imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:72:af:d9:0f:ef:e9:1f:90:46:d8:63:95:8e:ee:fe was issued on by GlobalSign nv-sa.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:72:af:d9:0f:ef:e9:1f:90:46:d8:63:95:8e:ee:fe
Serial Number (int): 1924716456782100172085614237834997502
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:40:24:38:9c:9d:84:67:82:3c:36:e0:e3:50:4a:d5:1f:86:7c:40
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 3d:6a:71:7f:73:1b:01:83:e3:06:77:e5:9f:1d:e6:bf:13:3f:b8:af
Fingerprint (sha256): 1b:35:1b:aa:b4:a2:4c:c0:45:c3:a7:c3:80:e8:4b:a5:55:ce:a6:f3:fd:9b:84:4e:23:1f:c1:13:43:52:ea:0c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

questintegrity.com
*.uat1.bakerhughes.com
*.s1ahm.cordant.bakerhughes.com
*.store.bakerhughesds.com
*.siirtecnigi.com
*.na01-sanucc.bakerhughes.com
bakerhughesds.com
bes.uat.welllink.bakerhughes.com
*.bakerhughesds.com
*.iam.bakerhughes.com
*.pa.bhc1.bakerhughes.com
*.staging.bakerhughesds.com
ga.demo.cordantapm.bakerhughes.com
*.uat.bakerhughes.com
turbinate.com
star.npabhc1-sanucc.bakerhughes.com
*.na02-sanucc.bakerhughes.com
*.staging.valvstore.com
www.questintegrity.com
www.turbinate.com
*.trials.bhc3.bakerhughes.com
shopbakerhughes.com
bentlyhost.com
*.na.system1apm.bakerhughes.com
*.shopbakerhughes.com
bnhost.na.system1assethealth.bakerhughes.com
*.bntechsupport.com
*.divigraph.com
valvstore.com
bntechsupport.com
*.staging.shopbakerhughes.com
bakerhughes.com
*.bentlyhost.com
imperva.com
*.stgc.welllink.bakerhughes.com
*.cordant.bakerhughes.com
*.na.system1assethealth.bakerhughes.com
www.bntechsupport.com
*.stgb.welllink.bakerhughes.com
divigraph.com
siirtecnigi.com
*.eu02-sanucc.bakerhughes.com
*.welllink.uat.bakerhughes.com
*.valvstore.com
*.bakerhughes.com
*.eu.system1assethealth.bakerhughes.com
www.bakerhughes.com
*.api.bakerhughes.com
stg70-training.bakerhughes.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6bgd4jw7jerK9L0Nii
R3tEItXNxSeBP0bpKcr6iMacdBFNJOes8VCL1dKTCxJueOe17B+pZsjJ19jqB4/V
QEy9huCBpzBTHq9OlR3FKWttYPxzLbvBvDFGJgEPV5lmjxdBNgjWHFRB4mlA3Rkr
oEyPKg49CiFuWb0Iv/Orw+mYwbyK+3mvzqKzOYjPUd3QMJaiGdQFRaNc3nB5tBab
vYYbxu90KcihdlPgJKy8peU0oPWXtCQ+nrljCNwlw05Dk062/OEWqUxrnA8yc6ZO
bs6jfBdC9+3xeJHD8RU3V2pbDThR34raIMVPMPiMNYg6qZ0SELCJBPzRHe5e55bt
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1924716456782100172085614237834997502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 10:41:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 10:41:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17672676003434443373802180651170620209573717975780996221183635444213167645244323119884772335367348954136106336363278951571416594339630467740102608434602354523989938176729736548804032465624774853861911702512691691798944950027558131216987875100183727428516808510636893297699826636765021090419426688857277053252610893733314695755502682822895383888837579934570719424875646936246343004996340455406925878553238852985323405289343715791791615410179171592426368835011021012157827161737934508000903945729610870413689488583758666863033003221413066172947117968500301905115209481785484192611630009704346883764750656974863010819571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questintegrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat1.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s1ahm.cordant.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.bakerhughesds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siirtecnigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na01-sanucc.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.uat.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughesds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pa.bhc1.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.bakerhughesds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.demo.cordantapm.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star.npabhc1-sanucc.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na02-sanucc.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.valvstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questintegrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trials.bhc3.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentlyhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1apm.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopbakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnhost.na.system1assethealth.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bntechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divigraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valvstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bntechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.shopbakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentlyhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgc.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cordant.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1assethealth.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bntechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgb.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divigraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siirtecnigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu02-sanucc.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welllink.uat.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valvstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.system1assethealth.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg70-training.bakerhughes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de4024389c9d8467823c36e0e3504ad51f867c40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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