imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:8b:13:85:db:f7:01:46:56:0c:d2:e1:ab:c5:b2:31 was issued on by GlobalSign nv-sa.

With 148 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8b:13:85:db:f7:01:46:56:0c:d2:e1:ab:c5:b2:31
Serial Number (int): 2051353230325168540323015129028735537
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ea:89:31:31:b5:a2:54:72:76:0d:1e:58:d4:b6:4f:6a:a6:04:8c:f4
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 00:20:d3:80:3f:5f:7f:7e:e9:51:0d:34:86:c2:43:30:20:42:39:9d
Fingerprint (sha256): 10:c5:7d:02:6d:9a:75:4b:43:0d:fa:d2:47:7e:c0:e8:ee:6b:62:cf:2f:38:42:10:2a:77:53:d4:23:2e:18:ec

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

148

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

completecareplus.com
dev.api.serviceplancenter.com
*.cdpfnol.nprd.aig.com
gigcrmtestauth.glatfelters.com
*.myaig.nprd.aig.com
*.serviceplanspurchase.com
integration02.layalifeinsurance.ie
gigcrmtest.glatfelters.com
matrixdirect.com
aigtheftandloss.dk
gigcrmproddws.glatfelters.com
*.myaig.com
*.aig.de
comfortprotectplans.com
*.servicenetdirect.com
*.vfismisslou.com
aigtheftandloss.de
*.aig.co.jp
app.st3.aiglife.co.uk
*.theftandloss.cl
test.api.serviceplancenter.com
*.matrixdirect.com
aigtheftandloss.uk
*.valic.com
serviceplanspurchase.com
hdhvacwarranty.com
serviceplanhub.com
*.cropriskservices.com
*.glatfelters.com
*.responderhelp.com
*.sunamericafunds.com
claims.comfortsureplan.com
test.comfortsureplan.com
test.mechanicalcontractorschoice.com
*.idp.aig.com
*.api.aig.net
ws-tst.glatfelters.com
mutual-aid.vfis.com
*.vfiscanada.com
*.aigtheftandloss.at
hvaccoverageverification.com
apihelp4test.aig.co.il
test-claims.comfortsureplan.com
*.hdhvacwarranty.com
*.websvcs.qa.travelguard.ca
*.seguros.nprd.aig.com.es
*.aigtheftandloss.com.au
claims.completecareplus.com
test-claims.contractorspreferred.com
*.pcgbroker.aig.com
secureapp.glatfelters.com
*.aig.com
*.completecareplus.com
*.aigtheftandloss.uk
aigtheftandloss.fi
integration01.layahealthcare.ie
imperva.com
live.cloud.api.aig.net
dev.cloud.api.aig.net
servicenetdirect.com
*.serviceplans.com
iafcf.org
aig.co.il
*.aigtheftandloss.de
*.bipro.aig.de
webservices.servicenetsecure.com
*.aigtheftandloss.dk
*.glatfelterhealthcarepractice.com
*.vfisal.com
glatfelterbrokerage.com
vfismichigan.com
wuebanet.de
claims.climateshieldcomplete.com
*.aig.co.il
theftandloss.cl
glatfelters.com
test.climateshieldcomplete.com
*.glatfelterpublicpractice.com
gigcrmtestdws.glatfelters.com
mymemberguard.com
*.mymemberguard.com
*.websvcs.qa.travelguard.com
50years.vfis.com
*.glatfelterspecialtybenefits.com
www.completecareplus.com
vfismidwest.com
*.glatfelterreligiouspractice.com
*.tga-ins.com
gigcrmprodauth.glatfelters.com
*.iafcf.org
test.servicenetsecure.com
myaig.com
*.qa.travelguard.com
qa.aigtheftandloss.com.au
vfisaz.com
*.sndirect.com
*.vfisaz.com
gigcrmprod.glatfelters.com
maintenance.glatfelters.com
*.hvaccoverageverification.com
glatfelterspecialtybenefits.com
test.mycomfortshield.com
*.snapplerefund.com
*.aigtheftandloss.fi
claims.mechanicalcontractorschoice.com
*.pcgbroker.nprd.aig.com
*.crs.farm
test-claims.mycomfortshield.com
*.stage.crs.farm
*.customerpltfm.corebridgefinancial.com
snapplerefund.com
