imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:eb:3a:39:0c:72:1f:54:d8:89:10:1b:ee:5a:ca:51 was issued on by GlobalSign nv-sa.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:eb:3a:39:0c:72:1f:54:d8:89:10:1b:ee:5a:ca:51
Serial Number (int): 2550598657154661095343005267595545169
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0c:7a:f1:72:2d:64:13:14:f1:2f:ab:d3:f1:03:37:2c:f1:40:34:1e
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): bf:82:15:b7:17:6d:14:d2:47:d2:b3:d0:05:19:42:0a:17:f6:bd:fc
Fingerprint (sha256): 21:be:6b:8c:53:92:80:90:09:89:49:42:2b:7f:28:da:c2:1f:28:7b:76:75:a2:50:2a:8c:5f:bc:aa:c7:ef:bc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ppd.carrefour.com
pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
*.carrefourproperty.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
*.daas-cbq.carrefour.com
*.grupocarrefour.com.br
*.greenweez.com
*.voyages.carrefour.fr
*.training.carrefour.com
carrefour.it
carrefourproperty.com
*.voyages.carrefour.be
*.aloa-assurances.fr
fondation-carrefour.org
*.uat.carrefour-banque.fr
*.cartepass.fr
*.carrefour.pl
*.fondation-carrefour.org
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
ext-serviceclients.carla.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
*.carrefourproperty.fr
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
carrefourproperty.es
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
*.fr.carrefour.com
fr-mim.ppd.carrefour.com
carrefourproperty.it
imperva.com
*.croquetteland.com
*.carrefourproperty.it
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
*.carrefourproperty.es
*.carrefour.fr
dejbox.fr
*.carrefour.be
*.carrefourbelgium.be
financialwebsupplier.ppd.carrefour.com
carrefourproperty.fr
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
supeco.fr
carrefour.pl
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswAeW4UzPHDJ/YFJd25i
/2LSTJIGKPmfgjlJ1YUZNqTww9zfDiZSSt8gDey/46IMl26cMweOCK0kgUIsE8KM
onmR7AikbmX6cOFetiZFx3xKQE0hcxQwR6xWMBBXDWxq+TXVpLaNCeVprvAukVKy
TDdrjRbGAqiypF05HryGUMa2UC2uS1oSXLFfYUuo+fC6fpBY/zu/7UCK585+ke8Z
0v4G6r943HP78MyXpiRLkS7DVZYwJAaLmEo2npkQ2vKFH6PaEEDqdVA+jBd7aUw0
GSdMgE9gEIyKSLN2V4KDbuyBUCb0nE9Elk0lVU0O5H+Anj7vhzYyvQwXG1YaHDnH
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2550598657154661095343005267595545169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 16:07:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 16:07:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22596715064868972423805052624673178442928925460686867854954852454229791915767263132347963814212691676204278792996557039487758917254291121925872748695945852958360417418917458373518188116111952934609995297286990986999025702232505557823795539675973274099490750356880835121776425355804174131319088443545959494990648501645294946360425887198643939008249444704841141542357730318109775189056948453299145034554156263234473468043929281188663039069379030694821404874781774634889900830566815536503007357843232518003059510626515597073942801461090983857742055169733292141140016318562245654898415153024536532515745855996193897301881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-serviceclients.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c7af1722d641314f12fabd3f103372cf140341e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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