imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:4b:b7:54:ba:8f:f8:df:ca:24:15:da:64:a8:56:ce was issued on by GlobalSign nv-sa.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4b:b7:54:ba:8f:f8:df:ca:24:15:da:64:a8:56:ce
Serial Number (int): 1722368654036410892988080476243121870
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 29:de:1a:52:87:51:d6:cf:41:d7:0a:8d:1f:2b:05:82:60:08:38:32
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): 17:1c:02:05:13:9a:4f:18:ac:0c:6e:4c:0b:53:94:ad:a7:05:1b:39
Fingerprint (sha256): 3c:8a:06:f8:39:d0:88:26:bc:48:a2:81:c0:e4:36:ae:e5:e8:f3:50:cf:78:b0:31:1f:c1:b9:9e:e4:84:3a:1c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate imperva.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
bancodeserviciosfinancieros.com.ar
*.daas-cbq.carrefour.com
simplyyoubox.lu
*.grupocarrefour.com.br
www.simplyyoubox.lu
*.greenweez.com
*.voyages.carrefour.fr
carrefour.it
*.voyages.carrefour.be
*.aloa-assurances.fr
fondation-carrefour.org
livraison-express.preprod-php7.wynd.eu
*.uat.carrefour-banque.fr
*.cartepass.fr
*.carrefour.pl
*.fondation-carrefour.org
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
ext-serviceclients.carla.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
*.fr.carrefour.com
fr-mim.ppd.carrefour.com
imperva.com
*.croquetteland.com
simplyyoubox.be
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
www.simplyyoubox.be
*.carrefour.net
*.carrefour.fr
dejbox.fr
*.carrefour.be
*.carrefourbelgium.be
financialwebsupplier.ppd.carrefour.com
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
croquetteland.com
supeco.fr
carrefour.pl
*.bancodeserviciosfinancieros.com.ar
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFxwHXUeZDkpB3XZ1YF
UFvKOQmEDYTdTNCrbS3HG0OsasRXZ7Z45WeE/gw4e3bj6s0OJzonrFMUmqSEvffG
X21PYVUXAtwOEuMFNj/302lcvf3rlXkoicybYGydIUki5jSBk65goMoKdeUgpXCZ
7LNA3tUvHKahwLx4HxROsjC2vUc7hLzCQ/uIlbsBfgF34kw+fOl/m6G54aPTyuVx
ewZraHgMaiTNaRV8CVQJtYgtPl8F+4QFB2hNBvQiBLBIZz//8hc5k8qJNQCzhvpd
TQUOhmY/tTG4E1KGjSYbHC6AVjasftHtFapsgwd8lzsg5BNlvF4yQJ0XB0fnQorG
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1722368654036410892988080476243121870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-05 10:28:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 10:28:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23031312994304500393968882394215495199555439311045973574611651992769803970547595410765937565618699920717895629328157457225260978647391148131362340121630064477245266797502556448585187742330056244264692036146370849821999206077760704641919847647507324413660612550276759378211734476240599302926551142966040519102570441351248592089644123485312418596189291352852589567502780691406294751859468047107496564000064906131433554528075593101310636624929474908202557855989175707167189385249609088752309625739150992450064800454137155345132892357036446469707246616267614304552930052403003257722647262344469505395908493804525081773651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyyoubox.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplyyoubox.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livraison-express.preprod-php7.wynd.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-serviceclients.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyyoubox.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplyyoubox.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29de1a528751d6cf41d70a8d1f2b058260083832
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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