imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:0b:8c:46:e8:f9:e0:bf:2e:45:08:33:75:6a:06:66 was issued on by GlobalSign nv-sa.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0b:8c:46:e8:f9:e0:bf:2e:45:08:33:75:6a:06:66
Serial Number (int): 1389188416647292353571086287105558118
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 73:4c:81:6a:db:07:99:47:83:a2:9a:51:5d:d0:8d:9b:5a:ca:29:b9
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): b7:bf:0d:63:0a:1b:ce:f8:19:8d:14:83:74:b1:9e:cf:89:91:f8:d3
Fingerprint (sha256): 43:91:a4:c9:5a:89:f0:62:59:61:86:67:4b:e9:0a:e7:79:9d:a5:ef:e9:67:08:1b:ce:ae:db:e1:bd:09:3e:44

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.llabusiness.com
*.btcbahamas.com
cwpanama.com
pfportal.cwllag.com
*.libertybusinesspr.com
*.cwbhcs.com
*.cwnetworks.com
j-trak.libertypr.com
flowbusiness.co
masmovilpanama.com
hospitality.cwbhcs.com
*.centennialpr.com
*.flowbusiness.co
*.libertynet.com
mi.libertypr.com
*.libertypr.com
*.cbscloudvoice.com
imperva.com
cwc.com
commportal-cnp.com.pa
*.cwpanama.com
*.libertyvi.com
*.cwllag.com
*.navegaconseguridad.net
*.discoverflow.co
*.centixvoip.net
*.cscsmart.com
*.cwc.com
lla.com
webhook.qa2.libertypr.com
*.cwpanama.net
libertypr.com
libertynet.com
*.cwcbusiness.com
*.lla.com
discoverflow.co
*.commportal-cnp.com.pa
*.masmovilpanama.com
auth.libertypr.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJEzCCB/ugAwIBAgIQAQuMRuj54L8uRQgzdWoGZjANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMzAeFw0yMzA4
MTEwMTQ4NTNaFw0yNDAyMDcwMTQ4NTNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgplIc5+eNwc+sG2IagUo
oytRI49AAToi3mQq+UbORd5v/gLPTPrLkR82gOJrmkIwOXRCKiWxZtyK3hiBzmPF
n5plDiAPKT661jDV9WWTLrJwOmL+RqGK6UiXo5KtBim3L83NE3DDDVijCeHQTGBK
HQ+kSFUqc2CCtmfWKmZaGemc5Hl+H3jfsrH4HUynUng4kI0VN60Syc34311ncBoy
Hhw+6lzKK+h6aQaAmcrV5iO+NPxWweP1LR+pJhhQqkE4z+Bnw+G4HZLLz5WpAsl+
lhVf/rRrv3nWLBE/SZCfYUf359XtwKmU4T1XSR0bNN+6nG9S9HArWX7R7DtLQiad
hQIDAQABo4IGGTCCBhUwggLNBgNVHREEggLEMIICwIIRKi5sbGFidXNpbmVzcy5j
b22CECouYnRjYmFoYW1hcy5jb22CDGN3cGFuYW1hLmNvbYITcGZwb3J0YWwuY3ds
bGFnLmNvbYIXKi5saWJlcnR5YnVzaW5lc3Nwci5jb22CDCouY3diaGNzLmNvbYIQ
Ki5jd25ldHdvcmtzLmNvbYIUai10cmFrLmxpYmVydHlwci5jb22CD2Zsb3didXNp
bmVzcy5jb4ISbWFzbW92aWxwYW5hbWEuY29tghZob3NwaXRhbGl0eS5jd2JoY3Mu
Y29tghIqLmNlbnRlbm5pYWxwci5jb22CESouZmxvd2J1c2luZXNzLmNvghAqLmxp
YmVydHluZXQuY29tghBtaS5saWJlcnR5cHIuY29tgg8qLmxpYmVydHlwci5jb22C
EyouY2JzY2xvdWR2b2ljZS5jb22CC2ltcGVydmEuY29tggdjd2MuY29tghVjb21t
cG9ydGFsLWNucC5jb20ucGGCDiouY3dwYW5hbWEuY29tgg8qLmxpYmVydHl2aS5j
b22CDCouY3dsbGFnLmNvbYIYKi5uYXZlZ2Fjb25zZWd1cmlkYWQubmV0ghEqLmRp
c2NvdmVyZmxvdy5jb4IQKi5jZW50aXh2b2lwLm5ldIIOKi5jc2NzbWFydC5jb22C
CSouY3djLmNvbYIHbGxhLmNvbYIZd2ViaG9vay5xYTIubGliZXJ0eXByLmNvbYIO
Ki5jd3BhbmFtYS5uZXSCDWxpYmVydHlwci5jb22CDmxpYmVydHluZXQuY29tghEq
LmN3Y2J1c2luZXNzLmNvbYIJKi5sbGEuY29tgg9kaXNjb3ZlcmZsb3cuY2+CFyou
Y29tbXBvcnRhbC1jbnAuY29tLnBhghQqLm1hc21vdmlscGFuYW1hLmNvbYISYXV0
aC5saWJlcnR5cHIuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFHNMgWrbB5lHg6KaUV3QjZtayim5MFcG
A1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYm
aHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/
BAIwADCBngYIKwYBBQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3Nw
Lmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIzcTMwSgYIKwYB
BQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRs
YXNyM2R2dGxzY2EyMDIzcTMuY3J0MB8GA1UdIwQYMBaAFO2g5gEFPjSCGqRPX8W9
EUGq3/NhMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5j
b20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMy5jcmwwggF/BgorBgEEAdZ5AgQC
BIIBbwSCAWsBaQB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB
ieJIXaoAAAQDAEgwRgIhAPR5eqWO6nOOSraUakPhicODFjSaKJ5LSgkIcCJuz4om
AiEAu/7kLbuV57lbjhZUiFkvgu6W+83CYn5lSvcKNJgkVgoAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYniSF+tAAAEAwBHMEUCIQCEJeAoNSic
AcXhSZiOHXrfiDb/QwxtpypHxOl7GjatnQIgQIHw0/Y01+OucgAYCndrbG6CfCt9
RM1R7T/YmxbKKs8AdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA
AYniSGAjAAAEAwBHMEUCIAlZunrAdy1qNdDkHgAMK6uq+BDrWZaTJqh/m4RrPVph
AiEAy2O/B6gMmF/UCDpB1BfJ4l8FOvcZCGKdJs/pBhlbkEowDQYJKoZIhvcNAQEL
BQADggEBAG8dsSyU3p4R34MwGiMCpM4lw4DVyJssCuz/I7jM14+QyBeeRrqiCqvw
