imperva.com
Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4
About this certificate
This digital certificate with serial number 01:41:99:23:45:42:fe:68:75:36:2b:94:20:a0:0c:e3 was issued on by GlobalSign nv-sa.
With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=imperva.com
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 01:41:99:23:45:42:fe:68:75:36:2b:94:20:a0:0c:e3Serial Number (int): 1669833294680182563346362914765278435
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: de:40:24:38:9c:9d:84:67:82:3c:36:e0:e3:50:4a:d5:1f:86:7c:40
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc
Fingerprint (sha1): 42:7e:41:f1:f9:41:55:b4:64:f0:24:cf:73:92:e3:d4:01:a2:9b:50
Fingerprint (sha256): 33:a1:3c:6f:8d:ce:f1:44:b5:eb:28:8d:ec:1e:27:52:1c:40:7f:90:04:e3:89:c7:ee:95:10:76:b4:5d:d2:2f
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl
Check the revocation status for certificate imperva.com
55
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imperva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
questintegrity.com
*.uat1.bakerhughes.com
*.s1ahm.cordant.bakerhughes.com
*.store.bakerhughesds.com
*.siirtecnigi.com
*.po.cordant.bakerhughes.com
*.na01-sanucc.bakerhughes.com
*.ovsgroup.com
bakerhughesds.com
bes.uat.welllink.bakerhughes.com
*.bakerhughesds.com
*.iam.bakerhughes.com
*.pa.bhc1.bakerhughes.com
*.staging.bakerhughesds.com
ga.demo.cordantapm.bakerhughes.com
*.uat.bakerhughes.com
turbinate.com
star.npabhc1-sanucc.bakerhughes.com
*.na02-sanucc.bakerhughes.com
*.staging.valvstore.com
www.questintegrity.com
www.turbinate.com
*.trials.bhc3.bakerhughes.com
shopbakerhughes.com
*.jewelsuite.com
bentlyhost.com
*.na.system1apm.bakerhughes.com
*.shopbakerhughes.com
bnhost.na.system1assethealth.bakerhughes.com
*.bntechsupport.com
*.divigraph.com
valvstore.com
*.asm.cordant.bakerhughes.com
bntechsupport.com
*.staging.shopbakerhughes.com
bakerhughes.com
*.bentlyhost.com
*.ahm.cordant.bakerhughes.com
imperva.com
*.stgc.welllink.bakerhughes.com
*.cordant.bakerhughes.com
*.na.system1assethealth.bakerhughes.com
www.bntechsupport.com
*.stgb.welllink.bakerhughes.com
divigraph.com
siirtecnigi.com
*.eu02-sanucc.bakerhughes.com
*.welllink.uat.bakerhughes.com
*.valvstore.com
*.bakerhughes.com
*.eu.system1assethealth.bakerhughes.com
www.bakerhughes.com
*.api.bakerhughes.com
stg70-training.bakerhughes.com
qafco.posimulation.cordant.bakerhughes.com
*.uat1.bakerhughes.com
*.s1ahm.cordant.bakerhughes.com
*.store.bakerhughesds.com
*.siirtecnigi.com
*.po.cordant.bakerhughes.com
*.na01-sanucc.bakerhughes.com
*.ovsgroup.com
bakerhughesds.com
bes.uat.welllink.bakerhughes.com
*.bakerhughesds.com
*.iam.bakerhughes.com
*.pa.bhc1.bakerhughes.com
*.staging.bakerhughesds.com
ga.demo.cordantapm.bakerhughes.com
*.uat.bakerhughes.com
turbinate.com
star.npabhc1-sanucc.bakerhughes.com
*.na02-sanucc.bakerhughes.com
*.staging.valvstore.com
www.questintegrity.com
www.turbinate.com
*.trials.bhc3.bakerhughes.com
shopbakerhughes.com
*.jewelsuite.com
bentlyhost.com
*.na.system1apm.bakerhughes.com
*.shopbakerhughes.com
bnhost.na.system1assethealth.bakerhughes.com
*.bntechsupport.com
*.divigraph.com
valvstore.com
*.asm.cordant.bakerhughes.com
bntechsupport.com
*.staging.shopbakerhughes.com
bakerhughes.com
*.bentlyhost.com
*.ahm.cordant.bakerhughes.com
imperva.com
*.stgc.welllink.bakerhughes.com
*.cordant.bakerhughes.com
*.na.system1assethealth.bakerhughes.com
www.bntechsupport.com
*.stgb.welllink.bakerhughes.com
divigraph.com
siirtecnigi.com
*.eu02-sanucc.bakerhughes.com
*.welllink.uat.bakerhughes.com
*.valvstore.com
*.bakerhughes.com
*.eu.system1assethealth.bakerhughes.com
www.bakerhughes.com
*.api.bakerhughes.com
stg70-training.bakerhughes.com
qafco.posimulation.cordant.bakerhughes.com
Other certificates including the domain name imperva.com
