imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:32:83:45:62:ef:71:ec:cf:18:a7:94:fc:29:c6:ee was issued on by GlobalSign nv-sa.

With 148 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:32:83:45:62:ef:71:ec:cf:18:a7:94:fc:29:c6:ee
Serial Number (int): 1591505331731951336541903317958772462
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b8:f1:cb:e7:06:b1:a1:4f:8c:56:70:31:cf:66:ff:c8:92:fa:6c:94
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 2e:6f:d8:29:ac:67:7c:30:2f:fd:2e:d0:73:d2:8a:85:1c:3f:8e:7e
Fingerprint (sha256): 2b:2c:27:fb:e5:2c:db:7a:2b:ba:16:e4:ab:87:6f:dc:d7:3e:62:e4:10:1e:ff:96:a9:73:07:b3:ef:1a:f0:5e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

148

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.americandynamics.net
ciberasistencia-adt.cl
searchappprod.jci.com
*.jp-intradr.johnsoncontrols.com
*.vigilant.co.nz
upgnetsap.com
jch-marketingcenter.com
hitachiaircon.lk
*.hitachiaircon.com.au
*.tycofpp.com
firemasterpayonline.com
suppressiondesigncenter.com
airdocumentation.com
jci-hitachi.com
*.jch-marketingcenter.com
spk-lic.com
teamsmobile.com
*.airdistribution.com
connectedfireservices.com
*.hitachiaircon.com
adt.com.mx
*.hitachiaircon.lk
*.adt.com.mx
simplexfire.com
sprinkcode.com
*.firemasterpayonline.com
propelmock.jci.com
*.acessoadt2.com.br
*.teamsmobile.com
connectedfiresolutions.com
*.mysmartequipment.com
*.healthybuildings.johnsoncontrols.com
*.jci-korea.com
jci-korea.com
*.hcpg-hitachi.com
simplexgrinnellpayonline.com
*.sprinklerreplacement.com
*.johnsoncontrols.com
*.connectedsuppression.com
*.sterigenics.fortworth.johnsoncontrols.com
*.myintelligentbuilding.com
*.airdocumentation.com
titus-energysolutions.com
*.css-adt.com.mx
*.devlive.jci.com
acessoadt2.com.br
*.verasyscontrols.com
*.tycois.ca
bentelsecurity.com
jci-hitachi.ph
*.tyco.com
*.pre-urlbuilder.hitachiaircon.com
imperva.com
sprinklerreplacement.com
*.devauthor.jci.com
*.suppressiondesigncenter.com
infire.ca
*.us.hitachiaircon.com
*.tyco.es
*.infire.ca
*.adtchile.cl
ecom-staging-yn.com
*.reliablelouvers.com
yorkchilleraccessmanager.com
*.jci-hitachi.tw
skymarkinternational.com
*.tycomarinette.com
*.timesheetkiosk.jci.com
*.exacq.com
*.sprinkcad.com
*.tyco-fire.com
*.johnsoncontrols.es
*.spk-lic.com
cool-solution.co.uk
*.airisdesign.hitachiaircon.it
*.yorkchilleraccessmanager.com
searchappqa.jci.com
*.kh.hitachiaircon.com
*.ecom-staging-yn.com
productlibrary-hitachiaircon.com
*.hitachiaircon.it
*.hitachiaircon.in
*.hvactracking.com
*.www.tycois.com
adt.com.br
*.adt.com.br
*.york.com.sa
*.hvacnavigator.com
*.simplexgrinnellpayonline.com
*.documentation.hitachiaircon.com
*.securitysat.cl
*.tycofireandsecurity.com.au
*.warranty.hitachiaircon.id
*.adt.com.ar
*.myworkplace.jci.com
adt.com.ar
connectedsprinkler.com
*.acessoadt.com.br
hitachiaircon.com.tw
*.ipp.jci.com
*.johnsoncontrols.cn
myintelligentbuilding.com
*.connectedsprinkler.com
*.hitachiaircon.com.tw
acessoadt.com.br
*.sprinkcode.com
jci.com
*.bentelsecurity.com
*.ocp3.east-us-2.az.ocp.johnsoncontrols.com
hitachiaircon.it
hvactracking.com
*.productlibrary-hitachiaircon.com
store.tycofireandsecurity.com.au
verasyscontrols.com
css-adt.com.mx
*.jci.com
tycomarinette.com
*.ansul.com
*.titus-energysolutions.com
adtchile.cl
jci-hitachi.tw
*.connectedfiresolutions.com
*.apps.aro.dev.east-us-2.az.johnsoncontrols.com
colemanac.com
connectedsuppression.com
tycofsbp.com
*.eu.johnsoncontrols.com
*.tycofsbp.com
*.skymarkinternational.com
*.europe.tycofs.com
*.tochi.jci-hitachi.com
*.upgnetsap.com
*.jci-hitachi.ph
*.connectedfireservices.com
*.ccure-users-forum.swhouse.com
*.cool-solution.co.uk
*.ciberasistencia-adt.cl
*.simplexgrinnell.com
*.jci-hitachi.com
spacebooking.jci.com
*.factorytour-eu.hitachiaircon.com
*.colemanac.com
support.exacq.com
*.simplexfire.com
*.ruskin.com
york.com.sa
hcpg-hitachi.com
mysmartequipment.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24LsI0FOMCizLXiHlGai
wbxt3Mbhv4xjz9sECpxF84HzEZvApeEvBjNPgseYNGmacpAI7R3hl4y00KW5fOKd
PoewU1sGMOcqYXfeg9XAEwU6OkvtqQzQmjpNQOOngBCoyrGvtWWC9wdFsa/rZkaL
VrOVMT9rNn/Orp8vIphtk4ioplo/zMirFH8mhWZqFT0SmzYUgRghplQ5iMyf9J2i
3kQDPKJT6N5Upb52zhH0NrrpbV6apQBd1PJBzBfj6yphdzpeBRpWNnr0fDMGYK8J
WPw7OrutovJ1XvmtpzHwJcUeXDxNQleeJoDSW0SBQFtgd21OPLf20zNZiY7bKwNP
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1591505331731951336541903317958772462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 00:43:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 00:43:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27710749035585939749042522337264939413838087982254029789532926004855757230754393655546710581734751118664751561207045946804861777711033661934819181598613356660953466456144922230209105254617299714110558323545358390076115299663964478765042141314082774514079416875529315566144473922735138846177205766495721155847731187600834204649709721761998115408960317476448281032476537386214014413840193286863173369908033700282982588606297622762433290658322545508994920002087517664957652843014784588068878411982019922599405308508792728809335053405619890758704045269645538063973867950158332108197927743120896874757695495747032882302891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americandynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciberasistencia-adt.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchappprod.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jp-intradr.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vigilant.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgnetsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachiaircon.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firemasterpayonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppressiondesigncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airdocumentation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spk-lic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airdistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedfireservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprinkcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firemasterpayonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propelmock.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acessoadt2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedfiresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysmartequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthybuildings.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci-korea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jci-korea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hcpg-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexgrinnellpayonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprinklerreplacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectedsuppression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterigenics.fortworth.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myintelligentbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airdocumentation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titus-energysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.css-adt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devlive.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acessoadt2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verasyscontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycois.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentelsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jci-hitachi.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-urlbuilder.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprinklerreplacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devauthor.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suppressiondesigncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-staging-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reliablelouvers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkchilleraccessmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci-hitachi.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skymarkinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycomarinette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timesheetkiosk.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exacq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprinkcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco-fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spk-lic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cool-solution.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airisdesign.hitachiaircon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkchilleraccessmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchappqa.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kh.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-staging-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productlibrary-hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvactracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.tycois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.york.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexgrinnellpayonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentation.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warranty.hitachiaircon.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myworkplace.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedsprinkler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acessoadt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachiaircon.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipp.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myintelligentbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectedsprinkler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acessoadt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprinkcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentelsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocp3.east-us-2.az.ocp.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachiaircon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvactracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productlibrary-hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verasyscontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-adt.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tycomarinette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ansul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titus-energysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jci-hitachi.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectedfiresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.aro.dev.east-us-2.az.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colemanac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedsuppression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tycofsbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofsbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skymarkinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europe.tycofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tochi.jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upgnetsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci-hitachi.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectedfireservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccure-users-forum.swhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cool-solution.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciberasistencia-adt.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexgrinnell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacebooking.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factorytour-eu.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colemanac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exacq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'york.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcpg-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysmartequipment.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8f1cbe706b1a14f8c567031cf66ffc892fa6c94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185eb88196d000004030046304402203bd29f8d1d4efd743f81f5e043f82ea70e8a67d530b4708d7e10978185f0d097022052f092facfd2f49a70040ce691ddd497b0bf5199a45e63ffa1c7a22ddedfa750007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000185eb8819ed0000040300483046022100c13acca89ed833418f3b66bd81f9e30cba92fa72fd9c3ea7238b47837db12c36022100b683750829b540f3dbdad18f44fc19d961303e2b81daa2510b2b20e67b2e8a3a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185eb8819ca000004030046304402205375df689d451f77fd1ca62f4d7ee3cb16423382d4abc5e08bd08d31a2c51d9502205adc1e0db057855137b5188ea47ef9481eb85a7d0f7d29e18b214b90767e0f04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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