imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:48:7d:30:e5:2c:12:b9:24:05:7f:d4:11:b5:aa:3e was issued on by GlobalSign nv-sa.

With 179 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:48:7d:30:e5:2c:12:b9:24:05:7f:d4:11:b5:aa:3e
Serial Number (int): 1705612544677029008640231713103260222
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cc:67:43:6f:d6:88:f0:6e:90:8b:fe:fe:d1:aa:bd:48:01:4f:b4:1c
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): e5:a5:16:b8:81:34:c0:3c:f8:da:c0:4e:04:12:3e:ce:39:9f:74:30
Fingerprint (sha256): 3e:fa:be:38:47:87:eb:93:75:87:aa:31:52:1c:76:e6:ae:50:d0:64:bf:c2:e0:70:f1:56:df:cc:ce:cc:53:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

179

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.snapplerefund.com
test.cropriskservices.com
www.servicenetsecure.com
layahealthcare.ie
*.aigportal.de
*.uat.aiglife.co.uk
api.aig.com
*.americanhome.co.jp
www.servicenethvacregistration.com
dev.pci.api.aig.com
*.aiglossandtheft.com
*.layahealthcare.ie
matrixdirect.com
*.aigdirect.com
mobilemail2.validusholdings.com
app.aiglife.co.uk
layalifeinsurance.ie
sponsorfit.valic.com
www.aigtheftandloss.com
techmark.co.jp
stage.pci.api.aig.com
*.aigdirectdigital.com
beta-m.cropriskservices.com
*.aig.co.jp
aiguswarranty.com
serviceplancenter.com
*.matrixdirect.com
view.myretirementmanager.com
www.agsourcetrac.com
integration04.layalifeinsurance.ie
*.valic.com
dev.api.aig.com
americangeneraltermlife.com
hdhvacwarranty.com
*.cropriskservices.com
app.uat.aiglife.co.uk
uat.aiglife.co.uk
www-443.aig.co.jp
test.comfortsureplan.com
test.mechanicalcontractorschoice.com
comfortsureplan.com
mail.validusholdings.com
*.dmp.aig.com
americanhome-morph.jp
myplan.myretirementmanager.com
www-1000.aig.com
integration03.layalifeinsurance.ie
mutual-aid.vfis.com
app.it1.aiglife.co.uk
it1.aiglife.co.uk
*.aig.com.hk
perf.api.aig.com
mobilemail3.validusholdings.com
cvm.uat.aiglife.co.uk
*.comfortpromise.com
demo-m.cropriskservices.com
*.aglife.com
*.hdhvacwarranty.com
*.agla.americangeneral.com
*.layalifeinsurance.ie
st2.aiglife.co.uk
*.hip8api.aig.eu
www.mycomfortshield.com
app.st1.aiglife.co.uk
mbl.aiu.co.jp
stage.api.aig.com
cg.cropriskservices.com
*.aig.com.mx
*.group.aiglife.co.uk
qa.api.aig.com
www.techmark.co.jp
*.aig.com.my
climateshieldcomplete.com
st3.aiglife.co.uk
*.aig.com
esign.cropriskservices.com
servicenet.com
www.aiguswarranty.com
imperva.com
st1.aiglife.co.uk
www2.aig.co.jp
*.groupprs.aiglife.co.uk
aigcorporate.com
qa.pci.api.aig.com
servicenethvacregistration.com
webservices.servicenetsecure.com
aigdirectdigital.com
esignt.cropriskservices.com
www-401.aigseguros.com.br
vfis.com
aigtheftandloss.com
*.westernworld.com
app.st2.aiglife.co.uk
test.climateshieldcomplete.com
agsourcetrac.com
