imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:ae:4a:8b:e5:3a:b1:ca:90:8f:6f:cc:2d:a4:7f:f4 was issued on by GlobalSign nv-sa.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ae:4a:8b:e5:3a:b1:ca:90:8f:6f:cc:2d:a4:7f:f4
Serial Number (int): 2234199631138260128774518453269987316
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3c:90:22:97:55:9a:88:26:fe:3a:1c:82:45:78:d2:b0:4e:19:81:67
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): 2d:aa:fa:d9:bb:53:60:ab:ae:bd:db:74:54:aa:c0:ec:97:9f:8d:e2
Fingerprint (sha256): 3d:01:b7:ab:8f:e6:9d:a8:35:77:d9:86:44:eb:95:6c:9d:8f:a0:86:e0:a2:27:e1:8e:ac:59:d4:eb:e7:74:02

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paulabecker.org
gossipgirltour.com
www.mathlexia.com
www.rosemberglaw.com
customflamecutting.com
www.paulabecker.org
*.uniprix.com
eu1-api.rapidphire.com
wisepowerm2m.net
www.firstcrcmv.com
www.triptivaesign.com
www.acts4.org
www.customflamecutting.com
nsymbio.com
eu1-portal.rapidphire.com
www.lumos-global.com
www.fabmusic.com
aah-point.com
www.encinopharmacy.com
*.sbstest.co.nz
acts4.org
fabmusic.com
tooldiscount.com
mountainlakesorganic.com
*.macombgov.org
portal.performancetrust.com
triptivaesign.com
www.gossipgirltour.com
www.mountainlakesorganic.com
reach360.asbury.edu
*.aerial-vi.com
learning.tempo.co.il
www.tooldiscount.com
*.forground.com
kathrynvercillo.com
www.defendthepacific.org
kingbros.net
mathlexia.com
www.awlmeetings.com
defendthepacific.org
www.giproc.com
rosemberglaw.com
giproc.com
www.kingbros.net
www.sandiegowineandculinary.com
www.wisepowerm2m.net
atlanticstreetcenter.org
www.aah-point.com
www.vipcentralparktours.com
imperva.com
encinopharmacy.com
www.atlanticstreetcenter.org
forground.com
www.nsymbio.com
*.con.iij.us
*.femimoh.co.il
vipcentralparktours.com
*.iij.us
lumos-global.com
campaign.fibi.co.il
firstcrcmv.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCXrR6lO9LXJTWun2U1T
i9OM3K6N/PhtFGOM1wLs0gZ0VNRw8JxCaCkOqti2EEJS9EIE0gqvpSHY5e8+lZsg
JTSYFUxR9BdE7tZaw3PmoSWb8LKAIqv+KJ4AZSuUBmPf7cvzSBymQLZMnlF0znZ9
IciTS/4CtgGhHZCh7h+3D9FDwkUArVZMaIkKh8kM3E3zVGwscO9WLgGhJUu2UaSO
tBP7i4aG6c6HMnRz9Y01Ih0gz/+PevnWBbtfn359cglWnjHj53cB/EiJnqoGFaOC
EOiBp09u7AQfKxlEjDonnX2wgWXBMGtugYmmNbX64n00D6H0p6wuzKFe+JVLriNp
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2234199631138260128774518453269987316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 00:40:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:40:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19711874161189515475428319743050491020924405193924762978300002740811603765943655229626924652816061050770480262860489250589963286739744324962198254966784113914943292030086745040572063858468415035754143496836696937715353812373643029118215404108558287310634086276727629131899341517120988965699909796927598527210758300336442463235610306431456953854937803814443168083676968361004116917537171501090149714762661915074598261796465175669898214578063731794087356227253844334327812617124741641386191422720627428909543988614873440075491403109158615919461520217401088434078110501128658217657102553080752161078085521151269489830183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulabecker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathlexia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosemberglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customflamecutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulabecker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniprix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu1-api.rapidphire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisepowerm2m.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstcrcmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triptivaesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customflamecutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu1-portal.rapidphire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumos-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbstest.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acts4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tooldiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macombgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.performancetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triptivaesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gossipgirltour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainlakesorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reach360.asbury.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerial-vi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.tempo.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tooldiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathrynvercillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defendthepacific.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathlexia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awlmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defendthepacific.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giproc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosemberglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giproc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingbros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiegowineandculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisepowerm2m.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aah-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinopharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticstreetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsymbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.con.iij.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femimoh.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipcentralparktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iij.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumos-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.fibi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcrcmv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c902297559a8826fe3a1c824578d2b04e198167
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036594a3ecb0c77e34541cebc7969978d347bc4348c5334af5e9822b679a06791c8d264f5b6317403c0dbac397620b79b5fa58a8b93b78b3bab1209b48953176ca353f2c7f3251603510be6668667d50d7fcbec739fe5dbc930fa84c8a721d4936a9eec27b11ad4ea13c2ec46f97a4624750c5d9f9742f1a1e165f84210201d660955c259ad82f34615c3f3d5062ecdad4a355b2f12ccc0974c967ddd0e71f596a26583ad354652c18e9f1bb97de9d5d1cd47626a46270c7884fdeb8cde8cd7c9c91166fadd94003257a88ad9bcd720a72f14634883ecc6693e6763498c65d143393befd5a5ce84c578cdac16da9fb0161483b017512fc3296c9b76fc1ac362f9