imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:fa:65:28:de:e6:0f:f3:63:71:5a:ff:e6:87:c5:a8 was issued on by GlobalSign nv-sa.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fa:65:28:de:e6:0f:f3:63:71:5a:ff:e6:87:c5:a8
Serial Number (int): 2629353971898892613394385017160320424
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 05:79:20:50:b7:eb:14:02:ca:ba:93:2a:16:00:6f:ea:d1:e8:59:c4
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 6f:e4:86:45:1a:0d:46:5d:c2:cf:fc:a5:af:02:47:c5:3f:39:af:16
Fingerprint (sha256): 0d:08:86:72:f1:b7:b1:0a:89:dd:3c:75:30:2b:f9:3b:95:1c:06:d1:10:20:e5:bc:58:ee:5d:03:26:07:43:ee

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

decisioninsite-staging.com
*.specialprograms.powerschool.com
*.ma.schoolspring.com
*.west.schoolspring.com
*.idaho.schoolspring.com
*.louisianateacherprep.com
*.reporting.demo.powerschool.com
*.schoolspring.com
*.veracode.schoolspring.com
*.mizuni.com
*.demo.schoolspring.com
tedk12.com
*.eschoolsolutions.com
*.staging.powerschoolcorp.com
*.efinanceplus.demo.powerschool.com
*.teachiowa.schoolspring.com
newmexicoschools.com
*.powerschool-registration-by-infosnap.com
louisianateacherprep.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.orchard.schoolspring.com
*.qa-use-01-env1.unified.powerschoolcorp.com
dcschoolreportcard.org
*.tedk12.com
*.maine.schoolspring.com
*.newmexicoschools.com
*.support.schoolspring.com
*.tembostaging.com
*.api.schoolspring.com
*.decisioninsite-staging.com
*.demo.mizuni.com
*.registration-essential.staging.powerschool.com
*.tembotools.com
*.txcharter.schoolspring.com
*.ted.peopleadmin.com
*.oregon.schoolspring.com
*.dcschoolreportcard.org
*.tedk12.ca
*.tedapi.co
*.enrollindy.org
*.esc12.schoolspring.com
*.atenterprise.powerschool.com
*.hrms.powerschool.com
*.sandbox.schoolspring.com
*.hosting.l4u.com
*.atrieveerp.com
*.businessplus.powerschool.com
tedk12.ca
tedapi.co
*.registration-essential.powerschool.com
*.assessment.powerschool.com
*.kentucky.schoolspring.com
*.east.schoolspring.com
*.tembo.dev
*.fastgrowthtexas.schoolspring.com
*.bp.powerschool.com
*.rhodeisland.schoolspring.com
*.teachphilly.schoolspring.com
imperva.com
*.reportmail.l4u.com
*.perfplusk12.com
*.esc16.schoolspring.com
*.teachnc.schoolspring.com
*.l4u.com
*.decisioninsite.com
*.arkansas.schoolspring.com
*.vermont.schoolspring.com
schoolspring.com
*.colorado.schoolspring.com
*.iowa.schoolspring.com
*.dex.powerschoolcorp.com
*.produs.powerschoolcorp.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QoAAuqlWHbBNzpFaX+E
jM9rjWouMwpBJVnVZqa42DxzDLvHhMdWGmTVsTOvqX9WVCO4YPhBzGNOI/+JHp0I
98vDwYd/FoiSdkXBEhRI520HRtBYMvNObB9W4YHivabtdqTDmcvoLtu2LhVJ9teg
tcAlik5CXjd4db+hPfUcxaqjOJxMudhQ6pzwUfJlcTL5TD+q77cWzMMIma5VmxEa
5576d79e2AivKimqasLrg0cRyCnQjKGkAKCxmTv4Nw/+R5CCtzD17pXx2VXpwD3C
bUhdeN5icL3Lwj+rNU/EfiFWukSBJkt5uBp0Tpz8Kh2/wEJvQ0gHyqSkFK8MXUtI
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2629353971898892613394385017160320424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-08 01:52:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 16:47:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29923409482689154740129026316248693141245560836570048407802357353777153741316620346111834018433105056983146209696814050111251182245007776851520755678735698835553410805579652334036139977102804214982834515837480701689655816096733921776773503750198335006868507234026556609228234321138805169063944723165874695036944346522891653009261790445520170226636157469236575871195656168975884621873587588492713572580303560610489366802247874627293692717059107039416119755847547927238815770432232747288852572954318614298964379065263138718258624157007049267059495823892522718481426045900098488213623926425940748007701297174058713696269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialprograms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ma.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.west.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idaho.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracode.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachiowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool-registration-by-infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchard.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maine.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembostaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration-essential.staging.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txcharter.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregon.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enrollindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc12.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atenterprise.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedapi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration-essential.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assessment.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentucky.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.east.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastgrowthtexas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhodeisland.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachphilly.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reportmail.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc16.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachnc.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkansas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vermont.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorado.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dex.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.produs.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05792050b7eb1402caba932a16006fead1e859c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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