imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:20:5f:26:e4:b6:17:c4:b1:24:9d:1d:1c:0f:35:2a was issued on by GlobalSign nv-sa.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:20:5f:26:e4:b6:17:c4:b1:24:9d:1d:1c:0f:35:2a
Serial Number (int): 1497311405623271788943869106541507882
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0c:7a:f1:72:2d:64:13:14:f1:2f:ab:d3:f1:03:37:2c:f1:40:34:1e
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 51:7e:ed:cf:5d:c5:be:f8:f4:ae:40:e0:ab:56:8f:f9:97:ce:c2:59
Fingerprint (sha256): 22:b0:80:31:70:01:e6:b8:66:76:e8:bd:df:ee:bf:67:88:ee:18:f2:14:f6:a6:0e:50:b6:c6:a2:be:61:78:83

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ppd.carrefour.com
pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
*.carrefourproperty.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
bancodeserviciosfinancieros.com.ar
*.daas-cbq.carrefour.com
*.grupocarrefour.com.br
*.greenweez.com
*.voyages.carrefour.fr
*.training.carrefour.com
carrefour.it
carrefourproperty.com
*.voyages.carrefour.be
*.aloa-assurances.fr
fondation-carrefour.org
*.uat.carrefour-banque.fr
*.cartepass.fr
*.carrefour.pl
*.fondation-carrefour.org
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
ext-serviceclients.carla.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
*.carrefourproperty.fr
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
carrefourproperty.es
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
*.fr.carrefour.com
fr-mim.ppd.carrefour.com
carrefourproperty.it
imperva.com
*.croquetteland.com
*.carrefourproperty.it
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
*.carrefourproperty.es
*.carrefour.fr
dejbox.fr
*.carrefour.be
*.carrefourbelgium.be
financialwebsupplier.ppd.carrefour.com
carrefourproperty.fr
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
supeco.fr
carrefour.pl
*.bancodeserviciosfinancieros.com.ar
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswAeW4UzPHDJ/YFJd25i
/2LSTJIGKPmfgjlJ1YUZNqTww9zfDiZSSt8gDey/46IMl26cMweOCK0kgUIsE8KM
onmR7AikbmX6cOFetiZFx3xKQE0hcxQwR6xWMBBXDWxq+TXVpLaNCeVprvAukVKy
TDdrjRbGAqiypF05HryGUMa2UC2uS1oSXLFfYUuo+fC6fpBY/zu/7UCK585+ke8Z
0v4G6r943HP78MyXpiRLkS7DVZYwJAaLmEo2npkQ2vKFH6PaEEDqdVA+jBd7aUw0
GSdMgE9gEIyKSLN2V4KDbuyBUCb0nE9Elk0lVU0O5H+Anj7vhzYyvQwXG1YaHDnH
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1497311405623271788943869106541507882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 22:32:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 22:32:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22596715064868972423805052624673178442928925460686867854954852454229791915767263132347963814212691676204278792996557039487758917254291121925872748695945852958360417418917458373518188116111952934609995297286990986999025702232505557823795539675973274099490750356880835121776425355804174131319088443545959494990648501645294946360425887198643939008249444704841141542357730318109775189056948453299145034554156263234473468043929281188663039069379030694821404874781774634889900830566815536503007357843232518003059510626515597073942801461090983857742055169733292141140016318562245654898415153024536532515745855996193897301881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1921 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-serviceclients.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c7af1722d641314f12fabd3f103372cf140341e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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