(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
Certificate
The complete raw certificate details for imperva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIL2DCCCsCgAwIBAgIQAUGZI0VC/mh1NiuUIKAM4zANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEy MTUxMTUzNDBaFw0yNDA2MTIxMTUzMzNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6bgd4jw7jerK9L0Nii R3tEItXNxSeBP0bpKcr6iMacdBFNJOes8VCL1dKTCxJueOe17B+pZsjJ19jqB4/V QEy9huCBpzBTHq9OlR3FKWttYPxzLbvBvDFGJgEPV5lmjxdBNgjWHFRB4mlA3Rkr oEyPKg49CiFuWb0Iv/Orw+mYwbyK+3mvzqKzOYjPUd3QMJaiGdQFRaNc3nB5tBab vYYbxu90KcihdlPgJKy8peU0oPWXtCQ+nrljCNwlw05Dk062/OEWqUxrnA8yc6ZO bs6jfBdC9+3xeJHD8RU3V2pbDThR34raIMVPMPiMNYg6qZ0SELCJBPzRHe5e55bt 8wIDAQABo4II3jCCCNowggWSBgNVHREEggWJMIIFhYIScXVlc3RpbnRlZ3JpdHku Y29tghYqLnVhdDEuYmFrZXJodWdoZXMuY29tgh8qLnMxYWhtLmNvcmRhbnQuYmFr ZXJodWdoZXMuY29tghkqLnN0b3JlLmJha2VyaHVnaGVzZHMuY29tghEqLnNpaXJ0 ZWNuaWdpLmNvbYIcKi5wby5jb3JkYW50LmJha2VyaHVnaGVzLmNvbYIdKi5uYTAx LXNhbnVjYy5iYWtlcmh1Z2hlcy5jb22CDioub3ZzZ3JvdXAuY29tghFiYWtlcmh1 Z2hlc2RzLmNvbYIgYmVzLnVhdC53ZWxsbGluay5iYWtlcmh1Z2hlcy5jb22CEyou YmFrZXJodWdoZXNkcy5jb22CFSouaWFtLmJha2VyaHVnaGVzLmNvbYIZKi5wYS5i aGMxLmJha2VyaHVnaGVzLmNvbYIbKi5zdGFnaW5nLmJha2VyaHVnaGVzZHMuY29t giJnYS5kZW1vLmNvcmRhbnRhcG0uYmFrZXJodWdoZXMuY29tghUqLnVhdC5iYWtl cmh1Z2hlcy5jb22CDXR1cmJpbmF0ZS5jb22CI3N0YXIubnBhYmhjMS1zYW51Y2Mu YmFrZXJodWdoZXMuY29tgh0qLm5hMDItc2FudWNjLmJha2VyaHVnaGVzLmNvbYIX Ki5zdGFnaW5nLnZhbHZzdG9yZS5jb22CFnd3dy5xdWVzdGludGVncml0eS5jb22C EXd3dy50dXJiaW5hdGUuY29tgh0qLnRyaWFscy5iaGMzLmJha2VyaHVnaGVzLmNv bYITc2hvcGJha2VyaHVnaGVzLmNvbYIQKi5qZXdlbHN1aXRlLmNvbYIOYmVudGx5 aG9zdC5jb22CHyoubmEuc3lzdGVtMWFwbS5iYWtlcmh1Z2hlcy5jb22CFSouc2hv cGJha2VyaHVnaGVzLmNvbYIsYm5ob3N0Lm5hLnN5c3RlbTFhc3NldGhlYWx0aC5i YWtlcmh1Z2hlcy5jb22CEyouYm50ZWNoc3VwcG9ydC5jb22CDyouZGl2aWdyYXBo LmNvbYINdmFsdnN0b3JlLmNvbYIdKi5hc20uY29yZGFudC5iYWtlcmh1Z2hlcy5j b22CEWJudGVjaHN1cHBvcnQuY29tgh0qLnN0YWdpbmcuc2hvcGJha2VyaHVnaGVz LmNvbYIPYmFrZXJodWdoZXMuY29tghAqLmJlbnRseWhvc3QuY29tgh0qLmFobS5j b3JkYW50LmJha2VyaHVnaGVzLmNvbYILaW1wZXJ2YS5jb22CHyouc3RnYy53ZWxs bGluay5iYWtlcmh1Z2hlcy5jb22CGSouY29yZGFudC5iYWtlcmh1Z2hlcy5jb22C JyoubmEuc3lzdGVtMWFzc2V0aGVhbHRoLmJha2VyaHVnaGVzLmNvbYIVd3d3LmJu dGVjaHN1cHBvcnQuY29tgh8qLnN0Z2Iud2VsbGxpbmsuYmFrZXJodWdoZXMuY29t gg1kaXZpZ3JhcGguY29tgg9zaWlydGVjbmlnaS5jb22CHSouZXUwMi1zYW51Y2Mu YmFrZXJodWdoZXMuY29tgh4qLndlbGxsaW5rLnVhdC5iYWtlcmh1Z2hlcy5jb22C DyoudmFsdnN0b3JlLmNvbYIRKi5iYWtlcmh1Z2hlcy5jb22CJyouZXUuc3lzdGVt MWFzc2V0aGVhbHRoLmJha2VyaHVnaGVzLmNvbYITd3d3LmJha2VyaHVnaGVzLmNv bYIVKi5hcGkuYmFrZXJodWdoZXMuY29tgh5zdGc3MC10cmFpbmluZy5iYWtlcmh1 Z2hlcy5jb22CKnFhZmNvLnBvc2ltdWxhdGlvbi5jb3JkYW50LmJha2VyaHVnaGVz LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMB0GA1UdDgQWBBTeQCQ4nJ2EZ4I8NuDjUErVH4Z8QDBXBgNVHSAEUDBOMAgG BmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3 Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4GCCsG AQUFBwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxzaWdu LmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0MEoGCCsGAQUFBzAChj5odHRw Oi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRsc2Nh MjAyM3E0LmNydDAfBgNVHSMEGDAWgBSqEXGPlcRYmIuxbg87UGgkvLgZvDBIBgNV HR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRs YXNyM2R2dGxzY2EyMDIzcTQuY3JsMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA dgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxtU1u3AAAEAwBH MEUCIQDKivk1SBmOAeep5cu2y/CWLg0E63I9Ipi1fi3JWz+vrQIgMIOQH6R2ek/E llm3V3ucldNN2EBpStXhGJ+M2NIRySEAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAYxtU116AAAEAwBHMEUCIQC83/LM5vuOyQtLg+pLE2e7iYj+ XqGk0/tnQ8ZQj/VazQIgToeSdYbTrkBiyKokiOAzUx1kMef0eftZW8ZKEdsKOfQA dwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxtU19aAAAEAwBI MEYCIQDytQRQxwuv8zJErzboc/ung9LYP38B1ujhuhXf61VxiwIhAMe2eJjhCKvA