imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:53:cc:69:12:6c:af:ff:c5:fd:d8:ea:80:a4:2b:bf was issued on by GlobalSign nv-sa.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:53:cc:69:12:6c:af:ff:c5:fd:d8:ea:80:a4:2b:bf
Serial Number (int): 1764334571261640802217400685016918975
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: eb:9c:32:0c:f5:7d:85:f0:3c:a8:20:b2:da:69:f8:5a:9f:1c:40:99
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): c2:9e:84:18:ea:93:ce:f2:3c:48:cf:b4:95:da:12:ef:7f:3e:07:02
Fingerprint (sha256): 0f:1f:28:1e:43:e0:db:f5:2f:21:1d:d5:5b:03:cc:c4:db:ae:55:d5:5c:c7:27:a4:92:59:07:b5:c4:5c:45:49

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pl.ca.powerschool.com
*.perf.powerschoolcorp.com
*.pea.ca.powerschool.com
*.powerschoolcorp.com
*.pasi.maps.powerschool.com
*.efinanceplus.demo.powerschool.com
peopleadmin.com
schoology.com
*.stiinformationnow.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.infosnap.com
*.staging-usw2-01-env1.unified.powerschoolcorp.com
*.bthdev.powerschool.com
decisioninsite.com
*.pl.powerschoolcorp.com
*.peopleadmin.com
*.pscc.powerschoolcorp.com
*.reporting.powerschool.com
*.52.32.110.168.powerschool.com
*.teachermatch.org
static-test.specialeducation.powerschool.com
*.pea.powerschool.com
*.staging-pea.powerschool.com
*.versifit.com
naviance.com
*.atrieveerp.com
*.businessplus.powerschool.com
*.specialeducation.powerschool.com
stage-interventions.specialeducation.powerschool.com
*.employer.schoolspring.com
*.iep.powerschool.com
*.insights.powerschool.com
*.chalk.com
*.canada.powerschool.com
*.iepplus.powerschool.com
*.sfe.powerschool.com
*.tedk12test.com
mobile.ca.powerschool.com
*.bp.powerschool.com
*.tedapi.com
*.pasi.powerschool.com
*.powerschool.com
tedapi.com
teamcity.registration.powerschool.com
*.eschoolplus.appsec.powerschool.com
tedk12test.com
*.hobsons.com
*.businessplus.demo.powerschool.com
*.registration.powerschool.com
*.schoology.com
*.www.schoolspring.com
*.ca.powerschool.com
*.accelaschool.com
chalk.com
*.tedk12staging.com
imperva.com
*.auto.powerschoolcorp.com
*.services.peopleadmin.com
*.spihost.net
hobsons.com
specialeducation.powerschool.com
*.eschoolplus.powerschool.com
*.perfplusk12.com
*.prod.powerschool.com
*.naviance.com
*.erp.powerschool.com
*.app.schoology.com
*.decisioninsite.com
*.platform.powerschool.com
tedk12staging.com
*.efinanceplus.powerschool.com
*.specialeducation.ca.powerschool.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhex03HbDlpOl01YcKeBX
kTooCNlLgZPpd13CIXFZTdon5+vYwplt3dSHCM6KbVXa6/jr4oySjHehfiwU9zR7
0ypaOar2Dd2BtVDS1gKHtj4mN45cU2BokgkUi4RgIaPZ4QrpqiGzRDbErVGT5PuC
0lR1iaBnvLNt9cR6jjqjxv7tOmC2382aqmk6V2czbhFEuLEvkpC3c3Sxyee273Dn
uO+09sdDBQDtRCR/MdJkA0J4LfZHx1ALRWqjIIeyl/HIw539ZJiTJ26tb+KvvpWt
k64c74pJSuTdQBnr+aUqlbLb+xslBvhKrbKlI4L1h+StoIaZRFPdcgZWcFbzOiFX
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1764334571261640802217400685016918975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 18:21:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 18:21:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16906295600998144557381537337259482554257855820962077044299494362151939130931718808981813858492668911828632500204878663540374045920394848354212279675383397489003400102072558259621552223695774799378630046378381266290291591015461855356932313366813453024928555585188390116682808898475855919696654562370126385320611355649243761969988076864257621561534937436085645600484682777361659570936795634494448846262118965984554366760674803147426003681808659753872553070703154659493492078271001339137746360173423072745064373444951675426267059757732497043537895579962833686061036049482818064446946561515393242756518342002739553327009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.maps.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stiinformationnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-usw2-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthdev.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pscc.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52.32.110.168.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-test.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-interventions.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employer.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iep.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insights.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canada.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iepplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfe.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamcity.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.appsec.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accelaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spihost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.ca.powerschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb9c320cf57d85f03ca820b2da69f85a9f1c4099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016dec42cab1dd557cf4b536dce0ff69e13dd5f6b5172151231fa946475c7b193924a8d1b706424246be86f5f243ace02575392286face4fe5f72efbb22aa0517608fa6f3c43df10b5f77dff02c0a87d753abfde52a8690f63e615cb33645dc37fa7087a58eb935dc8cd38c9bc65698842f41f7c34b1055b49dc656cc42c3c024a920287be3fe3a13337d9f8091fb9dc1716db386fe28770da0874eca4a1d508385a504b10073bf8a63e4ddce82b055edb98f3a733f88f3a144e8872708c822722e930969bb3dd161e0fc8c4e10945b9329759bf8e842f4073b27975a5369fd0af49d5f4be3ad9ca4aa95001ffe4d097b9bcbcf77a15c37157e8ab49ff99c2d5e