imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:5c:a4:06:3b:b0:4c:4c:67:33:9d:03:4a:29:43:ca was issued on by GlobalSign nv-sa.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:5c:a4:06:3b:b0:4c:4c:67:33:9d:03:4a:29:43:ca
Serial Number (int): 1810246115786840807217407164689236938
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6c:49:81:6d:87:87:22:85:8b:7e:f8:3c:1e:78:7d:3a:5c:91:1c:33
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 26:3a:b2:46:cb:b5:81:62:b9:87:e6:5c:b8:3e:1b:b1:9e:9a:f6:65
Fingerprint (sha256): 3a:f3:4a:54:3e:a1:b0:22:f4:91:a6:23:d8:c2:53:39:83:64:c5:af:d6:0f:7a:9b:16:ac:82:ec:3e:63:79:a6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.saq-b2b.com
*.qa.frz.orckestra.cloud
*.orckestra.cloud
hach.com
*.hachuat.com
*.prd.sqc.orckestra.cloud
polygon.net
*.uat.saq-b2b.com
brokerforum.com
triohockey.ca
*.prd.gft.orckestra.cloud
*.stg.sbs.orckestra.cloud
www.thriftyfoods.com
*.mdfcommerce.com
*.pp.aldi.orckestra.cloud
*.jobboom.com
imperva.com
*.onlinestocksupply.com
*.stg.sqc.orckestra.cloud
*.aldi.co.uk
*.mediagrif.com
mdfcommerce.com
*.qa.tbf-non-prod-public.aws.mediagrif.com
*.pp.tbf-non-prod-public.aws.mediagrif.com
*.prd.hach.orckestra.cloud
*.prod.hach-prod.aws.mediagrif.com
*.polygon.net
*.triohockey.ca
*.uat.mediagrif.com
thriftyfoods.com
*.dev.mediagrif.com
saq-b2b.com
*.merx.com
*.mezzo.cloud
*.prd.sbs.orckestra.cloud
*.uniselectsales.com
*.prd.cdmv.orckestra.cloud
*.bidnetdirect.com
*.brokerforum.com
hachuat.com
jobboom.com
*.prd.aldi.orckestra.cloud
*.hach.com
bidnetdirect.com
*.aldi.ie
*.mets.mediagrif.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoei9cr7b9Ua030AW5cb
CjfGymSefwLWQY2mBSi59yL5+eiL14Lyr0kXmj96EZ2xwknzeHbJJvr4FDTkd+Qa
XxXpZMhTw/110nP7OdKbqavws5HH6yoDU2wApDSE0t2E0CZRIWm3rgki+V8skUXv
3bzOZEMP+J5gcE52pJxbOqk9xrt/weXaKgnsk+isCb52w7pb4LLoc83wEEzX64Xh
y1Jt8T0HgAulE7mV4GN2T51YcDZsH1dqrhoYi482t7NuERnQH18M4XAm7u7jQgSl
5rHxC3lMCu966gLpIBGeqPIYLstrBEMPCND0S98mSFDvqwdkJvWobZTyY7R51vpR
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1810246115786840807217407164689236938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 19:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 19:16:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17992724187230303251544782236098910568839101268573946972326767606872060363849863479962618330243239986867614403044501566763824023679097891539626513596477729197824723127384573914350464103690535139657150928837440117281988284650345601533214484678859401372494213196525263025292993342382021950821580914373761901944493046140062756658634916588713261439816932579938126147908232064625316821602797154580071674045661767951831690458272669373231938859145197734920106218344321340507970399650594091366714293827010711172287410663160465875443652255195553711246557886368427026485620916327887623617234203142340730736554988760376253501917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (947 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saq-b2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.frz.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hachuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.sqc.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polygon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.saq-b2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokerforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triohockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.gft.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.sbs.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thriftyfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdfcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.aldi.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinestocksupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.sqc.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aldi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdfcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.tbf-non-prod-public.aws.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.tbf-non-prod-public.aws.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.hach.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.hach-prod.aws.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polygon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triohockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thriftyfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mediagrif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saq-b2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mezzo.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.sbs.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniselectsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.cdmv.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidnetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokerforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hachuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.aldi.orckestra.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidnetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aldi.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mets.mediagrif.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c49816d878722858b7ef83c1e787d3a5c911c33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c93fa2030fce9c3b119148a94aa6cb386bde85e4c4c2694220eec1849dbb31b951774b844f252ed569e5ece003a9494a5c408d4df838ac772e523fff6dbdb1f3f76330ad1736cd565b2aa8d4a90c0a90ccb3f33464839039658f65506a164a5d37f2747439e7d795600d254dd68e183757b5b24e8905ca34a6913bf51d0cfff3f1c370b89bff84f29c581887eb95fc79825ed0c44471c61c27c76e67dc03be35824ab0c5719b93c9d247f3edfd42c42f611b80d47c2a21108e5bf1594de69c1e8e750cfc6b0c696ac3b9010a66a6bb907adc3f64c0ba0d73f3b90889d37420e5a6409f92ca93e6e44b696c17e876cee8e497512aa9ab40ba58ec6e33c568f25