imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:ec:39:99:2a:e4:a1:d3:04:4b:12:0e:24:fb:1e:18 was issued on by GlobalSign nv-sa.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ec:39:99:2a:e4:a1:d3:04:4b:12:0e:24:fb:1e:18
Serial Number (int): 2555778286930177713839551754756890136
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f3:02:94:ec:b5:25:d5:12:3b:29:c5:ab:dc:96:00:0a:a7:81:de:a5
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): a5:a6:8a:22:55:b3:b7:93:93:76:97:83:d4:07:cf:89:54:73:20:cb
Fingerprint (sha256): 1e:1f:35:1d:1b:46:fa:fd:19:45:29:47:dc:94:d9:cc:e3:ce:fe:c8:2a:39:f6:11:3f:d9:e3:85:72:73:d2:03

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kmartcreate.com.au
costcentreapprovaluat.hamilton.kaccess.com.au
api.nonprod.kmart.com.au
*.hamilton.kaccess.com.au
*.kaccess.com.au
portal-nonprod.supplier.kmart.com.au
costing-dev.kmart.com.au
kasservices.co.in
druidbotapp.dev.druiddev.a-kmtkmg.net
nonprod.kmart.com.au
*.ankogcc.com
api.catch-dev.kmart.com.au
notifications.hamilton.kaccess.com.au
imperva.com
costcentreapprovaldev.hamilton.kaccess.com.au
costcentreapproval.hamilton.kaccess.com.au
costing-uat.kmart.com.au
rsdev.kmart.com.au
dev.kmart.com.au
ankogcc.com
portal.supplier.kmart.com.au
www.kmartcreate.com.au
api.catch-rel.kmart.com.au
auth-dev.kmart.com.au
new.kmart.com.au
notificationsdev.hamilton.kaccess.com.au
api.catch-sit.kmart.com.au
auth-nonprod.kmart.com.au
druidbotapp.prod.druidprod.a-kmtkmg.net
portal-dev.supplier.kmart.com.au
*.kmart.co.nz
notificationsuat.hamilton.kaccess.com.au
www.kasservices.co.in
api.catch.kmart.com.au
api.hamilton.kaccess.com.au
app.stores-sit.kmart.com.au
api.kmart.com.au
auth.kmart.com.au

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKYjCCCUqgAwIBAgIQAew5mSrkodMESxIOJPseGDANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMzAeFw0yMzA4
MjMxMTQyMjNaFw0yNDAyMTkxMTQyMjNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWMpAkgr5bGusMDeMqA
ZasDCcxDB4yfc6d3JKF1zX4gA3xzMwdpnDKb7+djuu4x95Pz4OQoouXq73SO1UEi
01cSdaYPG78rGQoeco76zF/wIpz23hAEJ94sDI1mbWvQjNLBhPRZpNexUqdrF1wg
KEPX7R/W8iqTmCXyXMSBFlOsvwZg6ftgfd32vwFa3QgLgkHlIcn/mVNVZAQwdRxI
BTEHkwVRKxlpxCjP7Pt9xpct6hw3iRHzkRgcnE/HhpZtrA5LMjL7EUkRJJBoqMJr
naYaFq/yyo9ZUmAtzHUNpukRZYwMuWRSErwrkl9DdX/BeS2Y5U2eFH32K+QNcWmt
4QIDAQABo4IHaDCCB2QwggQcBgNVHREEggQTMIIED4ISa21hcnRjcmVhdGUuY29t
LmF1gi1jb3N0Y2VudHJlYXBwcm92YWx1YXQuaGFtaWx0b24ua2FjY2Vzcy5jb20u
YXWCGGFwaS5ub25wcm9kLmttYXJ0LmNvbS5hdYIZKi5oYW1pbHRvbi5rYWNjZXNz
LmNvbS5hdYIQKi5rYWNjZXNzLmNvbS5hdYIkcG9ydGFsLW5vbnByb2Quc3VwcGxp
ZXIua21hcnQuY29tLmF1ghhjb3N0aW5nLWRldi5rbWFydC5jb20uYXWCEWthc3Nl
cnZpY2VzLmNvLmlugiVkcnVpZGJvdGFwcC5kZXYuZHJ1aWRkZXYuYS1rbXRrbWcu
bmV0ghRub25wcm9kLmttYXJ0LmNvbS5hdYINKi5hbmtvZ2NjLmNvbYIaYXBpLmNh
dGNoLWRldi5rbWFydC5jb20uYXWCJW5vdGlmaWNhdGlvbnMuaGFtaWx0b24ua2Fj
Y2Vzcy5jb20uYXWCC2ltcGVydmEuY29tgi1jb3N0Y2VudHJlYXBwcm92YWxkZXYu
aGFtaWx0b24ua2FjY2Vzcy5jb20uYXWCKmNvc3RjZW50cmVhcHByb3ZhbC5oYW1p
bHRvbi5rYWNjZXNzLmNvbS5hdYIYY29zdGluZy11YXQua21hcnQuY29tLmF1ghJy
c2Rldi5rbWFydC5jb20uYXWCEGRldi5rbWFydC5jb20uYXWCC2Fua29nY2MuY29t
ghxwb3J0YWwuc3VwcGxpZXIua21hcnQuY29tLmF1ghZ3d3cua21hcnRjcmVhdGUu
Y29tLmF1ghphcGkuY2F0Y2gtcmVsLmttYXJ0LmNvbS5hdYIVYXV0aC1kZXYua21h
cnQuY29tLmF1ghBuZXcua21hcnQuY29tLmF1gihub3RpZmljYXRpb25zZGV2Lmhh
bWlsdG9uLmthY2Nlc3MuY29tLmF1ghphcGkuY2F0Y2gtc2l0LmttYXJ0LmNvbS5h
dYIZYXV0aC1ub25wcm9kLmttYXJ0LmNvbS5hdYInZHJ1aWRib3RhcHAucHJvZC5k
cnVpZHByb2QuYS1rbXRrbWcubmV0giBwb3J0YWwtZGV2LnN1cHBsaWVyLmttYXJ0
LmNvbS5hdYINKi5rbWFydC5jby5ueoIobm90aWZpY2F0aW9uc3VhdC5oYW1pbHRv
bi5rYWNjZXNzLmNvbS5hdYIVd3d3Lmthc3NlcnZpY2VzLmNvLmlughZhcGkuY2F0
Y2gua21hcnQuY29tLmF1ghthcGkuaGFtaWx0b24ua2FjY2Vzcy5jb20uYXWCG2Fw
cC5zdG9yZXMtc2l0LmttYXJ0LmNvbS5hdYIQYXBpLmttYXJ0LmNvbS5hdYIRYXV0
aC5rbWFydC5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU8wKU7LUl1RI7KcWr3JYACqeB3qUwVwYD
