imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:e2:8b:68:3d:1a:ab:ce:b6:3e:be:1d:a0:b9:94:88 was issued on by GlobalSign nv-sa.

With 118 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:e2:8b:68:3d:1a:ab:ce:b6:3e:be:1d:a0:b9:94:88
Serial Number (int): 2505514599388424990873759669355648136
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a9:8c:4c:f6:3a:db:f8:75:65:22:d9:13:3f:45:d6:45:31:ae:40:d4
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): d4:27:d2:b8:5f:3f:62:64:9a:b4:b4:42:3f:a9:09:ab:ef:6b:73:2a
Fingerprint (sha256): 25:1f:23:07:2c:6e:3e:a0:7a:af:bf:3d:00:15:c8:f1:83:3e:84:65:97:48:d9:9b:dc:75:fd:6c:fd:6a:ef:4e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

118

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.projects.jci-hitachi.com
*.shoppertraksucks.com
simplexfiredetection.com
*.infrastructure.jci.com
ecom-qa-na.com
*.easternsheetmetal.com
*.simplexfiredetection.com
r102estimatoremea.com
ecom-dev-yn1.com
fireclass.it
*.wotsecurity.com
*.campaign-stg.hitachiaircon.com
johnsoncontrols-mondial.com
wsjsociety.com
*.hitachiaircon.com
*.r102estimatoremea.com
dgatprogram.com
*.eeforum.net
*.adtsmarthome.co.uk
*.mmcarnot.com
*.ccureusergroup.com
*.ecom-dev-yn.com
*.ecom-qa-na.com
*.shoppertrac.com
*.shrinkindex.sensormatic.com
*.adt.ie
*.ecom-test-yn.com
adtsmarthome.co.uk
ccureusergroup.com
*.jci.flowis.com
*.mzxtechnology.com
shoppertraksux.com
*.jciarabia.com
jcibeta.com
*.ecom-dev-yn1.com
*.ga.jci.com
*.johnsoncontrols.com
securitysat.cl
adt.ie
johnsoncontrols.com.eg
shoppertrac.com
*.yorkinnovation.com
ntsecurity.uk
*.fireclass.co.uk
jch-channelhub.com
mmcarnot.com
jcihub.com
*.jcihost.com
imperva.com
johnsoncontrols.ie
*.sterigenics.fortworth1.johnsoncontrols.com
shoppertraksucks.com
carnotrefrigeration.com
*.adtchile.cl
*.rescueair.com
*.johnsoncontrols-brasil.com
*.wsjsociety.com
logix-controls.com
ecom-test-yn.com
*.shoppertrack-rct.com
*.shoppertrak.com
*.mmrefrigeration.com
*.adt.com.br
jciarabia.com
*.campaign.hitachiaircon.com
smaas-sensormatic.com
jcipat.com
*.jcipat.com
*.infuzion.sensormatic.com
*.jcitraininginstitute.com
*.shoppertrac-rct.com
*.gstlab.sensormatic.com
rescueair.com
*.smaas-sensormatic.com
*.securitysat.cl
ecom-dev-yn2.com
jcihost.com
*.tycofireandsecurity.com.au
*.fireclass.it
shoppertrack-rct.com
*.smartvue.com
*.ntsecurity.uk
*.solutions.jci.com
*.gordonbrothers.com.au
mmrefrigeration.com
*.autocall.com
jcimaxprogram.com
*.tycomonitor.com
*.jch-channelhub.com
*.hitachi-airconditioning.hu
mzxtechnology.com
*.dgatprogram.com
*.johnsoncontrols.ie
wotsecurity.com
adtchile.cl
*.shoppertraksux.com
yorkinnovation.com
*.jcimaxprogram.com
*.tyco.ca
gordonbrothers.com.au
*.ecom-dev-yn2.com
*.jcihub.com
ecom-dev-yn.com
smartvue.com
*.membercenter.americandynamics.net
hitachi-airconditioning.hu
eeforum.net
*.logix-controls.com
*.carnotrefrigeration.com
*.jcibeta.com
*.us.jci.com
3otec.com
shoppertrac-rct.com
*.johnsoncontrols.com.eg
*.onlinetechxchange.com
*.johnsoncontrols-mondial.com
jcitraininginstitute.com
*.3otec.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGOcXV69xF8f4xx1aAd
oqcTSbaep06GYUwXKfF1jSGD3lwY+hbdLkTTtVEd46e2PS8UZUsapZsHIRRUPWwo
JXv/Np+gquBoAFvsfcWbofWzLUf/jsUFMnfErucm08lGzZYbZvbo9rA7eK7LdvmR
x6UnlSxiWCMKsME7jGItJg7jmzM07vbRTL1Gl2TxPw0I8HP89Bvv6eiY5U0hzpmc
7PkrDa0efR6X1YsxPiB0WuZv+1FcM8bzIrWEa4wSINOjAz3NvVJ8oJYVC3xW/z6W
EPX5yyJJfQBcKL6aWJxP0Rz1n7o5fcqv2S2hV24c6EHxHBQtjKic2czu4i0Pr6Eu
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2505514599388424990873759669355648136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 13:12:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-10 13:12:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22913019850028132360695807742176387321238082812773048398709860197442948416110255136609548435963671576014072819163039674654807914526684177442488567928710510027075995107334952346853451285706058228562384645586760274598344159258130781086940833427894205270173257062552888291885937639979261213010487049030597837984427323915757441048939695325539211410522410621024791772016061343010243935361664551181541993722594942743863866252335673957680998993453881171211219559216065593828587938720193622067259134875889273771425689554852690839231346632832918590508783352494335159787687425420147892180608578565916118928311599385014536580733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2400 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects.jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructure.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign-stg.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrinkindex.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci.flowis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ga.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterigenics.fortworth1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-brasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infuzion.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstlab.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutions.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycomonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.americandynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3otec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98c4cf63adbf8756522d9133f45d64531ae40d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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