imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:a6:19:06:a9:36:fd:ae:7c:1e:a9:32:52:9e:da:6b was issued on by GlobalSign nv-sa.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a6:19:06:a9:36:fd:ae:7c:1e:a9:32:52:9e:da:6b
Serial Number (int): 2191656862280210268050407072703896171
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e9:c4:be:20:db:34:c9:32:3c:9f:94:cd:c4:86:e9:13:93:71:2b:03
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 8e:a4:96:34:b1:0d:07:96:b2:ad:11:a9:bf:07:36:dc:2e:9e:f9:f2
Fingerprint (sha256): 15:7d:45:9f:7b:19:4e:ee:8d:7d:ab:06:08:28:0a:9c:1a:b2:48:85:f9:4b:1c:1e:b7:27:31:2e:c8:c9:0e:82

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.getrova.com
cslstockbrokers.com
cslportal.fcmb.com
www.fcmbtrustees.com
flexxzone.fcmb.com
*.prd.getrova.io
image.fcmb.com
appraisal.fcmb.com
*.fcmbcapitalmarketsng.com
*.fcmbassetmanagement.com
onlineaccount.fcmb.com
mobileappserver.fcmb.com
developer.fcmb.com
posmerchant.fcmb.com
backendeip.fcmb.com
fcmb.com
fcmbassetmanagement.com
devportal.fcmb.com
yaarnbox.fcmb.com
imperva.com
ibank.fcmb.com
webpayment.fcmb.com
fcmbcapitalmarketsng.com
fcmbgroup.com
*.cslstockbrokers.com
tradeservices.fcmb.com
wallet.fcmb.com
getrova.com
*.fcmbgroup.com
enterpriseregistration.fcmb.com
fcmbtrustees.com
testapp-gw.fcmb.com
businesszone.fcmb.com
*.fcmb.com
yedp.fcmb.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJDTCCB/WgAwIBAgIQAaYZBqk2/a58HqkyUp7aazANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMTAeFw0yMzAx
MTgwNzQ2NDRaFw0yMzA3MTcwNzQ2NDJaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAaCh3ocjuYWD/5HZyzj
WHe8O/zN1kVOmafuCowPsrgLvw1Sh6cqQ2SugMS3nUbtC5G1x/0p7HTSiEHbU0MI
9THeMPYJ2lInG8fK7G60ccNx+0yxvkKhFCuxKLgVklkBuMTYpJGTuA8u8A+LXmVV
qt5X/Lkb9GOEgPemC6BP3FeM4XP35JbhyATD3k4N2F2OqwN6+h0bw5F0vWNL2GWD
gPBcELt44lkUuhbr+AnRrygYWhIAleYwMOKcD20p+l4gzeCElj4WZTn9X8Sm5KR3
GaeNUjh2iFF4iKYcNLv4PlXFVIoLgAd3D21Mkfc1MoH3yHog3kCZ0QzOAxKwNckP
1wIDAQABo4IGEzCCBg8wggLKBgNVHREEggLBMIICvYINKi5nZXRyb3ZhLmNvbYIT
Y3Nsc3RvY2ticm9rZXJzLmNvbYISY3NscG9ydGFsLmZjbWIuY29tghR3d3cuZmNt
YnRydXN0ZWVzLmNvbYISZmxleHh6b25lLmZjbWIuY29tghAqLnByZC5nZXRyb3Zh
Lmlvgg5pbWFnZS5mY21iLmNvbYISYXBwcmFpc2FsLmZjbWIuY29tghoqLmZjbWJj
YXBpdGFsbWFya2V0c25nLmNvbYIZKi5mY21iYXNzZXRtYW5hZ2VtZW50LmNvbYIW
b25saW5lYWNjb3VudC5mY21iLmNvbYIYbW9iaWxlYXBwc2VydmVyLmZjbWIuY29t
ghJkZXZlbG9wZXIuZmNtYi5jb22CFHBvc21lcmNoYW50LmZjbWIuY29tghNiYWNr
ZW5kZWlwLmZjbWIuY29tgghmY21iLmNvbYIXZmNtYmFzc2V0bWFuYWdlbWVudC5j
b22CEmRldnBvcnRhbC5mY21iLmNvbYIReWFhcm5ib3guZmNtYi5jb22CC2ltcGVy
dmEuY29tgg5pYmFuay5mY21iLmNvbYITd2VicGF5bWVudC5mY21iLmNvbYIYZmNt
YmNhcGl0YWxtYXJrZXRzbmcuY29tgg1mY21iZ3JvdXAuY29tghUqLmNzbHN0b2Nr
YnJva2Vycy5jb22CFnRyYWRlc2VydmljZXMuZmNtYi5jb22CD3dhbGxldC5mY21i
LmNvbYILZ2V0cm92YS5jb22CDyouZmNtYmdyb3VwLmNvbYIfZW50ZXJwcmlzZXJl
Z2lzdHJhdGlvbi5mY21iLmNvbYIQZmNtYnRydXN0ZWVzLmNvbYITdGVzdGFwcC1n
dy5mY21iLmNvbYIVYnVzaW5lc3N6b25lLmZjbWIuY29tggoqLmZjbWIuY29tgg15
ZWRwLmZjbWIuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHQYDVR0OBBYEFOnEviDbNMkyPJ+UzcSG6ROTcSsDMFcGA1Ud
IARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0
cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIw
ADCBngYIKwYBBQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmds
b2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIzcTEwSgYIKwYBBQUH
MAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNy
M2R2dGxzY2EyMDIzcTEuY3J0MB8GA1UdIwQYMBaAFEruokdjQzs+ePO0YYNyiHqd
5L23MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20v
Y2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMS5jcmwwggF8BgorBgEEAdZ5AgQCBIIB
bASCAWgBZgB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhcPY
OQcAAAQDAEYwRAIgV7fhahL8p/KFa8TrmO4NHyL33KzUvVg/StL/0yCLsL4CIGcp
WXJ6Tx9zvboG+QSEivoqdhNq5pqzmzNtGvNSQywcAHYAVYHUwhaQNgFK6gubVzxT
8MDkOHhwJQgXL6OqHQcT0wwAAAGFw9g5cgAABAMARzBFAiBbhCffcj0jUg2k1ZjL
uPD6Zl9Rw6WXZsPZNxPkLdAIsQIhALwtheQHHbnUShDjNttnuGS175z0rF9DbtH6
/GXWT7rqAHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGFw9g5
igAABAMARjBEAiBbObgpfTfQ/ltFreg9+cIgeDWDAlWYNiUJLO6r7JpgxAIgQOzi
