imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:26:b3:4a:f6:89:d7:d7:ff:df:4f:0b:8f:01:9b:a4 was issued on by GlobalSign nv-sa.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:26:b3:4a:f6:89:d7:d7:ff:df:4f:0b:8f:01:9b:a4
Serial Number (int): 1530171766912273573974260636069239716
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: eb:9c:32:0c:f5:7d:85:f0:3c:a8:20:b2:da:69:f8:5a:9f:1c:40:99
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 1b:8c:8d:5e:39:b2:80:7c:f5:45:8e:6d:a6:18:ae:88:d7:1a:0d:66
Fingerprint (sha256): 10:73:11:6c:28:ff:ca:05:6c:5e:f2:ea:51:ac:de:4a:9e:a3:59:f3:19:71:9f:14:c0:9d:fc:4a:53:b9:90:ba

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pl.ca.powerschool.com
*.perf.powerschoolcorp.com
*.pea.ca.powerschool.com
*.powerschoolcorp.com
*.pasi.maps.powerschool.com
*.efinanceplus.demo.powerschool.com
peopleadmin.com
schoology.com
*.stiinformationnow.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.infosnap.com
*.staging-usw2-01-env1.unified.powerschoolcorp.com
*.bthdev.powerschool.com
decisioninsite.com
*.pl.powerschoolcorp.com
*.peopleadmin.com
*.pscc.powerschoolcorp.com
*.reporting.powerschool.com
*.52.32.110.168.powerschool.com
*.teachermatch.org
static-test.specialeducation.powerschool.com
*.pea.powerschool.com
*.veracode.powerschool.com
*.staging-pea.powerschool.com
*.versifit.com
naviance.com
*.atrieveerp.com
*.businessplus.powerschool.com
*.specialeducation.powerschool.com
stage-interventions.specialeducation.powerschool.com
*.employer.schoolspring.com
*.iep.powerschool.com
*.insights.powerschool.com
*.chalk.com
*.canada.powerschool.com
*.iepplus.powerschool.com
*.sfe.powerschool.com
*.tedk12test.com
mobile.ca.powerschool.com
*.bp.powerschool.com
*.tedapi.com
*.pasi.powerschool.com
*.powerschool.com
tedapi.com
teamcity.registration.powerschool.com
*.eschoolplus.appsec.powerschool.com
tedk12test.com
*.hobsons.com
*.businessplus.demo.powerschool.com
*.registration.powerschool.com
*.schoology.com
*.www.schoolspring.com
*.ca.powerschool.com
*.accelaschool.com
chalk.com
*.tedk12staging.com
imperva.com
*.auto.powerschoolcorp.com
*.services.peopleadmin.com
*.spihost.net
hobsons.com
specialeducation.powerschool.com
*.eschoolplus.powerschool.com
*.perfplusk12.com
*.prod.powerschool.com
*.naviance.com
*.erp.powerschool.com
*.app.schoology.com
*.decisioninsite.com
*.platform.powerschool.com
tedk12staging.com
*.efinanceplus.powerschool.com
*.specialeducation.ca.powerschool.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgzCCDGugAwIBAgIQASazSvaJ19f/308LjwGbpDANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMzAeFw0yMzA5
MTUxNjI1NDRaFw0yNDAzMTMxNjI1NDRaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhex03HbDlpOl01YcKeBX
kTooCNlLgZPpd13CIXFZTdon5+vYwplt3dSHCM6KbVXa6/jr4oySjHehfiwU9zR7
0ypaOar2Dd2BtVDS1gKHtj4mN45cU2BokgkUi4RgIaPZ4QrpqiGzRDbErVGT5PuC
0lR1iaBnvLNt9cR6jjqjxv7tOmC2382aqmk6V2czbhFEuLEvkpC3c3Sxyee273Dn
uO+09sdDBQDtRCR/MdJkA0J4LfZHx1ALRWqjIIeyl/HIw539ZJiTJ26tb+KvvpWt
k64c74pJSuTdQBnr+aUqlbLb+xslBvhKrbKlI4L1h+StoIaZRFPdcgZWcFbzOiFX
oQIDAQABo4IKiTCCCoUwggc9BgNVHREEggc0MIIHMIIXKi5wbC5jYS5wb3dlcnNj
aG9vbC5jb22CGioucGVyZi5wb3dlcnNjaG9vbGNvcnAuY29tghgqLnBlYS5jYS5w
b3dlcnNjaG9vbC5jb22CFSoucG93ZXJzY2hvb2xjb3JwLmNvbYIbKi5wYXNpLm1h
