imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:db:f9:59:e6:88:fa:78:a3:8c:71:2b:da:8b:c7:b9 was issued on by GlobalSign nv-sa.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:db:f9:59:e6:88:fa:78:a3:8c:71:2b:da:8b:c7:b9
Serial Number (int): 2471398450448965146405474836356515769
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:68:d1:d6:ab:06:3f:e3:a1:08:f9:55:3c:d4:c4:6a:b3:bd:5c:c2
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 96:a6:57:b8:ab:ae:31:9d:52:de:83:d8:c1:d5:6f:49:32:9a:f0:20
Fingerprint (sha256): 28:06:a6:5e:c1:15:9a:22:06:e7:10:1e:e3:c8:c1:58:12:59:99:3d:ea:fa:29:bb:28:98:fa:69:d7:b8:6d:13

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chernigivske.com
*.hub.donuslabs.net
*.nilebreweries.com
www.abwp.us
*.metrics.ab-inbev.com
backus-programa.pe
budnetec.com
www.stellaperfectpour.com
nilebreweries.com
*.mybees-platform.com
*.nutrlusa.com
sabfoundation.co.za
*.fritesartois.com
kirinusa.beer
*.tadaexperiences.co.uk
*.mydiekirch.lu
*.catexpert.ab-inbev.com
180-360.ab-inbev.com
drinkomission.com
tadaexperiences.co.uk
bmix.cl
*.cbeqa.com
*.hoegaarden.co.il
www.labattbettertogether.ca
keepitbrightperks.com
planbees.io
www.keepitbrightperks.com
*.tripelkarmeliet.com
*.soudonus.com.br
brahma.com.py
abipages.com
www.chernigivske.com
*.consumoresponsable.com.mx
www.beyondbeerrefresh.com
*.backus-programa.pe
www.hooptea.com
nutrlusa.com
*.portal.tadaexperiences.be
labattbettertogether.ca
*.becks.it
imperva.com
mydiekirch.lu
qa.api.abwp.us
jetskol.com
abwp.us
*.abwp.us
leffe.co.il
nfl.budlight.com
labattmobility.com
*.tada-api.mybees.be
*.budlight.com
ciscobrewers.com
*.cidrerielacroix.com
fritesartois.com
hooptea.com
qa.abwp.us
www.wholesalerstrategicsourcing.com
*.labattmobilityqa.com
cervezacorona.com.do
*.brahma.com.py
cheerscommunity.com
beyondbeerrefresh.com
beesbank.com.br
*.membeers.com
*.stellaartois.co.il
*.millstreetbrewery.com
*.bmix.cl
*.planbees.io
*.spotlightabi.com
*.stg.beesbank.com.br
biobrew.com
*.budpayments.com
*.cervezacorona.com.do
stellaartois.co.il
*.abverify.com
budexchange.com
*.budnetec.com
www.vezasur.com
*.bees-internal.dev
*.biobrew.com
*.abipages.com
www.ciscobrewers.com
spotlightabi.com
*.budexchange.com
*.bees.com
*.cbeapi.com
wholesalerstrategicsourcing.com
*.beesbank.com.br
cbeapi.com
neonharddrinks.com
barbarian.pe
www.kirinusa.beer
www.drinkneonburst.com
*.anheuser-busch.com
*.uat.bees-platform.dev
stellaperfectpour.com
www.wynwoodbrewing.com
labattmobilityqa.com
mobile.abinbevefes.com
*.dev.ze.delivery
cbeqa.com
vezasur.com
budpayments.com
membeers.com
www.drinkomission.com
*.alchemy.beertech.com
pagamentos-caixa-tmp.soudonus.com.br
www.neonharddrinks.com
cidrerielacroix.com
becks.it
drinkneonburst.com
backoffice.budlight.com
consumoresponsable.com.mx
*.leffe.co.il
www.cheerscommunity.com
wynwoodbrewing.com
*.ab-inbev.com
*.labattmobility.com
*.jetskol.com
*.sabfoundation.co.za
*.dr.mybees-platform.dev
hoegaarden.co.il
*.180-360.ab-inbev.com
*.barbarian.pe

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijroxNxn+hWdnAlaDtlr
SvjpvX+eDOKiz+gXY0fW3UPRq7yeqlHYmgTzdhvH2p9ylMF+qTVvVtPAzzIiZd3d
5t4OykLfKDob5d7IVuKCHRPQCBBkBGvz+OpEQ/uanZLMr0bliQPZ0KGTkt+SrZA5
Vo1gDVSb505ieFixGQqklf1NVmn27KbCpa8sUPVXFv1o60RtE0S7DyJA6XH/k3vQ
bLdFnFJQpfOOUYGb7ZQcN2KIDCFGz5xGjumSPVmxodgnT9TjfwvXCxLa7nkHfVtp
ReVP79mnonUnLPpYGPotA7hZvtkSdeQV+yk282xdNzmWj+v3439QU11GjfYSO5sV
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2471398450448965146405474836356515769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 13:54:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 13:54:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17449935321074243758535065911305401414190116656118092711395321710666789832682370054396539852597051013623960032055478322484379649350648874219493464675732538309222078226868587813282733259306155677112880357341329227087836494869404534680173887964715259808821053758791453788246569699950724804885681416800500312509798263644724094719730706874302531891223998449198235375128973579342599970696440718401303555935894761082144268508861929493621259118359457370801133042036041800375880523258911931823135489626660530245548311476011499839620821824499457837081517774158340983265287415215454634539219620282229087023937328230659891336511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.donuslabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybees-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catexpert.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripelkarmeliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abipages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.tadaexperiences.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tada-api.mybees.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervezacorona.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstreetbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotlightabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cervezacorona.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees-internal.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abipages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlightabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarian.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anheuser-busch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.abinbevefes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ze.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alchemy.beertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamentos-caixa-tmp.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.mybees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbarian.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0668d1d6ab063fe3a108f9553cd4c46ab3bd5cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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