imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:9f:4e:39:fa:12:78:d6:b6:bf:52:bc:ce:b4:34:c5 was issued on by GlobalSign nv-sa.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:9f:4e:39:fa:12:78:d6:b6:bf:52:bc:ce:b4:34:c5
Serial Number (int): 2156389817639885374039308138171348165
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ed:f3:66:f7:b0:b4:97:ae:60:cf:8a:22:8f:9c:23:6f:8d:40:a4:0d
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): bd:5f:24:fe:f3:36:37:5a:08:d3:31:0f:d7:b1:51:61:7b:41:98:59
Fingerprint (sha256): 23:51:26:ea:50:29:5a:8e:eb:04:cb:2e:d7:cd:71:5c:ba:c3:77:37:a5:58:35:77:1b:44:47:e0:6e:30:01:64

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pl.ca.powerschool.com
*.perf.powerschoolcorp.com
*.pea.ca.powerschool.com
*.powerschoolcorp.com
*.pasi.maps.powerschool.com
*.efinanceplus.demo.powerschool.com
peopleadmin.com
schoology.com
*.stiinformationnow.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.infosnap.com
*.staging-usw2-01-env1.unified.powerschoolcorp.com
*.woodlandjusd-ce.hoonuit.com
*.bthdev.powerschool.com
decisioninsite.com
*.pl.powerschoolcorp.com
*.peopleadmin.com
*.pscc.powerschoolcorp.com
*.reporting.powerschool.com
*.52.32.110.168.powerschool.com
*.teachermatch.org
static-test.specialeducation.powerschool.com
*.pea.powerschool.com
*.veracode.powerschool.com
*.staging-pea.powerschool.com
*.versifit.com
naviance.com
*.atrieveerp.com
*.businessplus.powerschool.com
*.specialeducation.powerschool.com
stage-interventions.specialeducation.powerschool.com
*.employer.schoolspring.com
*.iep.powerschool.com
*.insights.powerschool.com
*.chalk.com
*.canada.powerschool.com
*.iepplus.powerschool.com
*.sfe.powerschool.com
*.tedk12test.com
mobile.ca.powerschool.com
*.bp.powerschool.com
*.tedapi.com
*.pasi.powerschool.com
*.powerschool.com
tedapi.com
teamcity.registration.powerschool.com
tedk12test.com
*.hobsons.com
*.businessplus.demo.powerschool.com
*.registration.powerschool.com
*.schoology.com
*.www.schoolspring.com
*.ca.powerschool.com
*.accelaschool.com
chalk.com
*.tedk12staging.com
imperva.com
*.auto.powerschoolcorp.com
*.services.peopleadmin.com
*.spihost.net
hobsons.com
specialeducation.powerschool.com
*.eschoolplus.powerschool.com
*.perfplusk12.com
*.prod.powerschool.com
*.naviance.com
*.powerschool-docs.com
*.erp.powerschool.com
*.app.schoology.com
*.decisioninsite.com
*.platform.powerschool.com
tedk12staging.com
*.efinanceplus.powerschool.com
*.specialeducation.ca.powerschool.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujIgjcQKfuHWvGJGjaVR
ZG0l+PtvhbHQ4HP01Oqw/DBHnG99CGrvGUKDJmq4rbUdE25mxco3ABhG6vyAroSQ
P/5zufsOcXfiOSqd7iUoAHonAKnl0hUdbptbgUod5MWvvll1ejgxSCAhzRdUHo7+
e4SebjH2ynQ4mSQuAvm8mlKpPR+I34zVSJ31xhCMCyVFIersJco7ElAdTiKCAfRk
nwqsUQQOwLeE3eEex/Y/NLLXoSkRln2vHQuPtqSfZDTqatgEZdradhNAZQrd5UP5
D1wMShTxG+gpGQXNDY0uZIJdzERkGp5dsW5k94A22K7k4p3JLkWt21ak7R5gxc1s
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2156389817639885374039308138171348165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 16:01:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 16:01:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23505043349123894148868030582283454779944989008766622323880781089346345458422642672772051181854196166074876573819726810797164478863826423716888929431792805601246214492564081692312885321711894472417261942758775555607903647269874673182005143796414268083710781637838983058042501732864423732544313357768568493899016844183997255675751139234673319572147734559871473275150868086859530484963157765071925795454555938436497954116634995810846958599490805373305194506289064288421958116055359286485055006628491248159213744706391078145011558219461158315489524403275144215167873749956158067394024320977254830883136893059166402079987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1861 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.maps.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stiinformationnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-usw2-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodlandjusd-ce.hoonuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthdev.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pl.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pscc.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52.32.110.168.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-test.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracode.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-pea.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrieveerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-interventions.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employer.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iep.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insights.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canada.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iepplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfe.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasi.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamcity.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessplus.demo.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.schoolspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accelaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spihost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfplusk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naviance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool-docs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisioninsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.ca.powerschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf366f7b0b497ae60cf8a228f9c236f8d40a40d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018d8e9a58700000040300483046022100c39e037b5a944795e2c9aa699a59d242dcdb3ae38c5ebc3e8e51108e2a8fc064022100ef694792c5bedbb3d7c1bd70a2010455b2f0a5dab994fcacaeece6834c7b99d2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d8e9a587d00000403004730450220262cc036b3b67282886c36ef30688789dde358351074e2121d7a880d5bb2a5d2022100a7b5480b4a553193596c7f96f4b6d5f71b02e71c5407bdaad3fbba5546aaff3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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