imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:28:10:36:28:d2:cf:77:1d:8e:a8:ef:d7:12:06:82 was issued on by GlobalSign nv-sa.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:28:10:36:28:d2:cf:77:1d:8e:a8:ef:d7:12:06:82
Serial Number (int): 1537248679634997717173239206370215554
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a0:22:82:fd:35:97:2e:32:96:17:6c:c2:d1:bc:65:8e:f7:f2:b7:66
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): af:a7:7b:2c:3c:c5:4f:9c:d0:05:a2:2d:44:ee:b6:9f:7f:a1:62:b3
Fingerprint (sha256): 29:2f:a7:f4:3f:d2:ea:16:88:1b:51:99:4a:20:93:ca:40:5c:ac:4e:2c:6c:b4:5b:e0:4b:02:a8:d2:6d:9f:fc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.powerschoolcorp.com
*.app.schoologystg.com
*.canada.powerschool.com
*.perf.powerschoolcorp.com
*.chico.powerschool.com
*.iepplus.powerschool.com
*.sfe.powerschool.com
*.tedk12test.com
*.develop.powerschoolcorp.com
*.tedapi.com
*.powerschool.com
schoology.com
*.eschoolplus.appsec.powerschool.com
tedk12test.com
*.gradespeed.net
*.dv-use-01-env1.unified.powerschoolcorp.com
*.infosnap.com
*.registration.powerschool.com
*.schoology.com
*.staging-usw2-01-env1.unified.powerschoolcorp.com
*.app.schoologytest.com
*.ca.powerschool.com
*.bthdev.powerschool.com
*.schoologytest.com
*.tedk12staging.com
imperva.com
*.auto.powerschoolcorp.com
*.services.peopleadmin.com
*.spihost.net
*.eschoolplus.powerschool.com
*.peopleadmin.com
*.reporting.powerschool.com
*.prod.powerschool.com
*.52.32.110.168.powerschool.com
*.svc.schoologystg.com
*.app.schoology.com
*.platform.powerschool.com
tedk12staging.com
*.dmp.powerschool.com
*.efinanceplus.powerschool.com
*.specialeducation.ca.powerschool.com
*.specialeducation.powerschool.com
*.iep.powerschool.com
*.svc.schoologytest.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJNjCCCB6gAwIBAgIQASgQNijSz3cdjqjv1xIGgjANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTErMCkGA1UE
AxMiR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMTA2MjMx
MDE5MTBaFw0yMTEyMjMwMTEzNDZaMBYxFDASBgNVBAMMC2ltcGVydmEuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsC1nLMlwn9gED+lLHlMdRiV
5Z6QdSF1dJkDSYQrvEgOqBzX/h3kIwOZoIa66oyg8+DH5VZbbGqhWGcI3q2+WuEx
NfKnE3KzYzcUPsblmbqYcWu4NUV/I6XJSdXZAD7yJlk967+Qy7HsJdvkRs6rN6WK
iKltTqmdnQPfmfN8vGussIaj1rhsuluV+EW3Vh7KrS0CqNOO42Gxw4YLDADy1iJZ
d2EchB9vH3fUf91foOfYkMOvjosK+VjzYFxomPQ0T3DxUPAaqjdC1p0JQjgH84/E
vWPWlfGwYrfCxrVubPoFfoKSOIMCuB/n/Mz3885ZS4mUc8LMRYXDczGNfNL7awID
AQABo4IGPzCCBjswggRrBgNVHREEggRiMIIEXoIaKi50ZXN0LnBvd2Vyc2Nob29s
Y29ycC5jb22CFiouYXBwLnNjaG9vbG9neXN0Zy5jb22CGCouY2FuYWRhLnBvd2Vy
c2Nob29sLmNvbYIaKi5wZXJmLnBvd2Vyc2Nob29sY29ycC5jb22CFyouY2hpY28u
cG93ZXJzY2hvb2wuY29tghkqLmllcHBsdXMucG93ZXJzY2hvb2wuY29tghUqLnNm
ZS5wb3dlcnNjaG9vbC5jb22CECoudGVkazEydGVzdC5jb22CHSouZGV2ZWxvcC5w
b3dlcnNjaG9vbGNvcnAuY29tggwqLnRlZGFwaS5jb22CESoucG93ZXJzY2hvb2wu
Y29tgg1zY2hvb2xvZ3kuY29tgiQqLmVzY2hvb2xwbHVzLmFwcHNlYy5wb3dlcnNj
aG9vbC5jb22CDnRlZGsxMnRlc3QuY29tghAqLmdyYWRlc3BlZWQubmV0giwqLmR2
LXVzZS0wMS1lbnYxLnVuaWZpZWQucG93ZXJzY2hvb2xjb3JwLmNvbYIOKi5pbmZv
c25hcC5jb22CHioucmVnaXN0cmF0aW9uLnBvd2Vyc2Nob29sLmNvbYIPKi5zY2hv
b2xvZ3kuY29tgjIqLnN0YWdpbmctdXN3Mi0wMS1lbnYxLnVuaWZpZWQucG93ZXJz
Y2hvb2xjb3JwLmNvbYIXKi5hcHAuc2Nob29sb2d5dGVzdC5jb22CFCouY2EucG93
ZXJzY2hvb2wuY29tghgqLmJ0aGRldi5wb3dlcnNjaG9vbC5jb22CEyouc2Nob29s
b2d5dGVzdC5jb22CEyoudGVkazEyc3RhZ2luZy5jb22CC2ltcGVydmEuY29tghoq
LmF1dG8ucG93ZXJzY2hvb2xjb3JwLmNvbYIaKi5zZXJ2aWNlcy5wZW9wbGVhZG1p
bi5jb22CDSouc3BpaG9zdC5uZXSCHSouZXNjaG9vbHBsdXMucG93ZXJzY2hvb2wu
Y29tghEqLnBlb3BsZWFkbWluLmNvbYIbKi5yZXBvcnRpbmcucG93ZXJzY2hvb2wu
Y29tghYqLnByb2QucG93ZXJzY2hvb2wuY29tgh8qLjUyLjMyLjExMC4xNjgucG93
ZXJzY2hvb2wuY29tghYqLnN2Yy5zY2hvb2xvZ3lzdGcuY29tghMqLmFwcC5zY2hv
b2xvZ3kuY29tghoqLnBsYXRmb3JtLnBvd2Vyc2Nob29sLmNvbYIRdGVkazEyc3Rh
Z2luZy5jb22CFSouZG1wLnBvd2Vyc2Nob29sLmNvbYIeKi5lZmluYW5jZXBsdXMu
cG93ZXJzY2hvb2wuY29tgiUqLnNwZWNpYWxlZHVjYXRpb24uY2EucG93ZXJzY2hv
b2wuY29tgiIqLnNwZWNpYWxlZHVjYXRpb24ucG93ZXJzY2hvb2wuY29tghUqLmll
cC5wb3dlcnNjaG9vbC5jb22CFyouc3ZjLnNjaG9vbG9neXRlc3QuY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFKAigv01ly4ylhdswtG8ZY738rdmMFYGA1UdIARPME0wQQYJKwYBBAGgMgEK
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECATAJBgNVHRMEAjAAMIGaBggrBgEFBQcBAQSBjTCBijA+
BggrBgEFBQcwAYYyaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxh
c3IzZHZ0bHNjYTIwMjAwSAYIKwYBBQUHMAKGPGh0dHA6Ly9zZWN1cmUuZ2xvYmFs
c2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2EyMDIwLmNydDAfBgNVHSME
GDAWgBRCbVctTx8md3SmJ2T2gPqPSGj+fDBGBgNVHR8EPzA9MDugOaA3hjVodHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIwLmNy
bDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuQTzGol
b2NkATpX7cpccF3VTZpQOAExdH+tQJAtiZtMDXcJgld6YhNtCo8YJX0rEZk22DHI
yWLF7UewSQMEGId4cj8bVo7TRCdpZZTNHB9mPX88NRlzuGc7cO1/XFFLUc+Qk+hD
Dl3VGdZFBxSrwnNtJ1JkShIAPKsa0eMO2vsmleDUlRC6BHIODgTmbPFhz3plAFIX
Wx1ZVNxCjpmey2XT7Qtj7EcDahgPxM51TzIYiy522jhC+qwu2yQnH8e1s4s7Fhko
BSHh4I/hZh8eGz4l6ctgXzbPXu9VWtaiZnvi3mrP6la7gSZSjQW8fnTaPZyQhrz/
/526fZqEmOM1Zg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsC1nLMlwn9gED+lLHlM
dRiV5Z6QdSF1dJkDSYQrvEgOqBzX/h3kIwOZoIa66oyg8+DH5VZbbGqhWGcI3q2+
WuExNfKnE3KzYzcUPsblmbqYcWu4NUV/I6XJSdXZAD7yJlk967+Qy7HsJdvkRs6r
N6WKiKltTqmdnQPfmfN8vGussIaj1rhsuluV+EW3Vh7KrS0CqNOO42Gxw4YLDADy
1iJZd2EchB9vH3fUf91foOfYkMOvjosK+VjzYFxomPQ0T3DxUPAaqjdC1p0JQjgH
84/EvWPWlfGwYrfCxrVubPoFfoKSOIMCuB/n/Mz3885ZS4mUc8LMRYXDczGNfNL7
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1537248679634997717173239206370215554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 10:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-23 01:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23070400061721219579666663681243697838989042342501322994830117135384735756272766613839546685003780284557886942650956360043484997369620794522742223666686432908844632944228567640362861477614025015965131820543265058259780742219095935136378820481337486295147028370159053910997564950728987623986614047991668482596810287178592383429480171822952888987104617510148458126609970233132513956998047567713778332774838063476438342636322621802406889205337308226070359773611515532403397561947240161736689216159656794814148558967554406797470480931421318337084866277804760603483460661384378226182129033086808185928839072284625054399339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoologystg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canada.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chico.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iepplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfe.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.develop.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.appsec.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gradespeed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv-use-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infosnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registration.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-usw2-01-env1.unified.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoologytest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthdev.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoologytest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto.powerschoolcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spihost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eschoolplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporting.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52.32.110.168.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svc.schoologystg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efinanceplus.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.ca.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialeducation.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iep.powerschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svc.schoologytest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a02282fd35972e3296176cc2d1bc658ef7f2b766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ae413cc6a256f6364013a57edca5c705dd54d9a50380131747fad40902d899b4c0d770982577a62136d0a8f18257d2b119936d831c8c962c5ed47b0490304188778723f1b568ed34427696594cd1c1f663d7f3c351973b8673b70ed7f5c514b51cf9093e8430e5dd519d6450714abc2736d2752644a12003cab1ad1e30edafb2695e0d49510ba04720e0e04e66cf161cf7a650052175b1d5954dc428e999ecb65d3ed0b63ec47036a180fc4ce754f32188b2e76da3842faac2edb24271fc7b5b38b3b1619280521e1e08fe1661f1e1b3e25e9cb605f36cf5eef555ad6a2667be2de6acfea56bb8126528d05bc7e74da3d9c9086bcffff9dba7d9a8498e33566