imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:52:90:a3:bc:ef:e3:03:f3:9d:fc:85:9f:6a:84:1a was issued on by GlobalSign nv-sa.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:52:90:a3:bc:ef:e3:03:f3:9d:fc:85:9f:6a:84:1a
Serial Number (int): 1757929977831374571458461408126731290
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 55:d3:76:76:6a:e0:3e:96:1f:1e:fe:ae:00:1e:4b:ac:39:68:50:89
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): 69:a1:ed:cd:f8:50:b4:06:5f:19:2d:c4:fe:35:2c:ea:ec:a4:44:c3
Fingerprint (sha256): 14:ca:ea:48:3d:fc:90:bc:67:e7:cf:f7:8f:cf:d1:bf:95:4f:49:3e:eb:e7:b8:d1:ed:39:17:8f:02:83:96:74

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate imperva.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travelit.com.br
www.jesuslightoftheworld.me
www.kipsgymnastics.com
www.analysis.co.il
conexionregional.net
old.hamaarag.org.il
proskills.edu
*.tdesk.com.br
tdesk.com.br
gateway.ragezone.com
torim.mey-herz.co.il
www.proskills.edu
www.racebaitr.com
justshareit.com
kipsgymnastics.com
www.proconpumps.com
services.isabelaflores.com
*.pacificlife.com
kci.telehouse.com.sg
*.aponixtechnology.com
transitioningyourlife.com
manager-support-gcp.sensedia.com
bestplumbing-updates.roccommerce.net
portal.senegocia.com
www.trapdoorescapestream.com
*.conexionregional.net
www.transitioningyourlife.com
donnaberrydesigns.com
trapdoorescapestream.com
canopia.com
racebaitr.com
qaportal.senegocia.com
crmtest.ipanel.co.il
www.donnaberrydesigns.com
*.justshareit.com
jesuslightoftheworld.me
xmwxtfr.baronservices.com
www.canopia.com
awesomecloud.com
parquearauco.senegocia.com
analysis.co.il
app-prod.criskco.com
apps.mogas.com
saftnet2.baronservices.com
*.nordicservices.pl
*.travelit.com.br
www-stage.justshareit.com
*.tollsbymailny.com
imperva.com
proconpumps.com
projects.g-dlevy.co.il
apps.analysis.co.il
mi.g-dlevy.co.il
mng.ticket2platform.com
info.timelesstoday.tv
www.awesomecloud.com
admin.frontiersusa.org
mbanking.cab.jo
tollsbymailny.com
secure.frontiersusa.org
nordicservices.pl
aramark.senegocia.com
pacificlife.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhT6pklrWephNcZLXIXk
E9eCvmKJnx7RQ5HEr3Ki8N7+CFBR4XSjW/+3tULrdAlhXorGioJxiBsq5P8qGXo1
ZXCY/w+CUQRyc846Fe3FuHRKJsUC3zQrwmOIxq8Zv1BXuhzzeLRlE91ARB7mx9y0
991bzr6FVVI/jwZMFK8hpS6EwANW3IT6nsbdnV/leTsVvuG6pr+Gz/ZYPKSjIqlW
sixmaXiephO02hq9JuZZ4zMK6iH2B154xx8Apu4r6D5b9Y2VCzgzjKDxW3108yNI
4AXQ68bj/buRX30VGAqnF3izU147jmQ/XaPvuCDufE2O5oMzVCqL29vhOnv+ew0e
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1757929977831374571458461408126731290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 11:42:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 11:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21470857023928790117234311058319377819409031302599438339080177192123065482579390198254090671400063153613174995276468894485194020399124917786928239585231583532490622041495089613527906508343238356865692673545808448835914264525998071967972319007250598065935240776535176281925267255306053868920470861264106441302502860755541676079150703577029781903973777007634191780127364850706187052231622779748918535861524986113105783201192386133835867391517329074881685165946691650176286258616279385682200489038950090220400251604199230276223308306052118166672741599575192617026981733890006451073781098704628505923937274699259560402681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesuslightoftheworld.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kipsgymnastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.analysis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexionregional.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.hamaarag.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proskills.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdesk.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdesk.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.ragezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torim.mey-herz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proskills.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racebaitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justshareit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipsgymnastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proconpumps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.isabelaflores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kci.telehouse.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aponixtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitioningyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager-support-gcp.sensedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestplumbing-updates.roccommerce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.senegocia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trapdoorescapestream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conexionregional.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transitioningyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaberrydesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trapdoorescapestream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racebaitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaportal.senegocia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.ipanel.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donnaberrydesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justshareit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesuslightoftheworld.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmwxtfr.baronservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parquearauco.senegocia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analysis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-prod.criskco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mogas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saftnet2.baronservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordicservices.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.justshareit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tollsbymailny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proconpumps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.g-dlevy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.analysis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.g-dlevy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mng.ticket2platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.timelesstoday.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking.cab.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollsbymailny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.frontiersusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordicservices.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aramark.senegocia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55d376766ae03e961f1efeae001e4bac39685089
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000432252947db16929a9d53832a1d1318072682eef41ff8aeed1770222224db0ab7f7d55a540005e14909b3c6578dfa8448f0189b84b201f45e73ae5c264377268d0c4c0e2d356def810afe23329b35edafa457c943dc52a094f504643fb92c6b250dcc1e1cd758fe3c1c5b4c54d3d3019ad1f4084f61b3a0cf4ca94b94a3612c72d16c7805389ffa1e8e5de1ba59b4618183f8ed21d8563406f7d43d85cbffe71fa2e0fb6326bf4fb9d508e293270f8c357e92435b36b81388d05fa847b964c61924ff3d64461e5a9dcf98b970066ffd0aaf6364323e0d8ec55a89db17f32d7fb293a809f4c116a2e0fb3df5ecb5fc77b889d3ceed57466f5a78a9796fc92eb6