imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:2b:92:56:b7:34:fa:4b:99:35:db:93:4c:0c:77:d7 was issued on by GlobalSign nv-sa.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:2b:92:56:b7:34:fa:4b:99:35:db:93:4c:0c:77:d7
Serial Number (int): 1555464862825825757638150466394945495
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 74:e8:fa:6a:0e:0c:33:e2:87:97:68:93:3e:d0:f1:7f:ad:30:49:c4
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): c2:ff:9b:86:a7:52:d9:6c:d1:be:0c:be:b4:5a:b2:2d:32:ba:cd:4f
Fingerprint (sha256): 0d:3f:d1:2b:b6:5b:7d:cc:a1:eb:1c:a0:92:01:f2:34:8b:86:71:48:6d:a4:2b:ef:6d:bd:59:3d:9c:94:34:1c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.phmidlandsnetwork.org
doctors.phupstatenetwork.org
mainbabies.org
*.ccihealth.org
myhfn.ccihealth.org
era.inviohealthnetwork.org
promisehealthplan.com
inviohealthnetwork.org
prismahealthmidlandsfoundation.org
*.ghs.org
phmidlandsnetwork.org
mft-web.prismahealth.org
prismahealthchildrens.org
*.connectpartners.org
*.transformingmedschool.com
pediatrics.prismahealth.org
schealthsciencescenter.org
imperva.com
*.inviohealthnetwork.org
prismahealthupstategiving.org
prismahealth.org
safekidsupstate.org
*.mainbabies.org
www.promisehealthplan.com
transformingmedschool.com
www.prismahealthmidlandsfoundation.org
*.prismahealthupstategiving.org
*.safekidsupstate.org
*.phupstatenetwork.org
phupstatenetwork.org
*.schealthsciencescenter.org
*.prismahealth.org
*.prismahealthchildrens.org
redcap.prismahealth.org
mft-web.inviohealthnetwork.org
qlik.prismahealth.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTpJX0ljHOXLzUYRBBi5
Vc0umrcYOE3ZdZ+r21gKHkjfF0OKUoZiaon0KIxc1b9WP1JBFz5kLgIDztuR2cTN
Injk3Fd94/j41jB33Jfda52JYFdfNLVOeZGGI+kEtBh7XvYYUN0RF3TJhUSiL3pc
iK/9hvf4stmoGTr+I7oUR6q4iTyKbMZ78UgKPCaBzwuX11gQr0Zr7u/PigbuuSq2
2Ls8+OG1WP6/OGz+Wlf9RaCqxDF/jBW+nlWO9fpCm+TGbxvoLP0Lajcu6twCo7Wd
nsM4tmj1jCWq8RFYrBPAhkpHPLofXEjuVBL0I5AySbqmfzPojAbBCFU4Zuuy20Be
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1555464862825825757638150466394945495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 01:33:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 01:32:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25907594716772579329630851085327306941703112802681034507141101530339908090995824265195575149819099865585687227107695354337182497737041165702832955830666900593875863776818726142218063385459459035014934264804565200040523543571470178833262246132163387479900286997495086348459158972413899988171958657097495314231209191680793989359156759199247559197257991049118015044033525660202914784156370636858345756299815803930958451487064248695205875370759780745968887452059872657321446416131845446687410237450685994730639049345256294967306857635135626012855034056463033487420039820924298130055698422991173933407192494473202783772397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhfn.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'era.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mft-web.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectpartners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatrics.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcap.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mft-web.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlik.prismahealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74e8fa6a0e0c33e2879768933ed0f17fad3049c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018d6773012500000403004830460221008ac1c282abc80620a53f4210b1a9301f03562b10af2af347aa2035a6e0aecb47022100a58f0fb5a92da9185030aba175d0f73f13eed8e7014146d3d5fd0fa3dca2dc7b007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d6773011c0000040300483046022100b5eda9fbc2b1567b2859e117f888d490dd8970f0b1ae72d1c0fdba3e5e3df55f022100da912f7f749acca84a3223346667d51b74b137a45ca6c5d4faa248f5985ffd9a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d677301bc000004030046304402200a626c716aaa093c1029ab3640d6701b78586a34a84edeb00c5c5d7af1d3e84e022016bc773402553bc47501e7c3ecf78896c596bf099d5c2af6ff1a7480a37b190a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005422e91a0d760ef5a447bc15b3a6f439dbbc3b98c36aec0623b3188abad324087264ef249d34f7e975a4c0c60b51ebe94af3978c0f3e55a7a1b7fae0ca4cc74bdf3b01792b6d20373fa01cd9127d336134c4f8d2018515b2cdeef6de7f9db4414c0f3c732c17f79149b5b53d70a661db4e4c6b39e788cefdf36e5f86b86036af1d5fd261360019171569c8b8300383470b755dd32a8a2d3c0719499fdb9f54ba32846b7aae923dc01e5879a4e2bcc6e472db9c55b9234e96191eaa558b65ddea7185c92792124d99acd1bbb0b2f8245dce700cd95de4eb0e9873b4510f271cd2cbe4c800ef110ce0e9043cad00c6f1ce4816e642e7025324ce194c75ff1f73b7