imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:bf:b4:c5:b3:5d:a9:f0:26:8a:2d:a7:34:d2:9b:90 was issued on by GlobalSign nv-sa.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bf:b4:c5:b3:5d:a9:f0:26:8a:2d:a7:34:d2:9b:90
Serial Number (int): 2324623192952789929880141084264405904
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d8:9e:54:3d:2d:9e:ce:11:7a:3c:71:59:1c:68:ac:42:a9:4e:b8:02
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 5f:7c:c8:3a:5a:a3:4e:58:80:b6:3a:61:0a:4b:bc:56:31:d2:4d:fc
Fingerprint (sha256): 18:51:4e:bb:42:e0:ed:08:a9:ea:47:0f:33:5c:6c:48:7c:06:99:b9:4b:34:ef:28:0b:6c:d3:4c:e2:1e:f2:e8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com
reservations.hoteldanieli.com
reservations.villarspalace.ch
apigw.israir.co.il
apigw.ophirtours.co.il
reservations.tfehotels.com
reservations.innsofaurora.com
apigw.nehoratours.co.il
opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com
webouprod.avri.as.prod.asc.sabre.com
www.1p01.usc1.int.planning-optimization.sabre.com
airjapan-ext-api-cert-ase1.ezycommerce.sabre.com
manta-api-ase1.ezycommerce.sabre.com
reservations.villarsvictoria.ch
reservation.lamaisonfavart.com
crouter-ngp.int.sabre.com
am.reaccom-manager.cert.sabre.com
opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com
reservations.grandbeachhotel.com
reservations.showboathotelac.com
aerok-api-cert-ase1.ezycommerce.sabre.com
weboucert.avri.as.cert.asc.sabre.com
aerok-ext-api-ase1.ezycommerce.sabre.com
asreporting-us-central.cert.sabre.com
su.reaccom-manager.cert.sabre.com
reservations.vibehotels.com
bedrooms.sohohouse.com
reservations.theinterlude.com.au
webarcert.avri.as.cert.asc.sabre.com
admin-cert-ew3.ezycommerce.sabre.com
reserve.cambridgebeaches.com
bon.res.radixxhost.com
apigw.caspitours.co.il
caw-f9.cert.sabre.com
bon.dcs.radixxhost.com
ey.reaccom-manager.cert.sabre.com
webarprod.avri.as.prod.asc.sabre.com
mondriancondesa.mynuvola.com
skyexpress-api-cert.ezypayment.sabre.com
skyexpress-ext-api-ew3.ezycommerce.sabre.com
reservation.marinobeach.com
airjapan-api-cert-ase1.ezycommerce.sabre.com
wcp-int.getthere.net
airjapan-api-ase1.ezycommerce.sabre.com
bon.app.radixxhost.com
accounts.gke.int.havail.sabre.com
aerok-api-ase1.ezycommerce.sabre.com
hotels.cert.havail.sabre.com
cps.stc.sabre.com
admin-ew3.ezycommerce.sabre.com
fccs.sabre.com
travelextras-ngp.int.sabre.com
6s.reaccom-manager.cert.sabre.com
reservations.soneva.com
opsmobile.amm.sv.as.cert.asc.sabre.com
aerok-ext-api-cert-ase1.ezycommerce.sabre.com
book.bunkhousehotels.com
imperva.com
airjapan-ext-api-ase1.ezycommerce.sabre.com
reservations.villarslodge.ch
sudanair-ext-api-ase1.ezycommerce.sabre.com
opsmobile.mq.as.cert.asc.sabre.com
az.reaccom-manager.cert.sabre.com
cert.cps.stc.sabre.com
bon.appota.radixxhost.com
www.vc01.usc1.int.planning-optimization.sabre.com
demo.avfo.as.cert.asc.sabre.com
sudanair-api-cert.ezypayment.sabre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bANYwqMl8Eh2fxoAtO6
8OQodYuGwsUzIaHocvpFhkGJqyKjrdPh8/zDJhhoYb8WSoW2ACurZy9oZUDs8PLD
EjulMDM2OxSJVQRpWrhDjvlPlml0XI8M7Dk4EIRt/Y1bK9Ai70aFd34rLUc7wdXh
qZoLQuKMn7K3MD67UVR84ggiaIHArp+BYFYBabYOJaT0Nqv59FzObSh3T25N4/BA
wBq0mZRJB+ozXZkEcL1Bdmc1c2DkNSve2Md0ICt8ZPKTxIbKhrgY20y9lEAinfKS
c6WPogmsesntjjyhnuYZDLTpkeRjSLz7LMndXgbyaDanQC5EfJEpUKkKnKAs3Ueu
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2324623192952789929880141084264405904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 19:25:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 19:25:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985480018555399402613011829797998182046304481983034071235585588160164633350614069837951484927545898544918962017332048382054229892099594825636010161752873272250182296045766457682031330444075296829974969701630305766777832116078868653717887853562010450751754672978957454778958121197399438506214643136831422771806825940380825531847556490088082039721605528558641887537561098289100211790238277853425666920314702756429399367132059123055517660776993608063993757296679577687740436525405068525480613258240777147255609668397232343895440077263236626777567218069093278015298719615324948142129691956053947271019103960908178107991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hoteldanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarspalace.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.israir.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tfehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.innsofaurora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.nehoratours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webouprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1p01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarsvictoria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.lamaisonfavart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouter-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.grandbeachhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.showboathotelac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboucert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asreporting-us-central.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.vibehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedrooms.sohohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.theinterlude.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarcert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.cambridgebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.caspitours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondriancondesa.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.marinobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.gke.int.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.cert.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccs.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelextras-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6s.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.soneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.bunkhousehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarslodge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.mq.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vc01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.avfo.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d89e543d2d9ece117a3c71591c68ac42a94eb802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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