www-176.aiginsurance.com
www.serviceplancenter.com
*.www.aiglife.co.uk
b2b.groupprs.aiglife.co.uk
servicenetsecure.com
50years.vfis.com
www.mechanicalcontractorschoice.com
m.cropriskservices.com
www-510.aig.co.jp
pci.api.aig.com
contractorspreferred.com
integration04.layahealthcare.ie
ure.groupprs.aiglife.co.uk
www.vfis.com
*.uat.aigdirect.com
www.servicenet.com
test-m.cropriskservices.com
test.servicenetsecure.com
nonprod-connector-secure.api.aig.com
www.contractorspreferred.com
mobile.aiglife.co.uk
live.api.aig.com
test.mycomfortshield.com
app.sta.aiglife.co.uk
integration03.layahealthcare.ie
*.snapplerefund.com
qa.aigtheftandloss.com
*.aig.com.ec
test.servicenethvacregistration.com
test.servicenet.com
perf.pci.api.aig.com
mechanicalcontractorschoice.com
*.www-502.aig.co.jp
cvm.sta.aiglife.co.uk
api.serviceplancenter.com
www-502.aig.co.jp
login.valic.com
snapplerefund.com
www5.fujikasai.co.jp
aigdirect.com
assessments.group.aiglife.co.uk
groups.valic.com
mycomfortshield.com
preprod.layahealthcare.ie
*.aigcorporate.com
demo-sponsorfit.valic.com
sta.aiglife.co.uk
www-434.aig.co.jp
*.aiglife.co.uk
uw.sta.aiglife.co.uk
group.aiglife.co.uk
*.americanhome-morph.jp
*.talbotuw.com
demo.aiglife.co.uk
*.yourserviceplan.com
uw.uat.aiglife.co.uk
demo.valic.com
test.aiguswarranty.com
test.serviceplancenter.com
*.hip12api.aig.com
build-m.cropriskservices.com
aigportal.de
comfortpromise.com
gps.valic.com
www-465.aig.co.jp
www.climateshieldcomplete.com
uat.pci.api.aig.com
claims.mycomfortshield.com
www.comfortsureplan.com
app.demo.aiglife.co.uk
*.aig.com.br
fts.aiglife.co.uk
*.aig.com.sg
my.valic.com
uat.api.aig.com
portal.aiglife.co.uk
rma.cropriskservices.com
*.developers.aig.com
qa.webservices.servicenetsecure.com
test.contractorspreferred.com
groupprs.aiglife.co.uk
aiglossandtheft.com
*.cloud.api.aig.com
www.americangeneraltermlife.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIWHjCCFQagAwIBAgIQAUh9MOUsErkkBX/UEbWqPjANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMjAeFw0yNDA0
MTEwMDMxMDZaFw0yNDEwMDgwMDMxMDZaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl9Ulrs2uF9H6tlTNxba
skHPMed/rifo9ot2bP18a1kXM+kb6toAumSEhPzuhlZWJRgTzJdAvxkb8WGjYh58
lG8WptynszxVMu3OCVp4UKOvtbErOwG7f231LunSEZw+ftDZs8+miarFUVMdsKTw
gcslLpadaL83hyPxGSaPEkwwceJqcYE3PC1ENzab6wuD2VxXgpQSJrBDK1VqNZWq
P+Gq8MlTqnh9iDqH5yOfLCh6K1HC+BBQHvnPrcD8NHI7051n+Q+oQbB1pG7u2x22
4+GWOFYxr8MVDQ4SLIHVLQ6ds9WDHeGvVEKZjC2BelWc4m/JM/Z2DAa1VxF6K3Va
4wIDAQABo4ITJDCCEyAwgg/ZBgNVHREEgg/QMIIPzIIUcWEuc25hcHBsZXJlZnVu
ZC5jb22CGXRlc3QuY3JvcHJpc2tzZXJ2aWNlcy5jb22CGHd3dy5zZXJ2aWNlbmV0
c2VjdXJlLmNvbYIRbGF5YWhlYWx0aGNhcmUuaWWCDiouYWlncG9ydGFsLmRlghMq
LnVhdC5haWdsaWZlLmNvLnVrggthcGkuYWlnLmNvbYIUKi5hbWVyaWNhbmhvbWUu
Y28uanCCInd3dy5zZXJ2aWNlbmV0aHZhY3JlZ2lzdHJhdGlvbi5jb22CE2Rldi5w