VR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZo
dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8E
AjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMzBKBggrBgEF
BQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxh
c3IzZHZ0bHNjYTIwMjNxMy5jcnQwHwYDVR0jBBgwFoAU7aDmAQU+NIIapE9fxb0R
Qarf82EwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNv
bS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3EzLmNybDCCAX8GCisGAQQB1nkCBAIE
ggFvBIIBawFpAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGK
IjQBbQAABAMARzBFAiEAi8ilHZNYXXQ1q15hefUvSgStbxOa5/mb/mz4iafMQiMC
IF2IkgVvd46j+i+5V9rZUjBVpljwizIUAsSve0b+ZXEOAHYAO1N3dT4tuYBOizBb
Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGKIjQB2wAABAMARzBFAiEAl6ZXEO46TRFA
IHVy1fhhdu+rlskADAdXE3yNaxcCmb8CIB8pPFJMtDfY+6ruXRf791h7cfxoRQiM
+N7N/xxqsvT0AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGK
IjQCSgAABAMASDBGAiEA6Sm0l7b2jC+xVxLGOMI+9mZ4TIt39Nt76lEZrDZ0xbsC
IQDD5wrdI2otZmyh/S8pPARjDOkAA1A/uykHfewzNHC1uDANBgkqhkiG9w0BAQsF
AAOCAQEAaQvfYWD6XfPAPBbmmU/RuvvlqTlR5pyaLQQs6ecpoLf7gSTugJD9AP0N
GPFY5DWb60kT9KRebBQkobWfKHk7C9ESXxpJVQ5DtSl0rGkkXT0YtZ0ai69eUOSh
xB6/08Y1EhQiyqcWeQulx4soEzTlUdq3RWv9RXNIFzusmHDPufZEecHy51guT5Fl
5BNo2Iz6bWOAii6nWv8fdNNwKBXuCYRRP6bP2nZc2yKE4TZHUY6x4In1haBOYU7b
4A9dFVPC7zs2t7eBbG1pChwC19RgC1tfm8cFGft1N+H2Wd565dAUdljdVr/82Tgb
v/pX+yupY64xYVz6V3hekfdPnXuVgg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWMpAkgr5bGusMDeMqA
ZasDCcxDB4yfc6d3JKF1zX4gA3xzMwdpnDKb7+djuu4x95Pz4OQoouXq73SO1UEi
01cSdaYPG78rGQoeco76zF/wIpz23hAEJ94sDI1mbWvQjNLBhPRZpNexUqdrF1wg
KEPX7R/W8iqTmCXyXMSBFlOsvwZg6ftgfd32vwFa3QgLgkHlIcn/mVNVZAQwdRxI
BTEHkwVRKxlpxCjP7Pt9xpct6hw3iRHzkRgcnE/HhpZtrA5LMjL7EUkRJJBoqMJr
naYaFq/yyo9ZUmAtzHUNpukRZYwMuWRSErwrkl9DdX/BeS2Y5U2eFH32K+QNcWmt
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2555778286930177713839551754756890136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 11:42:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 11:42:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16823990637002702904749487150434795421157795698884020376788963922257544923029488406634251550717832586620579477388754494363397973495753766931409496553739542988635021584632815017816829158639074537574048321126043231524897244181239016538255372124256287887486523697991703863648468291002141498070430602817789403508892962736440914286630769722269245700402028138239342047105004929068125883292848748407759736415299279669562991043051507152752218818942167417759618277365347743022031214217709291087612911682033551245431450951379702330800814226345415347094030483779041600345156102063348737459475123565701348127620365504049960300001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmartcreate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaluat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-nonprod.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.dev.druiddev.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaldev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapproval.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-uat.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsdev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmartcreate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-rel.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsdev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.prod.druidprod.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsuat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stores-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.kmart.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f30294ecb525d5123b29c5abdc96000aa781dea5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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