WIuAbShC3lzK19Bd5u4ctrREC25cqyM6L98MY9IwDQYJKoZIhvcNAQELBQADggEB
AE5YOE96ymBo/UdkgukW4pSCEJQBC/OPCZkARovHLKsGVidQTL5Znz2zKKmzp//E
RSM1L64p1xfvmfIRLyLa9bbSV4TLDsHfKitiRTqJ7yJ7vGfZ1qgeCVhN8BiLM/Kc
ec7tAVGCMW71SAsk0nnT5JjwOU4fSEGHPMYPYguj6s/OewjxA31xZX0xmCh8MQBA
FKRHCvRoycXoAtkwgNQa0oZY/44urET2Pu+h9GClVXz2ZF0xGXHSN0wbIm2piC4o
8/nT7B7z09FW+YQThuYUjvU3ODxDeXFiHxGgBr1H9lcetDr2BH4LYPmVx/uezvGh
Clkz0/uDkTuf5LnWGBHT3aA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAaCh3ocjuYWD/5HZyzj
WHe8O/zN1kVOmafuCowPsrgLvw1Sh6cqQ2SugMS3nUbtC5G1x/0p7HTSiEHbU0MI
9THeMPYJ2lInG8fK7G60ccNx+0yxvkKhFCuxKLgVklkBuMTYpJGTuA8u8A+LXmVV
qt5X/Lkb9GOEgPemC6BP3FeM4XP35JbhyATD3k4N2F2OqwN6+h0bw5F0vWNL2GWD
gPBcELt44lkUuhbr+AnRrygYWhIAleYwMOKcD20p+l4gzeCElj4WZTn9X8Sm5KR3
GaeNUjh2iFF4iKYcNLv4PlXFVIoLgAd3D21Mkfc1MoH3yHog3kCZ0QzOAxKwNckP
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2191656862280210268050407072703896171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 07:46:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 07:46:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23736011474950063443992590255292574057848680619393599787727122593078274900735081316203767621496858095710082745751301709958580388219434140132828696258317095088529900193821724132406196176530407218070146899896627793173419904323692921909263761642650130646859156766910575984739813539612502549055583102760515637488965228598864620187157934181047561257942478418935072475655301889690919913761761393725402145181190332530253060150251781645455307833950683202831127821692037864706113112856212107519434092504684391654098322456626222765555489877965121095345527118004669849755001665899334464243762559092123472774681952892849660432343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getrova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cslstockbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cslportal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcmbtrustees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexxzone.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.getrova.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmbcapitalmarketsng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmbassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineaccount.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileappserver.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posmerchant.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backendeip.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devportal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaarnbox.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibank.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpayment.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbcapitalmarketsng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cslstockbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeservices.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmbgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbtrustees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapp-gw.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesszone.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yedp.fcmb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9c4be20db34c9323c9f94cdc486e91393712b03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185c3d839070000040300463044022057b7e16a12fca7f2856bc4eb98ee0d1f22f7dcacd4bd583f4ad2ffd3208bb0be0220672959727a4f1f73bdba06f904848afa2a76136ae69ab39b336d1af352432c1c0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000185c3d83972000004030047304502205b8427df723d23520da4d598cbb8f0fa665f51c3a59766c3d93713e42dd008b1022100bc2d85e4071db9d44a10e336db67b864b5ef9cf4ac5f436ed1fafc65d64fbaea007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000185c3d8398a000004030046304402205b39b8297d37d0fe5b45ade83df9c2207835830255983625092ceeabec9a60c4022040ece2588b806d2842de5ccad7d05de6ee1cb6b4440b6e5cab233a2fdf0c63d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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