imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:70:31:cb:e7:f1:73:93:6f:ed:a0:17:77:d1:86:25 was issued on by GlobalSign nv-sa.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:31:cb:e7:f1:73:93:6f:ed:a0:17:77:d1:86:25
Serial Number (int): 1911775237111320077950551435265541669
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 43:a0:e4:69:7b:42:bd:aa:4c:47:8d:43:67:de:f0:4c:77:d0:8e:82
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 2e:f4:c0:03:a1:99:fc:9e:93:8b:c1:1d:e8:9d:0b:77:29:c5:ae:3a
Fingerprint (sha256): 0d:45:5a:a5:fe:3a:f8:d0:1b:f4:66:f0:cf:a8:66:9e:62:07:c1:40:ed:a9:8a:52:8c:72:cd:21:10:5b:96:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedomboatclub.com
prusasportspos.com
www.flipeventswag.com
weatherfordcompanystorenam.com
*.mypromomall.com
*.buydrivgear.com
*.shopmgpluxco.com
hdsupplyuniforms.com
regalrexnordshop.com
*.api.halo.com
estore.wyffels.com
drivergear.vw.com
*.flipyourswag.com
shopagco.com
www.hdsupplyuniforms.com
*.leaflyswag.com
*.flipeventswag.com
*.lowessafe.com
quickbaseswag.com
www.wescocompanystore.com
flipyourswag.com
*.bk.com
malibuboatsgearstore.com
shopmgpluxco.com
*.buyfmgear.com
*.weatherfordcompanystore.com
mypromomall.com
channingbete.com
seagenstore.com
volvocollection.com
*.prusasportspos.com
*.axisstores.com
www.weatherfordcompanystorenam.com
*.regalrexnordshop.com
attach.halo.com
www.weatherfordcompanystore.com
weatherfordcompanystore.com
buyfmgear.com
*.mstar2.halo.com
wescocompanystore.com
audicollectionusa.com
lowessafe.com
*.mgpluxcoshop.com
*.volvocollection.com
*.yearupswagshop.com
torchysmerch.com
*.campusstop.com
*.malibuboatsgearstore.com
*.audicollectionusa.com
*.ngkntkgearhouse.com
*.shopagco.com
yearupswagshop.com
imperva.com
*.apparelsf.com
*.channingbete.com
*.torchysmerch.com
buydrivgear.com
*.quickbaseswag.com
cmweb.halo.com
www.flipyourswag.com
mgpluxcoshop.com
www.seagenstore.com
leaflyswag.com
*.shop.gray.com
flipeventswag.com
*.agloan.com
campusstop.com
ngkntkgearhouse.com
apparelsf.com
*.wescocompanystore.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiKE5P//INiBOR9SvJQB
0Ye3goZSMsb3h08U+e+WpCbhCIlccQW8L9NaMWzmOROzoorxdX1oqvrLi20+nlxN
EsoWQikWcQgI4qxYlgYXTFw/GgwqdV8srwR+WYWYzQ2WXiTN4dcqBzk6OW0wpUqV
joCJ18mf+4rJkaYeIlK4ihy4FvrHhdejD4DMQVuRBuxBE0P6y1/njDKTd4rgNJqF
xD9p9kIYj3gyt+trIkXSAE/J3nutcufVP/qs0gY9nvIpAIwLu+GEnksTvybJU2Dn
7cLluNWZ4gukzfdeQvXDQDWWrnQd5Y0rWetjJICK9QMeUDGp+ol/TJ5apUsVshKR
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1911775237111320077950551435265541669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 16:19:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 16:19:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24507253175542787792291465111063669274363808910042355351917630314006770284666666512920561758569106841339469021505384030388032752970580769178898502133437478417370305355006618339056303790365552397997747849684006832474675757771880566329275995330652089590160238565726020765025869481123786895863533735140248525296460454031658116479173945463275706860727868141083775013475655371414657260328113957621465256041461290531116123651668354370608038527116768136963564816996873879493096272100024693188127970040422889725348150977072407642252595292250949234084949893793240738018588550908176757477650430073081092663521047905304795320649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1429 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomboatclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prusasportspos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flipeventswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherfordcompanystorenam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypromomall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buydrivgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopmgpluxco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdsupplyuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalrexnordshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estore.wyffels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivergear.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipyourswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdsupplyuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaflyswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipeventswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowessafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickbaseswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wescocompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipyourswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malibuboatsgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmgpluxco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyfmgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weatherfordcompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypromomall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channingbete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seagenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvocollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prusasportspos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axisstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weatherfordcompanystorenam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regalrexnordshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attach.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weatherfordcompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherfordcompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyfmgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mstar2.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wescocompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audicollectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowessafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgpluxcoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volvocollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yearupswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torchysmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campusstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malibuboatsgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audicollectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngkntkgearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yearupswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apparelsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channingbete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torchysmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buydrivgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickbaseswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmweb.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flipyourswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgpluxcoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seagenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaflyswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop.gray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipeventswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngkntkgearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apparelsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wescocompanystore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43a0e4697b42bdaa4c478d4367def04c77d08e82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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