imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:72:81:35:2d:34:71:bc:29:f8:44:a4:09:7f:d5:93 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:72:81:35:2d:34:71:bc:29:f8:44:a4:09:7f:d5:93
Serial Number (int): 1923770481579597227056046853165405587
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b4:eb:b2:d9:37:d1:ba:14:9d:b5:f6:a1:5e:61:3a:5e:a6:3d:43:6a
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): a1:b6:ad:7c:b2:99:72:db:c0:67:b0:9e:be:65:cc:14:fd:bf:0d:74
Fingerprint (sha256): 1e:dc:d8:5e:55:30:dd:2b:79:0a:b9:48:c5:11:8f:81:1e:bb:b9:4f:b0:92:0b:77:37:3a:94:3a:35:04:c0:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.specialprograms.powerschool.com
decisioninsite-staging.com
*.ma.schoolspring.com
*.west.schoolspring.com
*.idaho.schoolspring.com
*.louisianateacherprep.com
*.reporting.demo.powerschool.com
*.schoolspring.com
*.veracode.schoolspring.com
*.mizuni.com
*.demo.schoolspring.com
*.eschoolsolutions.com
*.staging.powerschoolcorp.com
*.efinanceplus.demo.powerschool.com
*.teachiowa.schoolspring.com
newmexicoschools.com
*.prodca.powerschoolcorp.com
*.powerschool-registration-by-infosnap.com
*.stiinformationnow.com
louisianateacherprep.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.orchard.schoolspring.com
*.chalkable.com
*.qa-use-01-env1.unified.powerschoolcorp.com
*.schoolspringstaging.com
dcschoolreportcard.org
*.maine.schoolspring.com
*.newmexicoschools.com
*.ohiok12jobs.schoolspring.com
*.tnedu.gov
*.support.schoolspring.com
*.tembostaging.com
*.api.schoolspring.com
*.decisioninsite-staging.com
*.powerschool-training.com
*.teachermatch.org
*.demo.mizuni.com
*.tembotools.com
*.txcharter.schoolspring.com
*.ted.peopleadmin.com
*.schoolspringtest.com
*.dcschoolreportcard.org
*.oregon.schoolspring.com
*.enrollindy.org
*.jags.schoolspring.com
*.staging.powerschool.com
*.atenterprise.powerschool.com
*.esc12.schoolspring.com
*.hrms.powerschool.com
*.hosting.l4u.com
*.sandbox.schoolspring.com
*.staging-pea.powerschool.com
*.versifit.com
*.atrieveerp.com
*.businessplus.powerschool.com
*.tn.gov
*.kickboardforschools.com
*.registration-essential.powerschool.com
*.insights.powerschool.com
*.hoonuit.com
kinvolved.com
kickboardforschools.com
*.assessment.powerschool.com
*.hidoedata.org
*.kentucky.schoolspring.com
*.east.schoolspring.com
*.ptds-dev.powerschool.com
*.tembo.dev
*.fastgrowthtexas.schoolspring.com
*.bp.powerschool.com
*.peopleadmin.ca
*.businessplus.demo.powerschool.com
*.kinvolved.com
*.rhodeisland.schoolspring.com
*.teachphilly.schoolspring.com
imperva.com
*.reportmail.l4u.com
*.talented.schoolspring.com
*.perfplusk12.com
*.esc16.schoolspring.com
*.teachnc.schoolspring.com
*.l4u.com
*.decisioninsite.com
*.perf.schoolspring.com
*.arkansas.schoolspring.com
*.vermont.schoolspring.com
hidoedata.org
*.colorado.schoolspring.com
schoolspring.com
*.dex.powerschoolcorp.com
*.iowa.schoolspring.com
*.produs.powerschoolcorp.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAgguNBEsgtC1B4pLhPk
s6F0BLmS2PcglOb3M9owZJb0ZtxxdfOqse4BFYBtH3/kECVAPfx0fRAtmpUMDHNh
PyQt9Lq8WT8Vi8gddrl9w/jtaw6zz8F34A6f2FmIyQiEXeuXbe1wJZkX8puygi1/
sbRjVaq1FiCq9+4L5EsAP6mrjdQfB2iUMagg7zGdmnCQOw3ntW4QAVmGb/5hYtqA
yXR3rR3omRkVbob5SelnB6IG94+vAKcHqdJI2SjDHhcl6Cy+jUWGQma+T82aISPN
frsd0Rq6N6hsUeFe5+4g56OU0LbMcCviFjxAbqdVO5nxkAS2df6bSjq6vE12XrvI
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1923770481579597227056046853165405587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 19:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-10 19:01:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21212043211734473764047847111190561947488478807491082561440068087351880783965867749535658324178631636434846962188448445553706360095927196438745842569088128272189217238723099142539037764429589007965817003205943993641970930764021015844452790025483151442420318536071388918573984162619016164945706590860899500892373621870409692235294504646092900693423423978382378603924779962403428320429927226598946615794368769720952406763442914564464706969734355372988234991304545673675633813184818776280146988782552935188984870251510717706957328515273191910701049539915074035910820020620740954808249201098489431919851267325838413777077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialprograms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ma.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.west.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idaho.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracode.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachiowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodca.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool-registration-by-infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stiinformationnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianateacherprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchard.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalkable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolspringstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maine.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmexicoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiok12jobs.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnedu.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembostaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.mizuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txcharter.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolspringtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcschoolreportcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregon.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enrollindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jags.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atenterprise.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc12.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrms.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickboardforschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration-essential.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insights.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoonuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinvolved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickboardforschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assessment.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hidoedata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentucky.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.east.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptds-dev.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tembo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastgrowthtexas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinvolved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhodeisland.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachphilly.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reportmail.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talented.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esc16.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachnc.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkansas.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vermont.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidoedata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorado.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dex.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowa.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.produs.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4ebb2d937d1ba149db5f6a15e613a5ea63d436a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183cd96027d0000040300473045022100f424e7fe531213f1ee6543f198dea34979a45cb5bf5fda3cd43ca03a96d0247d0220190bf04af7f349cca9e86edffa9a12d1d2338e68e5ae711d9f9b03f5f348ce76007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183cd9602f80000040300483046022100ac5904d5af0abd1b279c3e75ecccde949635a8e6e348e70e42ffc6f4f0b4c869022100fdd3ce4f25e775da252e1f6706e5db947a325eda36dbf681fced0b9226fc84bd007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183cd9602bb000004030046304402200613d6790f09e0da4981638036fa3601f4be572ff9d1cf2df223dfbfdd6a7fd402205fbe1168dd6583bf881f71c290be75ac9f70a68c1c95e3a9d3df05ddd8c3a8ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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