imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:94:53:18:db:ab:6b:71:20:e7:04:36:61:f3:28:c8 was issued on by GlobalSign nv-sa.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:94:53:18:db:ab:6b:71:20:e7:04:36:61:f3:28:c8
Serial Number (int): 2099373340305524639010897765187397832
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c8:dc:ba:85:d0:5c:96:84:85:ec:47:b4:37:20:12:89:f1:df:8c:3e
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): f9:4d:63:11:b1:55:6b:5d:7f:67:97:dd:5c:2d:3a:c3:be:38:56:51
Fingerprint (sha256): 2f:29:8e:45:bd:8b:ef:a2:af:4c:61:7b:d3:63:e6:61:05:44:cc:de:83:58:82:7f:d0:f7:59:40:75:e8:72:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedomboatclub.com
prusasportspos.com
weatherfordcompanystorenam.com
*.mypromomall.com
*.buydrivgear.com
*.shopmgpluxco.com
hdsupplyuniforms.com
regalrexnordshop.com
estore.wyffels.com
drivergear.vw.com
shopagco.com
www.hdsupplyuniforms.com
*.leaflyswag.com
*.lowessafe.com
quickbaseswag.com
*.bk.com
malibuboatsgearstore.com
shopmgpluxco.com
*.buyfmgear.com
mypromomall.com
channingbete.com
seagenstore.com
volvocollection.com
*.prusasportspos.com
*.axisstores.com
www.weatherfordcompanystorenam.com
*.regalrexnordshop.com
attach.halo.com
buyfmgear.com
*.mstar2.halo.com
wescocompanystore.com
audicollectionusa.com
lowessafe.com
*.mgpluxcoshop.com
*.volvocollection.com
*.yearupswagshop.com
torchysmerch.com
*.campusstop.com
*.malibuboatsgearstore.com
*.audicollectionusa.com
*.ngkntkgearhouse.com
*.shopagco.com
yearupswagshop.com
imperva.com
*.channingbete.com
*.torchysmerch.com
buydrivgear.com
*.quickbaseswag.com
cmweb.halo.com
mgpluxcoshop.com
www.seagenstore.com
leaflyswag.com
*.agloan.com
campusstop.com
ngkntkgearhouse.com
*.wescocompanystore.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM70wWfmVStWZ7dIvk5P
UY3dIsqmP6Ho9r++K9F/bRdc+rlIu5Pl4xgfg3snGjyHjQXtqQsBwhBvm5KfPW8o
mlrq4vZq2Fkz4tFnsX7y1jDx23eR13d9hzTkYyI3P+ysl+wtOmhcrlzrELFzZsUw
MkuOG2KukZOEcVC8NbY1WjupQcg4oaFTpHbCz6A7UKxF3zsanuEy0LQJuoHgWUGw
vst/hyuxEQ+bQ45WzL9GBPSpAOe9jeVn9gtxjAeRr0ak5kgF/ZVLFVoocMHsCIiF
myqksHIQDfEfD0wtC+BCQFIkp831QRjjvUoGJqcDCPVYFDLd8vs41WO9YC2qHwuh
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2099373340305524639010897765187397832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 15:26:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-07 15:26:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19795229419448264881122339187118919950886153591265517030846938577532797166714085517564602478221726515720774531629484807770376096134085932001526513410147930159656949284100289622302879261657875287039443276086617744473299477547306802170633077233006428161072715813440265776667286614872042059509794020650654908632687288129537712608699767131994617823255816040480213772178445083795131312852470828671160590894060388295157620354954457454226310466596692943417686108027475182453520891906285384080305145760093905979904172329007560885046872549983655602784290843368905112498573764327256372932678042207531384866114216675370651590913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomboatclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prusasportspos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherfordcompanystorenam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypromomall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buydrivgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopmgpluxco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdsupplyuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalrexnordshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estore.wyffels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivergear.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdsupplyuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaflyswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowessafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickbaseswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malibuboatsgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmgpluxco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyfmgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypromomall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channingbete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seagenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvocollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prusasportspos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axisstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weatherfordcompanystorenam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regalrexnordshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attach.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyfmgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mstar2.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wescocompanystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audicollectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowessafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgpluxcoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volvocollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yearupswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torchysmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campusstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malibuboatsgearstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audicollectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngkntkgearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yearupswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channingbete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torchysmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buydrivgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickbaseswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmweb.halo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgpluxcoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seagenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaflyswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngkntkgearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wescocompanystore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8dcba85d05c968485ec47b437201289f1df8c3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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