Y2kuYXBpLmFpZy5jb22CFSouYWlnbG9zc2FuZHRoZWZ0LmNvbYITKi5sYXlhaGVh
bHRoY2FyZS5pZYIQbWF0cml4ZGlyZWN0LmNvbYIPKi5haWdkaXJlY3QuY29tgh9t
b2JpbGVtYWlsMi52YWxpZHVzaG9sZGluZ3MuY29tghFhcHAuYWlnbGlmZS5jby51
a4IUbGF5YWxpZmVpbnN1cmFuY2UuaWWCFHNwb25zb3JmaXQudmFsaWMuY29tghd3
d3cuYWlndGhlZnRhbmRsb3NzLmNvbYIOdGVjaG1hcmsuY28uanCCFXN0YWdlLnBj
aS5hcGkuYWlnLmNvbYIWKi5haWdkaXJlY3RkaWdpdGFsLmNvbYIbYmV0YS1tLmNy
b3ByaXNrc2VydmljZXMuY29tggsqLmFpZy5jby5qcIIRYWlndXN3YXJyYW50eS5j
b22CFXNlcnZpY2VwbGFuY2VudGVyLmNvbYISKi5tYXRyaXhkaXJlY3QuY29tghx2
aWV3Lm15cmV0aXJlbWVudG1hbmFnZXIuY29tghR3d3cuYWdzb3VyY2V0cmFjLmNv
bYIiaW50ZWdyYXRpb24wNC5sYXlhbGlmZWluc3VyYW5jZS5pZYILKi52YWxpYy5j
b22CD2Rldi5hcGkuYWlnLmNvbYIbYW1lcmljYW5nZW5lcmFsdGVybWxpZmUuY29t
ghJoZGh2YWN3YXJyYW50eS5jb22CFiouY3JvcHJpc2tzZXJ2aWNlcy5jb22CFWFw
cC51YXQuYWlnbGlmZS5jby51a4IRdWF0LmFpZ2xpZmUuY28udWuCEXd3dy00NDMu
YWlnLmNvLmpwghh0ZXN0LmNvbWZvcnRzdXJlcGxhbi5jb22CJHRlc3QubWVjaGFu
aWNhbGNvbnRyYWN0b3JzY2hvaWNlLmNvbYITY29tZm9ydHN1cmVwbGFuLmNvbYIY
bWFpbC52YWxpZHVzaG9sZGluZ3MuY29tgg0qLmRtcC5haWcuY29tghVhbWVyaWNh
bmhvbWUtbW9ycGguanCCHm15cGxhbi5teXJldGlyZW1lbnRtYW5hZ2VyLmNvbYIQ
d3d3LTEwMDAuYWlnLmNvbYIiaW50ZWdyYXRpb24wMy5sYXlhbGlmZWluc3VyYW5j
ZS5pZYITbXV0dWFsLWFpZC52ZmlzLmNvbYIVYXBwLml0MS5haWdsaWZlLmNvLnVr
ghFpdDEuYWlnbGlmZS5jby51a4IMKi5haWcuY29tLmhrghBwZXJmLmFwaS5haWcu
Y29tgh9tb2JpbGVtYWlsMy52YWxpZHVzaG9sZGluZ3MuY29tghVjdm0udWF0LmFp
Z2xpZmUuY28udWuCFCouY29tZm9ydHByb21pc2UuY29tghtkZW1vLW0uY3JvcHJp
c2tzZXJ2aWNlcy5jb22CDCouYWdsaWZlLmNvbYIUKi5oZGh2YWN3YXJyYW50eS5j
b22CGiouYWdsYS5hbWVyaWNhbmdlbmVyYWwuY29tghYqLmxheWFsaWZlaW5zdXJh
bmNlLmllghFzdDIuYWlnbGlmZS5jby51a4IQKi5oaXA4YXBpLmFpZy5ldYIXd3d3
Lm15Y29tZm9ydHNoaWVsZC5jb22CFWFwcC5zdDEuYWlnbGlmZS5jby51a4INbWJs
LmFpdS5jby5qcIIRc3RhZ2UuYXBpLmFpZy5jb22CF2NnLmNyb3ByaXNrc2Vydmlj
ZXMuY29tggwqLmFpZy5jb20ubXiCFSouZ3JvdXAuYWlnbGlmZS5jby51a4IOcWEu
YXBpLmFpZy5jb22CEnd3dy50ZWNobWFyay5jby5qcIIMKi5haWcuY29tLm15ghlj
bGltYXRlc2hpZWxkY29tcGxldGUuY29tghFzdDMuYWlnbGlmZS5jby51a4IJKi5h
aWcuY29tghplc2lnbi5jcm9wcmlza3NlcnZpY2VzLmNvbYIOc2VydmljZW5ldC5j
b22CFXd3dy5haWd1c3dhcnJhbnR5LmNvbYILaW1wZXJ2YS5jb22CEXN0MS5haWds
aWZlLmNvLnVrgg53d3cyLmFpZy5jby5qcIIYKi5ncm91cHBycy5haWdsaWZlLmNv
LnVrghBhaWdjb3Jwb3JhdGUuY29tghJxYS5wY2kuYXBpLmFpZy5jb22CHnNlcnZp
Y2VuZXRodmFjcmVnaXN0cmF0aW9uLmNvbYIgd2Vic2VydmljZXMuc2VydmljZW5l
dHNlY3VyZS5jb22CFGFpZ2RpcmVjdGRpZ2l0YWwuY29tghtlc2lnbnQuY3JvcHJp
c2tzZXJ2aWNlcy5jb22CGXd3dy00MDEuYWlnc2VndXJvcy5jb20uYnKCCHZmaXMu
Y29tghNhaWd0aGVmdGFuZGxvc3MuY29tghIqLndlc3Rlcm53b3JsZC5jb22CFWFw
cC5zdDIuYWlnbGlmZS5jby51a4IedGVzdC5jbGltYXRlc2hpZWxkY29tcGxldGUu
Y29tghBhZ3NvdXJjZXRyYWMuY29tghh3d3ctMTc2LmFpZ2luc3VyYW5jZS5jb22C
GXd3dy5zZXJ2aWNlcGxhbmNlbnRlci5jb22CEyoud3d3LmFpZ2xpZmUuY28udWuC
GmIyYi5ncm91cHBycy5haWdsaWZlLmNvLnVrghRzZXJ2aWNlbmV0c2VjdXJlLmNv