ws.glatfelters.com
qa.aigtheftandloss.uk
*.validusre.bm
*.customerpltfm.cropriskservices.com
*.dmp.nprd.aiginsurance.ca
qa.serviceplanhub.com
*.vfismidwest.com
*.vfismichigan.com
test-claims.completecareplus.com
*.serviceplanhub.com
secureapptest.glatfelters.com
*.yourserviceplan.com
*.wuebanet.de
aigtheftandloss.com.au
integration02.layahealthcare.ie
*.aig.com.au
test.aiguswarranty.com
vfismisslou.com
aigtheftandloss.at
qa.aigtheftandloss.de
test.serviceplancenter.com
sndirect.com
test-claims.mechanicalcontractorschoice.com
*.hip12api.aig.com
sunamericafunds.com
vfiscanada.com
claims.contractorspreferred.com
*.glatfeltercommercialambulance.com
*.comfortprotectplans.com
*.cloud.api.aig.net
*.hip2api.aig.com
integration01.layalifeinsurance.ie
vfisal.com
www.responderhelp.com
test.contractorspreferred.com
*.glatfelterbrokerage.com
test-claims.climateshieldcomplete.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIISljCCEX6gAwIBAgIQAYsThdv3AUZWDNLhq8WyMTANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEx
MDExODEyMDZaFw0yNDA0MjkxODEyMDZaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLkK2kU5JK5R5AccIlhI
aXMzeOqpLsPmYExjo3Coc/A2RLmZy+EWuCd2RLafbh25u2x3pV+WvRUU+R1QjQp6
0zY+jfp5XnuXfwUxiUjm+skhPwwH0a24NXScRYu2y5dgNIZAU9ly5px56ClCFG08
r3WhlxoGBiXa/3NUE2ay7r1SeVzH5SZTohAtZRg4OUvWa5HLSDyBBZlAuLk7CeC+
nVjxmhxE3yPqnv1Zy0ElsExZwrdYRrIj89tY3AP3VDvRo5OD1e7wr0TDFDWrokV3
nnR4HhdK36jhXZCEWRnDBhiKA/D5C+ZMcpFSs3jlP+6CeJeTD9QBVNire+h4AvtR
cwIDAQABo4IPnDCCD5gwgg2+BgNVHREEgg21MIINsYIUY29tcGxldGVjYXJlcGx1
cy5jb22CHWRldi5hcGkuc2VydmljZXBsYW5jZW50ZXIuY29tghYqLmNkcGZub2wu
bnByZC5haWcuY29tgh5naWdjcm10ZXN0YXV0aC5nbGF0ZmVsdGVycy5jb22CFCou
bXlhaWcubnByZC5haWcuY29tghoqLnNlcnZpY2VwbGFuc3B1cmNoYXNlLmNvbYIi
aW50ZWdyYXRpb24wMi5sYXlhbGlmZWluc3VyYW5jZS5pZYIaZ2lnY3JtdGVzdC5n
bGF0ZmVsdGVycy5jb22CEG1hdHJpeGRpcmVjdC5jb22CEmFpZ3RoZWZ0YW5kbG9z
cy5ka4IdZ2lnY3JtcHJvZGR3cy5nbGF0ZmVsdGVycy5jb22CCyoubXlhaWcuY29t
gggqLmFpZy5kZYIXY29tZm9ydHByb3RlY3RwbGFucy5jb22CFiouc2VydmljZW5l
dGRpcmVjdC5jb22CESoudmZpc21pc3Nsb3UuY29tghJhaWd0aGVmdGFuZGxvc3Mu
ZGWCCyouYWlnLmNvLmpwghVhcHAuc3QzLmFpZ2xpZmUuY28udWuCESoudGhlZnRh
bmRsb3NzLmNsgh50ZXN0LmFwaS5zZXJ2aWNlcGxhbmNlbnRlci5jb22CEioubWF0
cml4ZGlyZWN0LmNvbYISYWlndGhlZnRhbmRsb3NzLnVrggsqLnZhbGljLmNvbYIY
c2VydmljZXBsYW5zcHVyY2hhc2UuY29tghJoZGh2YWN3YXJyYW50eS5jb22CEnNl
cnZpY2VwbGFuaHViLmNvbYIWKi5jcm9wcmlza3NlcnZpY2VzLmNvbYIRKi5nbGF0
ZmVsdGVycy5jb22CEyoucmVzcG9uZGVyaGVscC5jb22CFSouc3VuYW1lcmljYWZ1
bmRzLmNvbYIaY2xhaW1zLmNvbWZvcnRzdXJlcGxhbi5jb22CGHRlc3QuY29tZm9y
dHN1cmVwbGFuLmNvbYIkdGVzdC5tZWNoYW5pY2FsY29udHJhY3RvcnNjaG9pY2Uu
Y29tgg0qLmlkcC5haWcuY29tgg0qLmFwaS5haWcubmV0ghZ3cy10c3QuZ2xhdGZl
bHRlcnMuY29tghNtdXR1YWwtYWlkLnZmaXMuY29tghAqLnZmaXNjYW5hZGEuY29t
ghQqLmFpZ3RoZWZ0YW5kbG9zcy5hdIIcaHZhY2NvdmVyYWdldmVyaWZpY2F0aW9u
LmNvbYIWYXBpaGVscDR0ZXN0LmFpZy5jby5pbIIfdGVzdC1jbGFpbXMuY29tZm9y
dHN1cmVwbGFuLmNvbYIUKi5oZGh2YWN3YXJyYW50eS5jb22CGyoud2Vic3Zjcy5x
YS50cmF2ZWxndWFyZC5jYYIZKi5zZWd1cm9zLm5wcmQuYWlnLmNvbS5lc4IYKi5h
aWd0aGVmdGFuZGxvc3MuY29tLmF1ghtjbGFpbXMuY29tcGxldGVjYXJlcGx1cy5j
b22CJHRlc3QtY2xhaW1zLmNvbnRyYWN0b3JzcHJlZmVycmVkLmNvbYITKi5wY2di
cm9rZXIuYWlnLmNvbYIZc2VjdXJlYXBwLmdsYXRmZWx0ZXJzLmNvbYIJKi5haWcu
Y29tghYqLmNvbXBsZXRlY2FyZXBsdXMuY29tghQqLmFpZ3RoZWZ0YW5kbG9zcy51
