imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:ac:36:bd:91:1c:cd:ea:7e:59:a4:e0:c9:7e:c6:37 was issued on by GlobalSign nv-sa.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ac:36:bd:91:1c:cd:ea:7e:59:a4:e0:c9:7e:c6:37
Serial Number (int): 2223413324604367368989586274637497911
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:68:d1:d6:ab:06:3f:e3:a1:08:f9:55:3c:d4:c4:6a:b3:bd:5c:c2
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 42:7f:99:0d:b2:ae:dc:40:a8:50:c6:50:56:96:bf:1b:8a:2c:34:5e
Fingerprint (sha256): 30:eb:1b:fa:44:ea:07:44:f4:4c:82:7d:01:b9:33:4b:46:56:f5:fd:4c:14:fd:4a:bd:86:6c:2f:7a:1f:70:fe

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chernigivske.com
*.hub.donuslabs.net
*.nilebreweries.com
www.abwp.us
*.metrics.ab-inbev.com
backus-programa.pe
budnetec.com
www.stellaperfectpour.com
nilebreweries.com
*.mybees-platform.com
*.nutrlusa.com
sabfoundation.co.za
*.fritesartois.com
kirinusa.beer
*.tadaexperiences.co.uk
*.mydiekirch.lu
*.catexpert.ab-inbev.com
180-360.ab-inbev.com
drinkomission.com
tadaexperiences.co.uk
bmix.cl
*.cbeqa.com
*.hoegaarden.co.il
www.labattbettertogether.ca
keepitbrightperks.com
planbees.io
www.keepitbrightperks.com
*.tripelkarmeliet.com
*.soudonus.com.br
brahma.com.py
abipages.com
www.chernigivske.com
*.consumoresponsable.com.mx
www.beyondbeerrefresh.com
*.backus-programa.pe
www.hooptea.com
nutrlusa.com
*.portal.tadaexperiences.be
labattbettertogether.ca
*.becks.it
imperva.com
mydiekirch.lu
qa.api.abwp.us
jetskol.com
abwp.us
*.abwp.us
leffe.co.il
nfl.budlight.com
labattmobility.com
*.tada-api.mybees.be
*.budlight.com
ciscobrewers.com
*.cidrerielacroix.com
fritesartois.com
hooptea.com
qa.abwp.us
www.wholesalerstrategicsourcing.com
*.labattmobilityqa.com
*.brahma.com.py
cheerscommunity.com
beyondbeerrefresh.com
beesbank.com.br
*.membeers.com
*.stellaartois.co.il
*.millstreetbrewery.com
*.bmix.cl
*.planbees.io
*.spotlightabi.com
*.stg.beesbank.com.br
biobrew.com
*.budpayments.com
*.stealartois.com
stellaartois.co.il
*.abverify.com
budexchange.com
*.budnetec.com
www.vezasur.com
*.bees-internal.dev
*.biobrew.com
*.abipages.com
www.ciscobrewers.com
spotlightabi.com
*.budexchange.com
*.bees.com
*.cbeapi.com
wholesalerstrategicsourcing.com
*.beesbank.com.br
cbeapi.com
neonharddrinks.com
barbarian.pe
www.kirinusa.beer
www.drinkneonburst.com
*.anheuser-busch.com
*.uat.bees-platform.dev
stellaperfectpour.com
www.wynwoodbrewing.com
labattmobilityqa.com
mobile.abinbevefes.com
*.dev.ze.delivery
cbeqa.com
vezasur.com
budpayments.com
membeers.com
www.drinkomission.com
*.alchemy.beertech.com
pagamentos-caixa-tmp.soudonus.com.br
www.neonharddrinks.com
cidrerielacroix.com
becks.it
drinkneonburst.com
backoffice.budlight.com
consumoresponsable.com.mx
*.leffe.co.il
www.cheerscommunity.com
wynwoodbrewing.com
*.ab-inbev.com
*.labattmobility.com
*.jetskol.com
*.sabfoundation.co.za
*.dr.mybees-platform.dev
stealartois.com
hoegaarden.co.il
*.180-360.ab-inbev.com
*.barbarian.pe

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijroxNxn+hWdnAlaDtlr
SvjpvX+eDOKiz+gXY0fW3UPRq7yeqlHYmgTzdhvH2p9ylMF+qTVvVtPAzzIiZd3d
5t4OykLfKDob5d7IVuKCHRPQCBBkBGvz+OpEQ/uanZLMr0bliQPZ0KGTkt+SrZA5
Vo1gDVSb505ieFixGQqklf1NVmn27KbCpa8sUPVXFv1o60RtE0S7DyJA6XH/k3vQ
bLdFnFJQpfOOUYGb7ZQcN2KIDCFGz5xGjumSPVmxodgnT9TjfwvXCxLa7nkHfVtp
ReVP79mnonUnLPpYGPotA7hZvtkSdeQV+yk282xdNzmWj+v3439QU11GjfYSO5sV
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2223413324604367368989586274637497911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 15:20:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 15:20:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17449935321074243758535065911305401414190116656118092711395321710666789832682370054396539852597051013623960032055478322484379649350648874219493464675732538309222078226868587813282733259306155677112880357341329227087836494869404534680173887964715259808821053758791453788246569699950724804885681416800500312509798263644724094719730706874302531891223998449198235375128973579342599970696440718401303555935894761082144268508861929493621259118359457370801133042036041800375880523258911931823135489626660530245548311476011499839620821824499457837081517774158340983265287415215454634539219620282229087023937328230659891336511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hub.donuslabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilebreweries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybees-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catexpert.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadaexperiences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitbrightperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripelkarmeliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abipages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chernigivske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backus-programa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.tadaexperiences.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattbettertogether.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiekirch.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tada-api.mybees.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritesartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.abwp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahma.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbeerrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstreetbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmix.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planbees.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotlightabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stealartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaartois.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budnetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees-internal.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abipages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscobrewers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlightabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalerstrategicsourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beesbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarian.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirinusa.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anheuser-busch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaperfectpour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labattmobilityqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.abinbevefes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ze.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vezasur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkomission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alchemy.beertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamentos-caixa-tmp.soudonus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonharddrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidrerielacroix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkneonburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumoresponsable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leffe.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wynwoodbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labattmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetskol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabfoundation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.mybees-platform.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stealartois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoegaarden.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.180-360.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbarian.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0668d1d6ab063fe3a108f9553cd4c46ab3bd5cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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