imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:f7:c1:1b:49:ec:26:e9:44:20:e1:e6:d2:fe:10:54 was issued on by GlobalSign nv-sa.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f7:c1:1b:49:ec:26:e9:44:20:e1:e6:d2:fe:10:54
Serial Number (int): 2615641986934806917993909197098324052
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cc:54:7d:f3:7a:ba:93:30:bb:f0:fb:fb:e9:f0:6f:27:45:14:ec:bd
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 3c:a1:45:9f:45:75:89:84:bd:25:9d:09:da:18:a0:ef:1d:6a:6c:a8
Fingerprint (sha256): 26:2c:75:62:94:0d:7d:60:47:a8:fd:30:e6:ee:f7:0e:c3:aa:74:78:50:af:78:6e:67:23:81:3c:8c:1a:78:03

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.commercialredirect.novartis.com
*.ciprodexhcp.com
factsaboutaxspa.com
focalview.com
*.customer.us.pharma.novartis.com
*.cardservices.novartis.com
*.sjiasupport.com
*.survivehives.com
*.gilenya.com
monsuivismp.com
*.entresto.com
focalinxr.com
*.factsaboutaxspa.com
*.us.keepitpumping.com
entresto.com
survivehives.com
*.todaymyway.com.au
*.offerallocation.novartis.com
*.realityofspa.com
todaymyway.com.au
xn--espaciomigraa-tkb.cl
*.focalinxr.com
*.focalview.com
exelonpatch.com
*.non-us.kymriah.com
*.novartispharma.com
*.ilaris.com
*.locatorservices.novartis.com
ilaris.com
*.portal.novartis.com
*.annualreview.novartis.com
*.monsuivismp.com
*.ncc.novartis.com
*.us.state.lookup.novartis.com
*.servicesgreen.novartispharma.com
*.oncologyaccessnow.com
*.services.novartis.com
realityofspa.com
*.betterconversations.novartis.com
sjiasupport.com
*.extavia.com
imperva.com
gilenya.com
*.cpa.novartis.com
*.sandoz-biosimilars.com
*.xn--espaciomigraa-tkb.cl
ciprodexhcp.com
oncologyaccessnow.com
*.sandoz-hospitalproducts.com
*.novartis.net
*.nvfund.com
*.supplierconnect.novartispharma.com
*.exelonpatch.com
*.irmadashboard.novartis.com
extavia.com
sandoz-hospitalproducts.com
nvfund.com
sandoz-biosimilars.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnTkEbbstfN/XjESaqa6
FMm4R4mscVD7SWkfuAetPUypGry1y7DYa+3y7h+r+7BEZeUFPFcoZta16pDtA7Mu
7y+EmO3OsueynqT2370Ipl+IAs+++eewOXL7rG0mCxnpqeTaZZmKQX+wQyLIhot9
VXNosZ4nPr7cvoXDnmKMLufyiztsACGiUY6oQYSt7Mo1lhp6wg8mvZKR+wtm8qyd
Bji7DY2HB9GLsds38ejMd9U1WTzu9kGPlm+Wg5dX0LbBUW8TsVtEKMv9aNlfq/jS
KrcppJBnQHCtW0pyNyvbrtiNOEIX68rc9TApgmkuwFrDfXDtcYu91mx1z+JvqaeW
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2615641986934806917993909197098324052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 08:26:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-03 23:21:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21013199673150738446675959155456196014279692480419770782836921273100766640729419318768693773957334438469462930199421510558444152191045964515851090370137398919845492903066208766667336297909700521559849335955039803734146624712484418227743823314883740010197769933295541891190844909604278081446148123374393720685220058248274688810228548404921498498925303734489391172703421517796118683714599646039644288992007947505072791835354937917395235587732612278861231474957617231612396655722691510821569134987343956112315371062017592536728503172178440247559969746497822117129285181362171797463275001841059280891328046255747837171237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialredirect.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciprodexhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factsaboutaxspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer.us.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivehives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsuivismp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factsaboutaxspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.keepitpumping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivehives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offerallocation.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--espaciomigraa-tkb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-us.kymriah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locatorservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annualreview.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monsuivismp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncc.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.state.lookup.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicesgreen.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterconversations.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpa.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--espaciomigraa-tkb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciprodexhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-hospitalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplierconnect.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irmadashboard.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-hospitalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc547df37aba9330bbf0fbfbe9f06f274514ecbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017761da3be8000004030047304502203ad95405864cdd7aa30e1ea395663a5878e7ad2334ecb0f89e8866a18c99808b022100fb779778f152fea0403703844ba03186c7e573d146e286fa8a3f13b6a9e529340075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017761da3c020000040300463044022078097a66c3bf4c511762c59d10964151a71c169a0a1752c16d6e4956e454bec6022072fb7c107cb2187f91272d053bc1d628432aafb41f7bf7f3556a697d0be128c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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