eYF9uTkOk3H96k1Dd15oA+2QpFfmaoWTJhgNqSv2DWO2OFD64WANxTwIMuZGqKG7
49y4jswrZm6O7IkhmJ0U7OkB/GFkpNh234QBvxUEYuDuymVwxfomotNkOh1G+SwE
wYinkOfVC3ubMUDPsfTc0v2ZBXkdDCOI0LGLkgA8AQtsdB+lMk2yLaBOlelhTzuh
nmUpTrK+4/O8xnUlPbju/YytJORJFqtXQlyAg/GHZqzIB+lWWSaqamRYy6tb3TrD
FdcC10EYoI8I3/mn0+xSc+H0odOVU28=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgplIc5+eNwc+sG2IagUo
oytRI49AAToi3mQq+UbORd5v/gLPTPrLkR82gOJrmkIwOXRCKiWxZtyK3hiBzmPF
n5plDiAPKT661jDV9WWTLrJwOmL+RqGK6UiXo5KtBim3L83NE3DDDVijCeHQTGBK
HQ+kSFUqc2CCtmfWKmZaGemc5Hl+H3jfsrH4HUynUng4kI0VN60Syc34311ncBoy
Hhw+6lzKK+h6aQaAmcrV5iO+NPxWweP1LR+pJhhQqkE4z+Bnw+G4HZLLz5WpAsl+
lhVf/rRrv3nWLBE/SZCfYUf359XtwKmU4T1XSR0bNN+6nG9S9HArWX7R7DtLQiad
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1389188416647292353571086287105558118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 01:48:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 01:48:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16486566317080310611828797159475971223330811318399429073544927497457844324073926410826082226007129459767179279376508883025270651702457554732166569594233416533425162586845312131652683399945909633180524497984216075180018125947776610298697677165844602610195163676735491654728648901082117482198438744156968053325329622011690053881932257024491185403062537995890891793887856271692428793839398470175708418893244166042029896222571788584766874133702855723492167918056588495261368039552713485123245968899835746683586022545350568763753423936124890783238066226600136113634915073977225209191250899978098935831686612701981421510021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfportal.cwllag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertybusinesspr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwbhcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j-trak.libertypr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowbusiness.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masmovilpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitality.cwbhcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centennialpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowbusiness.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.libertypr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertypr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbscloudvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commportal-cnp.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertyvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwllag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navegaconseguridad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoverflow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centixvoip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cscsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.qa2.libertypr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwpanama.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertypr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwcbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverflow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commportal-cnp.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masmovilpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.libertypr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							734c816adb07994783a29a515dd08d9b5aca29b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189e2485daa0000040300483046022100f4797aa58eea738e4ab6946a43e189c38316349a289e4b4a090870226ecf8a26022100bbfee42dbb95e7b95b8e165488592f82ee96fbcdc2627e654af70a349824560a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189e2485fad00000403004730450221008425e02835289c01c5e149988e1d7adf8836ff430c6da72a47c4e97b1a36ad9d02204081f0d3f634d7e3ae7200180a776b6c6e827c2b7d44cd51ed3fd89b16ca2acf00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189e2486023000004030047304502200959ba7ac0772d6a35d0e41e000c2babaaf810eb59969326a87f9b846b3d5a61022100cb63bf07a80c985fd4083a41d417c9e25f053af71908629d26cfe906195b904a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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