imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:99:f2:e2:41:65:8a:25:17:85:4e:58:12:c7:cf:7c was issued on by GlobalSign nv-sa.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:99:f2:e2:41:65:8a:25:17:85:4e:58:12:c7:cf:7c
Serial Number (int): 2128575684068835945019385101398036348
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 61:4f:7f:11:1f:18:83:30:9d:78:56:9d:28:7f:c8:e0:20:ab:80:b6
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): bb:04:66:db:30:86:36:22:6f:da:76:c6:d8:8e:7d:d9:d0:07:69:ee
Fingerprint (sha256): 2a:83:7d:e5:a9:8e:a2:4c:89:7c:98:da:13:47:c2:9c:d6:2c:2b:e1:65:ba:25:b5:d1:29:e7:46:cd:95:ca:07

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icissupplyanddemand.com
awarenesstraining.cybergym.com
*.benallaensign.com.au
*.kyfreepress.com.au
fofarms.com
portal.reupmobile.com
bagrut3.org.il
benallaensign.com.au
*.riverineherald.com.au
www.quislex.com
www.steamboat.com
www.dickensfest.com
*.campaspenews.com.au
*.certification-enac.fr
*.yarrawongachronicle.com.au
steamboat.com
*.denipt.com.au
valerieweller.com
*.hotelopia.com
seymourtelegraph.com.au
www.lysaghtasean.com
teamtidal.us
www.klwtlaw.com
*.e-point.pl
dairynewsaustralia.com.au
www.taxon.co.il
countrynews.com.au
klwtlaw.com
www.reupmobile.com
*.meritor.com
www.bagrut3.org.il
e-point.pl
*.corowafreepress.com.au
quislex.com
cathedralsandcafes.com
cobramcourier.com.au
*.seymourtelegraph.com.au
corowafreepress.com.au
denipt.com.au
www.libam.org.il
yarrawongachronicle.com.au
preview.achadirect.com
opel.co.il
campaspenews.com.au
www.icissupplyanddemand.com
imperva.com
southernriverinanews.com.au
www.cathedralsandcafes.com
libam.org.il
www.dtown.co.il
www.opel.co.il
*.countrynews.com.au
*.southernriverinanews.com.au
atsprintfreedom.com
*.civilrightsmuseum.org
civilrightsmuseum.org
dtown.co.il
www.valerieweller.com
*.atsprintfreedom.com
*.teamtidal.us
kyfreepress.com.au
dickensfest.com
meritor.com
riverineherald.com.au
reupmobile.com
d-awareness.cybergym.com
www.fofarms.com
blog.xo.gr
*.cobramcourier.com.au
pmvweb.quick-portal.com
*.dairynewsaustralia.com.au
lysaghtasean.com
taxon.co.il

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1m6A6dB/GPkmuv7XzM
VRK2Gads9T5coLZn9EOoqqmphWM2TBNJsfvQPIWG+HOXdk/zcaQ+fO8aKnuYKB+u
eu9juE7h0wljy9Z6oJ/xDKKjO9iAc5d47CLOEiPMzBvNAYSqfLFOEBunkCHOWdas
DXwwD3yXcISSVPqop7Sl9cTetRUmwM2kLE0Do08/ZZEtwyOeix4yJKmUDoAQL0e5
N/b+tFlk2+zciHqb28kCEzSUl8PE+zKkwJfwr4gImQN5V7LqMJIt6vL5vN5/1EXN
z6bFHzamIFJ5UqVGEPlIdke0ZzrLOGDKYHuT2e41o/SrszpkellUivyAFpsD4Kki
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2128575684068835945019385101398036348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 00:26:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 00:26:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17829879444261344579842307566111806447558200702011052570559510218122301144238060314750328529849822429974266141127736969434692687491242285563515667866307800597958153514924435923679243326775639970062555481298945991579413731795147544351097570064973041599121582504585591182811732839763544687344488012504833095398555764049647205837413718783057977837056828366477806700964545509859294618798611444292598582888508877844127035126015134226366585536222431801952520928975810966905530751103817371866466104668306842948450043446505052989974197009916124982179192910298452225267371828010864071909647528149258605263931292587207562961631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1495 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icissupplyanddemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awarenesstraining.cybergym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benallaensign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyfreepress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.reupmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagrut3.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benallaensign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverineherald.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quislex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steamboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dickensfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaspenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certification-enac.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarrawongachronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steamboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denipt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valerieweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seymourtelegraph.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lysaghtasean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamtidal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klwtlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-point.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairynewsaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxon.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrynews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klwtlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bagrut3.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-point.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corowafreepress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quislex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralsandcafes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobramcourier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourtelegraph.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corowafreepress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denipt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libam.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarrawongachronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.achadirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaspenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icissupplyanddemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernriverinanews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralsandcafes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libam.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtown.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrynews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernriverinanews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atsprintfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtown.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valerieweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atsprintfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamtidal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyfreepress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickensfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverineherald.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-awareness.cybergym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.xo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobramcourier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvweb.quick-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dairynewsaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lysaghtasean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxon.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							614f7f111f1883309d78569d287fc8e020ab80b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b59ed74ae000004030046304402204cfc8fac009e5e5d84c95c4e5ed725834fa3435869e3aa6a884f3ce204b4181a02202f4ac69187e5a3d072d5141062c40f8962cfa76e8c50284cf7e389d9c31a574300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b59ed7603000004030047304502203596d941b668a8a74b37f3a641c59f7aaabb9bf4fa199bf48429ae3a3f1d27d2022100fe5a862b14870105fc0a70362fca50761647c990469e4dc479be90544b6010d3007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b59ed785a00000403004830460221009a4aaf467b7b601c5d1e837b96943caea9fcbb08308306822129d2af083d10d2022100af9201d46dff96d7eb2a6fbeab0ce12569ba5555ca07c720805bdc043b63e4ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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