cHMucG93ZXJzY2hvb2wuY29tgiMqLmVmaW5hbmNlcGx1cy5kZW1vLnBvd2Vyc2No
b29sLmNvbYIPcGVvcGxlYWRtaW4uY29tgg1zY2hvb2xvZ3kuY29tghcqLnN0aWlu
Zm9ybWF0aW9ubm93LmNvbYIsKi5kdi11c2UtMDEtZW52MS51bmlmaWVkLnBvd2Vy
c2Nob29sY29ycC5jb22CDiouaW5mb3NuYXAuY29tgjIqLnN0YWdpbmctdXN3Mi0w
MS1lbnYxLnVuaWZpZWQucG93ZXJzY2hvb2xjb3JwLmNvbYIYKi5idGhkZXYucG93
ZXJzY2hvb2wuY29tghJkZWNpc2lvbmluc2l0ZS5jb22CGCoucGwucG93ZXJzY2hv
b2xjb3JwLmNvbYIRKi5wZW9wbGVhZG1pbi5jb22CGioucHNjYy5wb3dlcnNjaG9v
bGNvcnAuY29tghsqLnJlcG9ydGluZy5wb3dlcnNjaG9vbC5jb22CHyouNTIuMzIu
MTEwLjE2OC5wb3dlcnNjaG9vbC5jb22CEioudGVhY2hlcm1hdGNoLm9yZ4Isc3Rh
dGljLXRlc3Quc3BlY2lhbGVkdWNhdGlvbi5wb3dlcnNjaG9vbC5jb22CFSoucGVh
LnBvd2Vyc2Nob29sLmNvbYIaKi52ZXJhY29kZS5wb3dlcnNjaG9vbC5jb22CHSou
c3RhZ2luZy1wZWEucG93ZXJzY2hvb2wuY29tgg4qLnZlcnNpZml0LmNvbYIMbmF2
aWFuY2UuY29tghAqLmF0cmlldmVlcnAuY29tgh4qLmJ1c2luZXNzcGx1cy5wb3dl
cnNjaG9vbC5jb22CIiouc3BlY2lhbGVkdWNhdGlvbi5wb3dlcnNjaG9vbC5jb22C
NHN0YWdlLWludGVydmVudGlvbnMuc3BlY2lhbGVkdWNhdGlvbi5wb3dlcnNjaG9v
bC5jb22CGyouZW1wbG95ZXIuc2Nob29sc3ByaW5nLmNvbYIVKi5pZXAucG93ZXJz
Y2hvb2wuY29tghoqLmluc2lnaHRzLnBvd2Vyc2Nob29sLmNvbYILKi5jaGFsay5j
b22CGCouY2FuYWRhLnBvd2Vyc2Nob29sLmNvbYIZKi5pZXBwbHVzLnBvd2Vyc2No
b29sLmNvbYIVKi5zZmUucG93ZXJzY2hvb2wuY29tghAqLnRlZGsxMnRlc3QuY29t
ghltb2JpbGUuY2EucG93ZXJzY2hvb2wuY29tghQqLmJwLnBvd2Vyc2Nob29sLmNv
bYIMKi50ZWRhcGkuY29tghYqLnBhc2kucG93ZXJzY2hvb2wuY29tghEqLnBvd2Vy
c2Nob29sLmNvbYIKdGVkYXBpLmNvbYIldGVhbWNpdHkucmVnaXN0cmF0aW9uLnBv
d2Vyc2Nob29sLmNvbYIkKi5lc2Nob29scGx1cy5hcHBzZWMucG93ZXJzY2hvb2wu
Y29tgg50ZWRrMTJ0ZXN0LmNvbYINKi5ob2Jzb25zLmNvbYIjKi5idXNpbmVzc3Bs
dXMuZGVtby5wb3dlcnNjaG9vbC5jb22CHioucmVnaXN0cmF0aW9uLnBvd2Vyc2No
b29sLmNvbYIPKi5zY2hvb2xvZ3kuY29tghYqLnd3dy5zY2hvb2xzcHJpbmcuY29t
ghQqLmNhLnBvd2Vyc2Nob29sLmNvbYISKi5hY2NlbGFzY2hvb2wuY29tggljaGFs
ay5jb22CEyoudGVkazEyc3RhZ2luZy5jb22CC2ltcGVydmEuY29tghoqLmF1dG8u
cG93ZXJzY2hvb2xjb3JwLmNvbYIaKi5zZXJ2aWNlcy5wZW9wbGVhZG1pbi5jb22C
DSouc3BpaG9zdC5uZXSCC2hvYnNvbnMuY29tgiBzcGVjaWFsZWR1Y2F0aW9uLnBv
d2Vyc2Nob29sLmNvbYIdKi5lc2Nob29scGx1cy5wb3dlcnNjaG9vbC5jb22CESou
cGVyZnBsdXNrMTIuY29tghYqLnByb2QucG93ZXJzY2hvb2wuY29tgg4qLm5hdmlh
bmNlLmNvbYIVKi5lcnAucG93ZXJzY2hvb2wuY29tghMqLmFwcC5zY2hvb2xvZ3ku
Y29tghQqLmRlY2lzaW9uaW5zaXRlLmNvbYIaKi5wbGF0Zm9ybS5wb3dlcnNjaG9v
bC5jb22CEXRlZGsxMnN0YWdpbmcuY29tgh4qLmVmaW5hbmNlcGx1cy5wb3dlcnNj
aG9vbC5jb22CJSouc3BlY2lhbGVkdWNhdGlvbi5jYS5wb3dlcnNjaG9vbC5jb20w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAd
BgNVHQ4EFgQU65wyDPV9hfA8qCCy2mn4Wp8cQJkwVwYDVR0gBFAwTjAIBgZngQwB
AgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i
YWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcB
AQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20v
Y2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMzBKBggrBgEFBQcwAoY+aHR0cDovL3Nl
Y3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNx
My5jcnQwHwYDVR0jBBgwFoAU7aDmAQU+NIIapE9fxb0RQarf82EwSAYDVR0fBEEw
PzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNk
dnRsc2NhMjAyM3EzLmNybDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAdv+I
Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGKmamtDAAABAMASDBGAiEA
/5XWmo+z0TCrcoH07m+R+31MpHCyrN3leBBalO8thEYCIQCnWGcCC+oRNjmueblQ
rmRhJB4USDKUiICUjGruDuOl3gB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABipmprX4AAAQDAEYwRAIgIHsCGeUTSTMN6IBGlT+7d7lmlAvr1gOn