bYIQNTB5ZWFycy52ZmlzLmNvbYIjd3d3Lm1lY2hhbmljYWxjb250cmFjdG9yc2No
b2ljZS5jb22CFm0uY3JvcHJpc2tzZXJ2aWNlcy5jb22CEXd3dy01MTAuYWlnLmNv
Lmpwgg9wY2kuYXBpLmFpZy5jb22CGGNvbnRyYWN0b3JzcHJlZmVycmVkLmNvbYIf
aW50ZWdyYXRpb24wNC5sYXlhaGVhbHRoY2FyZS5pZYIadXJlLmdyb3VwcHJzLmFp
Z2xpZmUuY28udWuCDHd3dy52ZmlzLmNvbYITKi51YXQuYWlnZGlyZWN0LmNvbYIS
d3d3LnNlcnZpY2VuZXQuY29tght0ZXN0LW0uY3JvcHJpc2tzZXJ2aWNlcy5jb22C
GXRlc3Quc2VydmljZW5ldHNlY3VyZS5jb22CJG5vbnByb2QtY29ubmVjdG9yLXNl
Y3VyZS5hcGkuYWlnLmNvbYIcd3d3LmNvbnRyYWN0b3JzcHJlZmVycmVkLmNvbYIU
bW9iaWxlLmFpZ2xpZmUuY28udWuCEGxpdmUuYXBpLmFpZy5jb22CGHRlc3QubXlj
b21mb3J0c2hpZWxkLmNvbYIVYXBwLnN0YS5haWdsaWZlLmNvLnVrgh9pbnRlZ3Jh
dGlvbjAzLmxheWFoZWFsdGhjYXJlLmllghMqLnNuYXBwbGVyZWZ1bmQuY29tghZx
YS5haWd0aGVmdGFuZGxvc3MuY29tggwqLmFpZy5jb20uZWOCI3Rlc3Quc2Vydmlj
ZW5ldGh2YWNyZWdpc3RyYXRpb24uY29tghN0ZXN0LnNlcnZpY2VuZXQuY29tghRw
ZXJmLnBjaS5hcGkuYWlnLmNvbYIfbWVjaGFuaWNhbGNvbnRyYWN0b3JzY2hvaWNl
LmNvbYITKi53d3ctNTAyLmFpZy5jby5qcIIVY3ZtLnN0YS5haWdsaWZlLmNvLnVr
ghlhcGkuc2VydmljZXBsYW5jZW50ZXIuY29tghF3d3ctNTAyLmFpZy5jby5qcIIP
bG9naW4udmFsaWMuY29tghFzbmFwcGxlcmVmdW5kLmNvbYIUd3d3NS5mdWppa2Fz
YWkuY28uanCCDWFpZ2RpcmVjdC5jb22CH2Fzc2Vzc21lbnRzLmdyb3VwLmFpZ2xp
ZmUuY28udWuCEGdyb3Vwcy52YWxpYy5jb22CE215Y29tZm9ydHNoaWVsZC5jb22C
GXByZXByb2QubGF5YWhlYWx0aGNhcmUuaWWCEiouYWlnY29ycG9yYXRlLmNvbYIZ
ZGVtby1zcG9uc29yZml0LnZhbGljLmNvbYIRc3RhLmFpZ2xpZmUuY28udWuCEXd3
dy00MzQuYWlnLmNvLmpwgg8qLmFpZ2xpZmUuY28udWuCFHV3LnN0YS5haWdsaWZl
LmNvLnVrghNncm91cC5haWdsaWZlLmNvLnVrghcqLmFtZXJpY2FuaG9tZS1tb3Jw
aC5qcIIOKi50YWxib3R1dy5jb22CEmRlbW8uYWlnbGlmZS5jby51a4IVKi55b3Vy
c2VydmljZXBsYW4uY29tghR1dy51YXQuYWlnbGlmZS5jby51a4IOZGVtby52YWxp
Yy5jb22CFnRlc3QuYWlndXN3YXJyYW50eS5jb22CGnRlc3Quc2VydmljZXBsYW5j
ZW50ZXIuY29tghIqLmhpcDEyYXBpLmFpZy5jb22CHGJ1aWxkLW0uY3JvcHJpc2tz
ZXJ2aWNlcy5jb22CDGFpZ3BvcnRhbC5kZYISY29tZm9ydHByb21pc2UuY29tgg1n
cHMudmFsaWMuY29tghF3d3ctNDY1LmFpZy5jby5qcIIdd3d3LmNsaW1hdGVzaGll
bGRjb21wbGV0ZS5jb22CE3VhdC5wY2kuYXBpLmFpZy5jb22CGmNsYWltcy5teWNv
bWZvcnRzaGllbGQuY29tghd3d3cuY29tZm9ydHN1cmVwbGFuLmNvbYIWYXBwLmRl
bW8uYWlnbGlmZS5jby51a4IMKi5haWcuY29tLmJyghFmdHMuYWlnbGlmZS5jby51
a4IMKi5haWcuY29tLnNnggxteS52YWxpYy5jb22CD3VhdC5hcGkuYWlnLmNvbYIU
cG9ydGFsLmFpZ2xpZmUuY28udWuCGHJtYS5jcm9wcmlza3NlcnZpY2VzLmNvbYIU
Ki5kZXZlbG9wZXJzLmFpZy5jb22CI3FhLndlYnNlcnZpY2VzLnNlcnZpY2VuZXRz
ZWN1cmUuY29tgh10ZXN0LmNvbnRyYWN0b3JzcHJlZmVycmVkLmNvbYIWZ3JvdXBw
cnMuYWlnbGlmZS5jby51a4ITYWlnbG9zc2FuZHRoZWZ0LmNvbYITKi5jbG91ZC5h
cGkuYWlnLmNvbYIfd3d3LmFtZXJpY2FuZ2VuZXJhbHRlcm1saWZlLmNvbTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1Ud
DgQWBBTMZ0Nv1ojwbpCL/v7Rqr1IAU+0HDBXBgNVHSAEUDBOMAgGBmeBDAECATBC
BgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNp
Z24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4GCCsGAQUFBwEBBIGR
MIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9jYS9n
