imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:d6:ff:ff:e9:f0:80:af:43:22:50:85:45:0d:bd:e5 was issued on by GlobalSign nv-sa.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:d6:ff:ff:e9:f0:80:af:43:22:50:85:45:0d:bd:e5
Serial Number (int): 2445571813542498479781975889149804005
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 16:26:40:35:e3:86:94:18:c6:18:2a:69:68:89:18:8c:c7:34:81:4a
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 0d:b1:b7:7d:66:88:cb:7a:44:1f:b6:94:47:f8:c8:d0:38:8f:e4:62
Fingerprint (sha256): 14:7b:d1:d4:14:f1:86:e9:a0:3c:d6:6e:35:d9:25:69:06:c5:7c:66:2d:a6:a5:76:08:c7:cc:21:d5:eb:36:e8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

endsickness.org
www.deltadentalid.com
www.thirdwavevolunteers.com
polarstarcpa.com
www.rehobothremarket.com
www.losandesfoods.com
www.anicksilencieux.com
vintagehondaminis.com
hargraveshomeandhearth.com
www.elsiemfg.com
mpdepot.net
thenewarktimes.com
www.radyx.com
www.hargraveshomeandhearth.com
www.joelberman.design
paradisegreens.com
stevenmotors.com
texasexteriorshutters.com
www.vintagehondaminis.com
www.yardcorocks.com
www.lindaspets.com
losandesfoods.com
www.hhcf.org
www.magelineusa.com
www.utahlegaladvocates.com
www.hospiciodeloeste.com
www.thecantoncitizen.com
yardcorocks.com
unleashyourbestselfnow.com
seairseaplanes.com
bnkmcanada.com
skyemclain.com
www.teatopit.com
dealer.snowexproducts.com
hendersonfirstumc.org
www.verifieddogpedigrees.net
hospiciodeloeste.com
thirdwavevolunteers.com
www.tjaguerrero.org.mx
www.paradisegreens.com
www.twoinchesshort.com
teatopit.com
www.mpdepot.net
*.endsickness.org
jessbonasso.com
www.ewheli.com
www.polarstarcpa.com
narcissismfree.com
www.stevenmotors.com
deltadentalid.com
imperva.com
www.lafranchilaw.com
radyx.com
joanswatercolors.com
thecantoncitizen.com
dealer.westernplows.com
www.hendersonfirstumc.org
www.unleashyourbestselfnow.com
www.texasexteriorshutters.com
lindaspets.com
magelineusa.com
utahlegaladvocates.com
elsiemfg.com
www.seairseaplanes.com
www.colegiosgarcilaso.edu.pe
www.narcissismfree.com
anicksilencieux.com
rehobothremarket.com
www.joanswatercolors.com
colegiosgarcilaso.edu.pe
twoinchesshort.com
www.bnkmcanada.com
www.jessbonasso.com
hhcf.org
joelberman.design
www.skyemclain.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhy+VCgt2hJNJp3xDfeZ
OzVVWrAGbqZk9q2HsvOiMXx3AahqQAn+nkC24BorQ9X5PeSjszsPL8vDxZYCYyqX
AJ/0BRIpoHJFd8N7FPCWWMDCwbjw5/d6/MoTNjZKimoGWUDX1e3ZSGw57e4HzZ/K
7D5PbQ+TB3nPPhzfXjEru+D3JPRsysw0AqWqG2ZEkgZttuzTZcAOxkjPKeuJ/nGM
d1QUR7J06mnME5hXIK/O3Pz5ixr9uLs4xB3pVAap+1n/R+ss15GXHsMqH72ZVFKi
rhzIBW9Zn5+9dEdvFAiwvtzweWgc6JI4Gs7xLIPAGPoXZvRRNml8tJ1V5mz33r5J
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2445571813542498479781975889149804005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 09:22:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-30 09:22:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18949919679040855567475868729488082852424715953117179205409564549124432317775533606153878608770345362627954893690371229077789884254759612492332583840596599763170423451425701637519144583243627898081168539174591508901151320128718935682383130340583816051590811995545570240344141041391292213616370308160816907866258432845434766863847472798135535030888107365875433521490979299511312775043566406440718523497715002887066459887390012847242626162974624195669071360727200620356900963581347050706494828009179731028444228456138222862777916265746263230701707101773642507951081373281203084568669892884696789153252244723079361481167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endsickness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltadentalid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdwavevolunteers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polarstarcpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rehobothremarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losandesfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anicksilencieux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehondaminis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hargraveshomeandhearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsiemfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpdepot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewarktimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hargraveshomeandhearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joelberman.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisegreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasexteriorshutters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintagehondaminis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yardcorocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindaspets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losandesfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hhcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magelineusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahlegaladvocates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospiciodeloeste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecantoncitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardcorocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unleashyourbestselfnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seairseaplanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkmcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyemclain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teatopit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.snowexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonfirstumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifieddogpedigrees.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospiciodeloeste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdwavevolunteers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjaguerrero.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisegreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twoinchesshort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatopit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpdepot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endsickness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessbonasso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewheli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polarstarcpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narcissismfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltadentalid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafranchilaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joanswatercolors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecantoncitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.westernplows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonfirstumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unleashyourbestselfnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasexteriorshutters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindaspets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magelineusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahlegaladvocates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsiemfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seairseaplanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiosgarcilaso.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narcissismfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anicksilencieux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehobothremarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joanswatercolors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiosgarcilaso.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twoinchesshort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnkmcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jessbonasso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelberman.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyemclain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16264035e3869418c6182a696889188cc734814a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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