9rED+/IioyMCIAQxJVq0Gb8nS8IZKu2DYLV4c1HcrpDSJq4Uai6tSq8BAHcA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKmamuCQAABAMASDBGAiEA
6cETZDhwHYUku9DgPIzA9hjr+X4XQqGe0Ws7VzBW9qsCIQDMJhJ34rU40gANTVqE
vWnHN15wlE3vKQhTIaBhu1hY8TANBgkqhkiG9w0BAQsFAAOCAQEAgIydTdGc+5yS
J+EAhElY7EbK7C/h5SyoEDt7qhYjJ8UyJg1mo5XPcuQJ+bv6OVhbXYcFeuLPBYqK
d+1s4nhu6hHDFP0mEwjWuNWg/Wt1wx1+F9GTshktvYLceEqqeL8r1543dk6wwqKx
GieO8vKIypUIsG8mxnHhpg10h8UIulTHzxeAFSBFrpm7eAFMVMTTtRjx8/nG5OV9
l/Q7UTjaX4hvLhDkD3AyXEHtqtJMxQZ2i5vK1XqUjaNEdnyJ+z3TguaIPhrbatue
KLj5/vRm7Z7Fv8QmjnUm/EyLSuCkYW+xHKPU8u/HWK07wzGl6SxK5AkAw9re+qys
xjBaVBzCCA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhex03HbDlpOl01YcKeBX
kTooCNlLgZPpd13CIXFZTdon5+vYwplt3dSHCM6KbVXa6/jr4oySjHehfiwU9zR7
0ypaOar2Dd2BtVDS1gKHtj4mN45cU2BokgkUi4RgIaPZ4QrpqiGzRDbErVGT5PuC
0lR1iaBnvLNt9cR6jjqjxv7tOmC2382aqmk6V2czbhFEuLEvkpC3c3Sxyee273Dn
uO+09sdDBQDtRCR/MdJkA0J4LfZHx1ALRWqjIIeyl/HIw539ZJiTJ26tb+KvvpWt
k64c74pJSuTdQBnr+aUqlbLb+xslBvhKrbKlI4L1h+StoIaZRFPdcgZWcFbzOiFX
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1530171766912273573974260636069239716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 16:25:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 16:25:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16906295600998144557381537337259482554257855820962077044299494362151939130931718808981813858492668911828632500204878663540374045920394848354212279675383397489003400102072558259621552223695774799378630046378381266290291591015461855356932313366813453024928555585188390116682808898475855919696654562370126385320611355649243761969988076864257621561534937436085645600484682777361659570936795634494448846262118965984554366760674803147426003681808659753872553070703154659493492078271001339137746360173423072745064373444951675426267059757732497043537895579962833686061036049482818064446946561515393242756518342002739553327009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.maps.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stiinformationnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-usw2-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthdev.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pscc.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52.32.110.168.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-test.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracode.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-interventions.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employer.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iep.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insights.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canada.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iepplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfe.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamcity.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.appsec.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accelaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spihost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.ca.powerschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb9c320cf57d85f03ca820b2da69f85a9f1c4099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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