c2F0bGFzcjNkdnRsc2NhMjAyNHEyMEoGCCsGAQUFBzAChj5odHRwOi8vc2VjdXJl
Lmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRsc2NhMjAyNHEyLmNy
dDAfBgNVHSMEGDAWgBSvDQLQwxueWPjvN2It5wNdnkFKijBIBgNVHR8EQTA/MD2g
O6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxz
Y2EyMDI0cTIuY3JsMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY7KkOwpAAAEAwBHMEUCIBAh+pTs
8AUedE+7CirwlFBVE7yIhYgXVtc2HE1Gqgm9AiEA7bivBosWyK2x6QLGJKbyVxF2
pnJviV45rGDdZGwFHMYAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7
qwAAAY7KkO1kAAAEAwBHMEUCIQDTCkv+NTq2EwMjl+a/Xe5fqIIzc9nCKGloMmBP
OVAeYwIgQEPpEuPxzlDCG+HqXwv2biQLBTpSsLJofBbU1tNcszsAdgB2/4g/Crb7
lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY7KkO5yAAAEAwBHMEUCIH4e1NZR
TXhkwr/arwWhK8lOoAIvG2d/NMSfFcDgozHrAiEAs7lKAvHBAlj7kPSHGdpd/6D9
M8e5kDd9XXJw9HcmJ38wDQYJKoZIhvcNAQELBQADggEBAFsUd6zXRBdp0qirSSjM
KI38eJYroytak2JbawdJtDNIq019wJvHbbN8aKkimNd2tymgzaUb4UL9aXouUbr4
7Yn+tlNm5mmlXb8yx/qoFCalbmAQaRTQfD2KpRt73nqTUdSOMYt55KBoIE3+PYuA
PB/zr3FwGh6uGXAnBxUhQiuVNmDpNz2krInaCXhGqJJHoNA3aGBAGOyQiI1Q6XyY
pKp6nHUCeGalg/lh+SzW4B7GsX1SHGfleqalDhs426zRl/5e5jR3yTezaCqJ8xsy
0BFAdXBGfcw9+9l9PDt96CM4ZY/BLHLa2RreReFAvf1lRSbti4MLcjy+IHkl7bRP
Ifk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl9Ulrs2uF9H6tlTNxba
skHPMed/rifo9ot2bP18a1kXM+kb6toAumSEhPzuhlZWJRgTzJdAvxkb8WGjYh58
lG8WptynszxVMu3OCVp4UKOvtbErOwG7f231LunSEZw+ftDZs8+miarFUVMdsKTw
gcslLpadaL83hyPxGSaPEkwwceJqcYE3PC1ENzab6wuD2VxXgpQSJrBDK1VqNZWq
P+Gq8MlTqnh9iDqH5yOfLCh6K1HC+BBQHvnPrcD8NHI7051n+Q+oQbB1pG7u2x22
4+GWOFYxr8MVDQ4SLIHVLQ6ds9WDHeGvVEKZjC2BelWc4m/JM/Z2DAa1VxF6K3Va
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1705612544677029008640231713103260222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:31:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 00:31:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23022380688435215220419236569505874856988166569258955973352061504012207564120521499342489755221814205921520676932482542435045907821432351923263880712175729958514696832165386225824178411689308321257080893032058149958506756400140468088590143494135660552155433593973942437535152985308387408836702456304204527728095631378318558281536106367579589759851719029541927691611127439552976848264199111271213107989425295400369380853611320857126641341242454091625101322755210656546893261688923667267061553689375085674052683738486456272018695985830988170834987553927112816014457836237055637747990308133991641019188881041941161401059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemail2.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorfit.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration04.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-443.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-1000.