imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:3d:25:e3:7b:ca:2e:d8:55:50:42:39:db:89:73:5f was issued on by GlobalSign nv-sa.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3d:25:e3:7b:ca:2e:d8:55:50:42:39:db:89:73:5f
Serial Number (int): 1646726576414846651144503898143290207
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: fc:2a:76:fa:51:bb:e9:be:8d:4e:79:69:ca:3e:55:d8:2e:7e:ce:80
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 9d:f5:ca:1f:df:ec:c4:0e:e7:ce:55:0a:16:0a:d9:83:8f:f9:c3:3e
Fingerprint (sha256): 25:8b:87:7a:95:64:d4:9b:17:9a:c7:89:19:9b:ab:26:5b:55:fc:80:7b:13:77:39:3a:56:fd:54:f0:8c:11:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commmoms.com
www.studentswithoutlimits.org
www.piedmontmaids.com
mvpgermanauto.com
www.taikingtour-pos.com
caryrheumatology.com
plantarfasciitisresource.com
natalini-frames.it
www.brambleworkshop.com
noratechcomputers.com
barbabramson.com
www.atlasideal.com
www.miltonmerlos.com
www.michelezackheim.com
www.woksdeli.com
www.adventureoutdoorsguide.com
www.hottenreviews.com
www.tech4pub.com
montitrans.com
www.toddsafety.com
southlaculture.org
www.beckwithstrings.com
outpace-consulting.com
brambleworkshop.com
peggymorehouse.com
www.johnsgymatx.com
expressivetherapy.net
www.summit-flooring.com
www.ashlindproperties.com
www.londontradingcompany.com
carvertubs.com
hottenreviews.com
www.sociologicalscience.com
drymillwine.com
heritagetaxmn.com
michelezackheim.com
develop4u.com
atlasideal.com
www.deductions.tax
www.drymillwine.com
www.peggymorehouse.com
imperva.com
piedmontmaids.com
painbegone.com.au
www.heritagetaxmn.com
www.lgbtqiahistory.com
ashlindproperties.com
tech4pub.com
www.tyneoconnell.co.uk
www.expressivetherapy.net
www.southlaculture.org
www.premiumpension.com
2asuccessdreamblog.com
lukerioux.com
www.johnsgymgeorgetown.com
tyneoconnell.co.uk
youngzonejewelry.com
adventureoutdoorsguide.com
www.commmoms.com
sociologicalscience.com
www.swamisriatmananda.com
lgbtqiahistory.com
www.texanwater.com
summit-flooring.com
www.thecoffeemod.com
deductions.tax
www.taslleeh.com
www.develop4u.com
beckwithstrings.com
www.ableelectricnj.com
quadrapower.ca
studentswithoutlimits.org
nymblsoft.com
premiumpension.com
www.2asuccessdreamblog.com
woksdeli.com
pdeelectronics.com
salsatanzenmunich.com
www.caryrheumatology.com
www.natalini-frames.it
www.noratechcomputers.com
www.pacifichomebrokers.org
texanwater.com
aslinteractive.com
stasnm.org
www.plantarfasciitisresource.com
www.stasnm.org
www.barbabramson.com
www.nymblsoft.com
www.prepkanga.com
www.lukerioux.com
taikingtour-pos.com
toddsafety.com
www.outpace-consulting.com
www.pdeelectronics.com
miltonmerlos.com
www.klitznerlaw.com
www.aslinteractive.com
www.carvertubs.com
www.quadrapower.ca
www.montitrans.com
pacifichomebrokers.org
www.youngzonejewelry.com
www.salsatanzenmunich.com
taslleeh.com
klitznerlaw.com
johnsgymgeorgetown.com
www.mvpgermanauto.com
ableelectricnj.com
swamisriatmananda.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPA2RA8Nw4UBU1udDlOu
B0i44lsBChxfH79k/sPW5xVn4BDr9AfexVxVoXqRvE8WS8FWvW9AE6R1r3ZPlb17
7olTxCMCEyaAF+4U1gNG5YjuhxQKMH1NgywrEi8UkAOC6+CX1u17xPSBm0rPw51l
cAx6IcGsOPyMe6XxNegGrmTT5cSNPEtiy7mVgSV3Li/ix05e3e90o50V0NJ7Gifr
4H/I3Kb5Gr8UiBn1oX+Yfmt/PO19YrOtI1twyEQmYNXm0Tetdh76e8R6bccr4z7/
xS3YEIHzqYNHSKg7XiCfp/E+zLZk5SIMw1uYQLVKvN3pqVRS73yGo2NQEL532/oC
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1646726576414846651144503898143290207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 14:30:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 14:30:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19811628514869784117051653492076320540722582528566807939857430232563724413211737367545920650091103791696895849641544769822884865615381291923722650678403106006608432415867826734640442657929065244798965610388566533352415678908714699853470529007171079464177132983069699814343107848167322110069830448713363006739209382601436832891471118441496078808457493266137315317112227086135980761466240109862386753143029142321099221757719957533079215966435757119553961239311789265262837271036165247879632328802502908605955567270434985805137706915292465655784994091663583055927494815072469706202134528986323884542706559572750699725437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commmoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentswithoutlimits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piedmontmaids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpgermanauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taikingtour-pos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caryrheumatology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantarfasciitisresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natalini-frames.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brambleworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noratechcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbabramson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlasideal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miltonmerlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelezackheim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woksdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventureoutdoorsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hottenreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tech4pub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toddsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlaculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckwithstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outpace-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brambleworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peggymorehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsgymatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressivetherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summit-flooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londontradingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carvertubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hottenreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sociologicalscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drymillwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagetaxmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelezackheim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasideal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deductions.tax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drymillwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peggymorehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontmaids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painbegone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagetaxmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgbtqiahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech4pub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyneoconnell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expressivetherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlaculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiumpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2asuccessdreamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukerioux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsgymgeorgetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyneoconnell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngzonejewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventureoutdoorsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commmoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sociologicalscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamisriatmananda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqiahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texanwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit-flooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecoffeemod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deductions.tax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taslleeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.develop4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckwithstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ableelectricnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadrapower.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentswithoutlimits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymblsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2asuccessdreamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woksdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdeelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salsatanzenmunich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caryrheumatology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natalini-frames.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noratechcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacifichomebrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texanwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aslinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantarfasciitisresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbabramson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nymblsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prepkanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukerioux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taikingtour-pos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outpace-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdeelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonmerlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klitznerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aslinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvertubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quadrapower.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacifichomebrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngzonejewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salsatanzenmunich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taslleeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klitznerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsgymgeorgetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvpgermanauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ableelectricnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swamisriatmananda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc2a76fa51bbe9be8d4e7969ca3e55d82e7ece80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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