a4ISYWlndGhlZnRhbmRsb3NzLmZpgh9pbnRlZ3JhdGlvbjAxLmxheWFoZWFsdGhj
YXJlLmllggtpbXBlcnZhLmNvbYIWbGl2ZS5jbG91ZC5hcGkuYWlnLm5ldIIVZGV2
LmNsb3VkLmFwaS5haWcubmV0ghRzZXJ2aWNlbmV0ZGlyZWN0LmNvbYISKi5zZXJ2
aWNlcGxhbnMuY29tgglpYWZjZi5vcmeCCWFpZy5jby5pbIIUKi5haWd0aGVmdGFu
ZGxvc3MuZGWCDiouYmlwcm8uYWlnLmRlgiB3ZWJzZXJ2aWNlcy5zZXJ2aWNlbmV0
c2VjdXJlLmNvbYIUKi5haWd0aGVmdGFuZGxvc3MuZGuCIiouZ2xhdGZlbHRlcmhl
YWx0aGNhcmVwcmFjdGljZS5jb22CDCoudmZpc2FsLmNvbYIXZ2xhdGZlbHRlcmJy
b2tlcmFnZS5jb22CEHZmaXNtaWNoaWdhbi5jb22CC3d1ZWJhbmV0LmRlgiBjbGFp
bXMuY2xpbWF0ZXNoaWVsZGNvbXBsZXRlLmNvbYILKi5haWcuY28uaWyCD3RoZWZ0
YW5kbG9zcy5jbIIPZ2xhdGZlbHRlcnMuY29tgh50ZXN0LmNsaW1hdGVzaGllbGRj
b21wbGV0ZS5jb22CHiouZ2xhdGZlbHRlcnB1YmxpY3ByYWN0aWNlLmNvbYIdZ2ln
Y3JtdGVzdGR3cy5nbGF0ZmVsdGVycy5jb22CEW15bWVtYmVyZ3VhcmQuY29tghMq
Lm15bWVtYmVyZ3VhcmQuY29tghwqLndlYnN2Y3MucWEudHJhdmVsZ3VhcmQuY29t
ghA1MHllYXJzLnZmaXMuY29tgiEqLmdsYXRmZWx0ZXJzcGVjaWFsdHliZW5lZml0
cy5jb22CGHd3dy5jb21wbGV0ZWNhcmVwbHVzLmNvbYIPdmZpc21pZHdlc3QuY29t
giEqLmdsYXRmZWx0ZXJyZWxpZ2lvdXNwcmFjdGljZS5jb22CDSoudGdhLWlucy5j
b22CHmdpZ2NybXByb2RhdXRoLmdsYXRmZWx0ZXJzLmNvbYILKi5pYWZjZi5vcmeC
GXRlc3Quc2VydmljZW5ldHNlY3VyZS5jb22CCW15YWlnLmNvbYIUKi5xYS50cmF2
ZWxndWFyZC5jb22CGXFhLmFpZ3RoZWZ0YW5kbG9zcy5jb20uYXWCCnZmaXNhei5j
b22CDiouc25kaXJlY3QuY29tggwqLnZmaXNhei5jb22CGmdpZ2NybXByb2QuZ2xh
dGZlbHRlcnMuY29tghttYWludGVuYW5jZS5nbGF0ZmVsdGVycy5jb22CHiouaHZh
Y2NvdmVyYWdldmVyaWZpY2F0aW9uLmNvbYIfZ2xhdGZlbHRlcnNwZWNpYWx0eWJl
bmVmaXRzLmNvbYIYdGVzdC5teWNvbWZvcnRzaGllbGQuY29tghMqLnNuYXBwbGVy
ZWZ1bmQuY29tghQqLmFpZ3RoZWZ0YW5kbG9zcy5maYImY2xhaW1zLm1lY2hhbmlj
YWxjb250cmFjdG9yc2Nob2ljZS5jb22CGCoucGNnYnJva2VyLm5wcmQuYWlnLmNv
bYIKKi5jcnMuZmFybYIfdGVzdC1jbGFpbXMubXljb21mb3J0c2hpZWxkLmNvbYIQ
Ki5zdGFnZS5jcnMuZmFybYInKi5jdXN0b21lcnBsdGZtLmNvcmVicmlkZ2VmaW5h
bmNpYWwuY29tghFzbmFwcGxlcmVmdW5kLmNvbYISd3MuZ2xhdGZlbHRlcnMuY29t
ghVxYS5haWd0aGVmdGFuZGxvc3MudWuCDioudmFsaWR1c3JlLmJtgiQqLmN1c3Rv
bWVycGx0Zm0uY3JvcHJpc2tzZXJ2aWNlcy5jb22CGiouZG1wLm5wcmQuYWlnaW5z
dXJhbmNlLmNhghVxYS5zZXJ2aWNlcGxhbmh1Yi5jb22CESoudmZpc21pZHdlc3Qu
Y29tghIqLnZmaXNtaWNoaWdhbi5jb22CIHRlc3QtY2xhaW1zLmNvbXBsZXRlY2Fy
ZXBsdXMuY29tghQqLnNlcnZpY2VwbGFuaHViLmNvbYIdc2VjdXJlYXBwdGVzdC5n
bGF0ZmVsdGVycy5jb22CFSoueW91cnNlcnZpY2VwbGFuLmNvbYINKi53dWViYW5l
dC5kZYIWYWlndGhlZnRhbmRsb3NzLmNvbS5hdYIfaW50ZWdyYXRpb24wMi5sYXlh
aGVhbHRoY2FyZS5pZYIMKi5haWcuY29tLmF1ghZ0ZXN0LmFpZ3Vzd2FycmFudHku
Y29tgg92ZmlzbWlzc2xvdS5jb22CEmFpZ3RoZWZ0YW5kbG9zcy5hdIIVcWEuYWln
dGhlZnRhbmRsb3NzLmRlghp0ZXN0LnNlcnZpY2VwbGFuY2VudGVyLmNvbYIMc25k
aXJlY3QuY29tgit0ZXN0LWNsYWltcy5tZWNoYW5pY2FsY29udHJhY3RvcnNjaG9p
Y2UuY29tghIqLmhpcDEyYXBpLmFpZy5jb22CE3N1bmFtZXJpY2FmdW5kcy5jb22C
DnZmaXNjYW5hZGEuY29tgh9jbGFpbXMuY29udHJhY3RvcnNwcmVmZXJyZWQuY29t
giMqLmdsYXRmZWx0ZXJjb21tZXJjaWFsYW1idWxhbmNlLmNvbYIZKi5jb21mb3J0
cHJvdGVjdHBsYW5zLmNvbYITKi5jbG91ZC5hcGkuYWlnLm5ldIIRKi5oaXAyYXBp
LmFpZy5jb22CImludGVncmF0aW9uMDEubGF5YWxpZmVpbnN1cmFuY2UuaWWCCnZm
aXNhbC5jb22CFXd3dy5yZXNwb25kZXJoZWxwLmNvbYIddGVzdC5jb250cmFjdG9y
c3ByZWZlcnJlZC5jb22CGSouZ2xhdGZlbHRlcmJyb2tlcmFnZS5jb22CJXRlc3Qt
Y2xhaW1zLmNsaW1hdGVzaGllbGRjb21wbGV0ZS5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU6okxMbWi
VHJ2DR5Y1LZPaqYEjPQwVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoB
AzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBv
c2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEF
BQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0
bHNjYTIwMjNxNDBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWdu
LmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxNC5jcnQwHwYDVR0jBBgw
FoAUqhFxj5XEWJiLsW4PO1BoJLy4GbwwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDov
L2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0LmNy
bDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVMfgd0R
BPotEYaHQOkfnj9QyJRaR/Dbh/gZgiZRSp8Ip7znGd8fWu++fBENPuRPQq57UFin
JKex5Vaw8q5ECgh+9fnxWTiP/PtknBmS+mGsFcourNlksG1EOmCIeUMZmAC8EdFM
KvJP6nhsz77QCbCWW4DSS+FK08+W/l0kTmmHAG7MeVehQmECQnm/YZP6AQ9SeJz5
o+4BmH1/NZ6HQtmV9waWBjywJZ07RUuOtTy16kN9KWcprj7hw0d2VqttBK+q2YT2
ta3fmgmypvICcJCRvKbPYmJTfTl+FLyb6yUKu/M+FbSXEsK4Euq44YZNFDUnB3gV
D4Y4VBhFOEa+QQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLkK2kU5JK5R5AccIlhI
aXMzeOqpLsPmYExjo3Coc/A2RLmZy+EWuCd2RLafbh25u2x3pV+WvRUU+R1QjQp6
0zY+jfp5XnuXfwUxiUjm+skhPwwH0a24NXScRYu2y5dgNIZAU9ly5px56ClCFG08
r3WhlxoGBiXa/3NUE2ay7r1SeVzH5SZTohAtZRg4OUvWa5HLSDyBBZlAuLk7CeC+
nVjxmhxE3yPqnv1Zy0ElsExZwrdYRrIj89tY3AP3VDvRo5OD1e7wr0TDFDWrokV3
nnR4HhdK36jhXZCEWRnDBhiKA/D5C+ZMcpFSs3jlP+6CeJeTD9QBVNire+h4AvtR
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2051353230325168540323015129028735537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 18:12:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 18:12:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21299283039159139296525343440626354048314537505833397086141022727226502615984701199256758777042355732052086203327251245273013933001749184548687251436994521947801016113293858073806253534412781564349289307405174747060415081644542032646037113609709161441542611880984167596251717448028431661244268391256656685100198390507360999461952568042820819249676814558216674791868559292635929667600583992760323070329961637726040175805586736165640990120271215255417522280042810654992588430900285478787881150129041253456547619236192108086741851092763515496489940736261820428516534718336631425110954920170010609230316385837475677557107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3509 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpfnol.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtestauth.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaig.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration02.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtest.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmproddws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortprotectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicenetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismisslou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st3.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theftandloss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.responderhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunamericafunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-tst.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutual-aid.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfiscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvaccoverageverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apihelp4test.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.qa.travelguard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.nprd.aig.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgbroker.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureapp.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration01.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iafcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bipro.aig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterhealthcarepractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterbrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuebanet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theftandloss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterpublicpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmtestdws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymemberguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymemberguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websvcs.qa.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50years.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterreligiouspractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tga-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmprodauth.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iafcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfisaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfisaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigcrmprod.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvaccoverageverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glatfelterspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgbroker.nprd.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crs.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.crs.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.corebridgefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.validusre.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerpltfm.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.nprd.aiginsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfismichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.completecareplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureapptest.glatfelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wuebanet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration02.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfismisslou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip12api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunamericafunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfiscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfeltercommercialambulance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortprotectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.aig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip2api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration01.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.responderhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glatfelterbrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea893131b5a25472760d1e58d4b64f6aa6048cf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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