imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:89:ab:87:b2:95:c0:27:47:2b:46:37:c1:b0:8e:6c was issued on by GlobalSign nv-sa.

With 120 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:89:ab:87:b2:95:c0:27:47:2b:46:37:c1:b0:8e:6c
Serial Number (int): 2044051708517720233578556798360653420
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 80:df:b4:50:85:5e:ed:70:0b:90:88:93:a5:82:6c:66:5c:3f:99:e4
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): b9:e3:03:2c:04:bf:38:e5:e1:a3:f6:94:92:eb:39:6e:26:ac:99:34
Fingerprint (sha256): 2d:9e:02:b1:36:90:d2:50:89:82:f0:35:3f:51:48:92:17:27:9e:25:d9:5b:5d:46:83:9c:07:56:b4:87:07:ed

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

120

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ialugenplusakut.swiss
*.ibsadermanordic.com
ticinoscienza.org
ibsapharma.co.uk
*.narture.ch
*.ticinoscienza.org
*.ibsaknowledgehub.com
ibsanarture.org
narture.ch
*.ibsa.ch
ialugenplusakut.swiss
ibsaderma.co.uk
*.ibsaderma.be
ibsanarture.eu
*.tirosint-sol.com
*.ibsanarture.org
*.ibsapharma.com
ibsa.hu
*.ialuril.dk
ibsa.com.tr
ialuril.dk
ibsaderma.es
*.ibsapharma.co.uk
tirosint-sol.com
*.ibsanarture.eu
*.ibsagroup.com
cerulisina.it
ibsanordic.com
*.businessdevelopment.ibsagroup.com
ibsapharma.com
sinovial.it
flector.it
ibsa-pharma.es
vitaminad3ibsa.it
*.ibsa-pharma.ru
ibsaderma.be
ibsaknowledgehub.com
*.scienzaticino.ch
colesia.it
*.ibsa-pharma.at
*.ibsa.it
ibsaderma.swiss
ibsa.sk
*.cerulisina.it
narture.eu
*.ialuril.no
octilia.it
imperva.com
ialuset.it
*.ibsa.sk
*.nidoprimipassi.ch
*.ibsapoland.pl
ialuril.se
*.ferroibsa.it
ibsa-pharma.fr
ibsadermanordic.com
*.ibsaderma.co.uk
vitaminab12ibsa.it
ibsa.it
*.ibsaderma.ae
*.ibsaderma.it
ibsapoland.pl
*.ibsaderma.es
*.ibsa-pharma.de
*.ibsaderma.swiss
narture.org
*.melatoninaibsa.it
ibsa-pharma.cn
ibsanarture.com
scienzaticino.com
*.ibsa-pharma.cz
*.ibsaderma.nl
ibsagroup.com
*.scienzaticino.com
*.tirosintdocfinder.com
nidoprimipassi.ch
*.ibsa.swiss
ibsaderma.ae
*.ibsaderma.fr
ibsa.ch
*.narture.org
*.ibsa.hu
*.ibsaskincare.it
*.ibsa-pharma.cn
*.ibsafoundation.org
ibsaderma.it
ticinoscienza.ch
melatoninaibsa.it
ibsa-pharma.de
ibsa-pharma.cz
*.vitaminabibsa.it
ferroibsa.it
tirosintdocfinder.com
*.colesia.it
*.narture.eu
*.ibsaderma.com
ibsa-pharma.at
ibsaderma.fr
*.flector.it
*.ibsa-pharma.fr
*.vitaminad3ibsa.it
ibsaskincare.it
*.ialuset.it
ibsaderma.nl
ialuril.no
*.ibsanordic.com
ibsafoundation.org
ibsa.swiss
*.octilia.it
*.ticinoscienza.ch
ibsaderma.com
*.sinovial.it
scienzaticino.ch
*.ibsa-pharma.es
*.ibsa.com.tr
*.ialuril.se
*.vitaminab12ibsa.it
ibsa-pharma.ru
vitaminabibsa.it
*.ibsanarture.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg14n14qEPwkB6tEmt8KK
i4l5+F8GqaxErWmIJ8sdSeZYw1LZC4P/lTb6nlaC8an4DbixJkrRdJttiiU3Ryoj
BoFChKmoGQ0BpYiwBhG/Jyho3K6+gow85StN47NiiGav1x7VYUW3AkSuCwjsngiS
nQPkZAVHKLpmsCEO5KVnIWZL4kT/34Yy4wCNdGZjbhc2UTPKegn2r/gDNWMgjc8V
1EgUD3iy29/dGUZBaZkyC5soH3iaHfsLGcQxJuUWpoDWa2HluAZItaOjESZyQHU+
9sldfiQsn6GCriAM0qByKTJGCcZp7f7QpOzNn0GZwnK+kwAuZj/AN7C2iDKf5HHD
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2044051708517720233578556798360653420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 17:10:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 17:10:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16583647823476424962394542790982504934961230409255786565403140101786104230465901723408258827025556999984767218111211094380009974801521992012030199183814461821768651091080149450338336827028241546169569900190484873736583110589855531130163473690142160404626274854409842654662463334479960770426099021750680734440702522306337184695337718284686940263792344308829824812906208462397917576950593150717872692612802349588862900640961758636637981978808557544484875256086409326381655066688644747510878902620635598065823306077410294418337058205144849004955314914191097619666484890409086952355629282176735891130742603404972882248617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1996 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ialugenplusakut.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsadermanordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticinoscienza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsapharma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narture.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticinoscienza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaknowledgehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsanarture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narture.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ialugenplusakut.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsanarture.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tirosint-sol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsanarture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ialuril.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ialuril.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsapharma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirosint-sol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsanarture.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerulisina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsanordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessdevelopment.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinovial.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flector.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminad3ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaknowledgehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scienzaticino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colesia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerulisina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narture.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ialuril.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octilia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ialuset.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nidoprimipassi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsapoland.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ialuril.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferroibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsadermanordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminab12ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsapoland.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melatoninaibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsanarture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienzaticino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scienzaticino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tirosintdocfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nidoprimipassi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaskincare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticinoscienza.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melatoninaibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaminabibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferroibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirosintdocfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colesia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narture.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsaderma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flector.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaminad3ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaskincare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ialuset.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ialuril.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsanordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octilia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticinoscienza.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsaderma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinovial.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienzaticino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa-pharma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ialuril.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaminab12ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa-pharma.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminabibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsanarture.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80dfb450855eed700b908893a5826c665c3f99e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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