CJBjb7YNF1qaqW2LeC836UqjwvqFLOG+MA0GCSqGSIb3DQEBCwUAA4IBAQBKp68+ aGefjX3nryw9TWzJ86PEaUf0WB/wlAHxNLuTOKMudcEYH+YCdxP6hP8qYUUuuILh yiYffaJNiybW2z4owAWU8ll+YCt4u4YWsG6HbZWMD0G2WzRnf1j6gksu01jpd1nN 4R/3b4gXSNN63inR3bXBWUZ9GIsCgpjnAFNSD+o7z7nYhSBikVEtI0YJomhTICje WLvqCpkMCKeDbNN+spcJnkj2voDAFqnn2KMli+1egWRLWbKIE/vIEGv7DOaBlU/o MTTmuS35EquK9HR3hsGejU1FRxng40ppb2nv20YHHWcmU2vVrlfpmWeN8ZKlYBIh FhHQnsN8oJri0jJj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6bgd4jw7jerK9L0Nii R3tEItXNxSeBP0bpKcr6iMacdBFNJOes8VCL1dKTCxJueOe17B+pZsjJ19jqB4/V QEy9huCBpzBTHq9OlR3FKWttYPxzLbvBvDFGJgEPV5lmjxdBNgjWHFRB4mlA3Rkr oEyPKg49CiFuWb0Iv/Orw+mYwbyK+3mvzqKzOYjPUd3QMJaiGdQFRaNc3nB5tBab vYYbxu90KcihdlPgJKy8peU0oPWXtCQ+nrljCNwlw05Dk062/OEWqUxrnA8yc6ZO bs6jfBdC9+3xeJHD8RU3V2pbDThR34raIMVPMPiMNYg6qZ0SELCJBPzRHe5e55bt 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1669833294680182563346362914765278435 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 11:53:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 11:53:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17672676003434443373802180651170620209573717975780996221183635444213167645244323119884772335367348954136106336363278951571416594339630467740102608434602354523989938176729736548804032465624774853861911702512691691798944950027558131216987875100183727428516808510636893297699826636765021090419426688857277053252610893733314695755502682822895383888837579934570719424875646936246343004996340455406925878553238852985323405289343715791791615410179171592426368835011021012157827161737934508000903945729610870413689488583758666863033003221413066172947117968500301905115209481785484192611630009704346883764750656974863010819571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1417 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questintegrity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat1.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s1ahm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siirtecnigi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.po.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na01-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovsgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.uat.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pa.bhc1.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.demo.cordantapm.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbinate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star.npabhc1-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na02-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questintegrity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbinate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trials.bhc3.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelsuite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentlyhost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1apm.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnhost.na.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divigraph.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentlyhost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgc.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgb.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divigraph.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siirtecnigi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu02-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welllink.uat.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg70-training.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qafco.posimulation.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) de4024389c9d8467823c36e0e3504ad51f867c40 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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