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration03.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutual-aid.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.it1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilemail3.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvm.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agla.americangeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st2.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip8api.aig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbl.aiu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st3.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esignt.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-401.aigseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.st2.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-176.aiginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50years.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-510.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration04.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ure.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-connector-secure.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration03.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvm.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.fujikasai.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessments.group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-sponsorfit.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-434.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uw.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talbotuw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uw.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip12api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-m.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-465.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.demo.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fts.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rma.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developers.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc67436fd688f06e908bfefed1aabd48014fb41c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b1477acd7441769d2a8ab4928cc288dfc78962ba32b5a93625b6b0749b43348ab4d7dc09bc76db37c68a92298d776b729a0cda51be142fd697a2e51baf8ed89feb65366e669a55dbf32c7faa81426a56e60106914d07c3d8aa51b7bde7a9351d48e318b79e4a068204dfe3d8b803c1ff3af71701a1eae197027071521422b953660e9373da4ac89da097846a89247a0d03768604018ec90888d50e97c98a4aa7a9c75027866a583f961f92cd6e01ec6b17d521c67e57aa6a50e1b38dbacd197fe5ee63477c937b3682a89f31b32d011407570467dcc3dfbd97d3c3b7de82338658fc12c72dad91ade45e140bdfd654526ed8b830b723cbe207925edb44f21f9