKr267PBzC2TJAHdNoQaE0RgM4brWHAxhNtvKHuNiQ+miw60f9f2PN4ah+QGUWIv
rk1UARcxX8KbyHL9ncI3dQyQklVquT1ziIhSrS75M1A162h7MGXd9sG5JT/GhHcR
QfM9Jp16xp7frqk+W+UtExg/X8AhO0jZOvO51fVTNpBNBasb7o36cEJSXE2hfFDz
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1436399212728919260718959520925657665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 20:13:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 20:13:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27543547678003139742471146441562447357127346068506228647140889293341933929745297313343607941817545223866317337603716450554475445525756719253241708631316814138567699150498845343386286313331864267899845231773997620805421000007363108794024148665454988807349353176948193847305755086930517781231279007983484283376390602914548142161092315215227350141403020859518510335107568857604959937451345415087400847842007861225094896739632778130330862578233467017131447449652371275516208442265091217194484606582420758164990652031727061041805228112013209140606721895013329078697653483769225992483065874577715379310966262656305581847531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltzerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sclhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltzersurgerycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alluceo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltzergastro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsportal.intermountainnv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychart.sclhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.intermountainnv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluceo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltzerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltzersurgerycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltzergastro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.intermountainhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intermountain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcm.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcm-dev.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcm-tst.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sclhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.intermountainhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f439534226f04d6fa58767f85c23a2f9efc705b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db38d724f0000040300473045022048eb4cf8745502a0490b479c99e3f7ef5c4e0c37ac1464dcfcc9cd710155150a022100b6ab5015f7060f5288f4884fc7c200b4cc1febef31b461a3724ddc6802c6e2bc00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db38d72990000040300473045022100e3ff55be79cdcd8a98a670b39d44eb54e9e88c305329e12c5d8ccdede96cfc4c022036616f1b66b7aa3b131b4fda0a904b462d42bc7a1e5f4086d7174ced5adfddb7007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018db38d74e500000403004630440220736105c1d829b298cba9948183b9cead32d8437b191e1e301bd4f04d43b701cf02201102e258521684b1a0903925e322da2e93d3bc86b4d22853e4b7a7169d4b90a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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