imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:f1:88:4e:81:d9:54:44:57:13:73:1d:e0:71:f2:d7 was issued on by GlobalSign nv-sa.

With 149 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:f1:88:4e:81:d9:54:44:57:13:73:1d:e0:71:f2:d7
Serial Number (int): 2583336166380883180423177535094911703
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a9:8c:4c:f6:3a:db:f8:75:65:22:d9:13:3f:45:d6:45:31:ae:40:d4
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): db:0f:99:f6:e7:71:d8:85:96:c3:15:58:d6:49:8f:91:08:5a:b3:62
Fingerprint (sha256): 46:b8:8f:8d:7b:96:ea:ec:d9:1a:d2:ae:b2:51:f9:f7:a8:6d:c8:74:d9:34:85:ef:dc:93:4e:06:72:3a:3d:75

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

149

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

solutionsnavigator.com
*.projects.jci-hitachi.com
*.shoppertraksucks.com
simplexfiredetection.com
*.infrastructure.jci.com
ecom-qa-na.com
*.easternsheetmetal.com
*.simplexfiredetection.com
r102estimatoremea.com
ecom-dev-yn1.com
atyourservice-hr-payroll.com
fireclass.it
*.wotsecurity.com
*.campaign-stg.hitachiaircon.com
johnsoncontrols-mondial.com
wsjsociety.com
*.hitachiaircon.com
*.r102estimatoremea.com
dgatprogram.com
*.eeforum.net
*.adtsmarthome.co.uk
*.redwolf.net.nz
*.go.solutions.johnsoncontrols.com
*.mmcarnot.com
*.tycofs.com
*.ccureusergroup.com
*.ecom-dev-yn.com
*.ecom-qa-na.com
*.shoppertrac.com
*.shrinkindex.sensormatic.com
*.adt.ie
*.ecom-test-yn.com
*.sabroe.co.uk
*.ukarcdmz.com
adtsmarthome.co.uk
ccureusergroup.com
*.jci.flowis.com
*.mzxtechnology.com
shoppertraksux.com
*.jciarabia.com
jcibeta.com
onlinetechxchange.com
*.ecom-dev-yn1.com
*.ga.jci.com
securitysat.cl
adt.ie
johnsoncontrols.com.eg
shoppertrac.com
*.partscenterapi.jci.com
*.yorkinnovation.com
ntsecurity.uk
*.fireclass.co.uk
*.airbear.com
*.news.jcimaxprogram.com
jch-channelhub.com
mmcarnot.com
jcihub.com
*.jcihost.com
imperva.com
johnsoncontrols.ie
*.sterigenics.fortworth1.johnsoncontrols.com
shoppertraksucks.com
*.cloudvue.io
carnotrefrigeration.com
*.adtchile.cl
*.rescueair.com
*.solutionsnavigator.com
*.sensormatic-rec.com
*.johnsoncontrols-brasil.com
*.wsjsociety.com
logix-controls.com
ecom-test-yn.com
sensormatic-rec.com
*.shoppertrack-rct.com
*.shoppertrak.com
*.mmrefrigeration.com
*.adt.com.br
jciarabia.com
*.campaign.hitachiaircon.com
smaas-sensormatic.com
jcipat.com
*.jcipat.com
*.infuzion.sensormatic.com
*.jcitraininginstitute.com
*.shoppertrac-rct.com
*.hvacnavigator.com
*.gstlab.sensormatic.com
rescueair.com
*.smaas-sensormatic.com
*.atyourservice-hr-payroll.com
*.securitysat.cl
ecom-dev-yn2.com
jcihost.com
*.tycofireandsecurity.com.au
*.fireclass.it
shoppertrack-rct.com
tempered.io
*.smartvue.com
*.ntsecurity.uk
*.solutions.jci.com
*.gordonbrothers.com.au
airbear.com
mmrefrigeration.com
*.autocall.com
jcimaxprogram.com
*.tycomonitor.com
*.jch-channelhub.com
*.hitachi-airconditioning.hu
mzxtechnology.com
tyco.ca
*.dgatprogram.com
*.johnsoncontrols.ie
wotsecurity.com
*.uk.jci.com
adtchile.cl
*.shoppertraksux.com
yorkinnovation.com
*.jcimaxprogram.com
*.tyco.ca
*.synergy.sensormatic.com
redwolf.net.nz
gordonbrothers.com.au
*.ecom-dev-yn2.com
*.jcihub.com
ecom-dev-yn.com
smartvue.com
*.channelhub.jch-marketingcenter.com
*.membercenter.americandynamics.net
hitachi-airconditioning.hu
*.moresites.sensormatic.com
eeforum.net
*.logix-controls.com
cloudvue.io
*.carnotrefrigeration.com
*.jcibeta.com
*.staging.channelhub.jch-marketingcenter.com
*.us.jci.com
3otec.com
shoppertrac-rct.com
*.johnsoncontrols.com.eg
*.onlinetechxchange.com
*.johnsoncontrols-mondial.com
jcitraininginstitute.com
sabroe.co.uk
*.3otec.com
*.tempered.io
*.testkan.tycois.com
hvacnavigator.com
*.tyco.be

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGOcXV69xF8f4xx1aAd
oqcTSbaep06GYUwXKfF1jSGD3lwY+hbdLkTTtVEd46e2PS8UZUsapZsHIRRUPWwo
JXv/Np+gquBoAFvsfcWbofWzLUf/jsUFMnfErucm08lGzZYbZvbo9rA7eK7LdvmR
x6UnlSxiWCMKsME7jGItJg7jmzM07vbRTL1Gl2TxPw0I8HP89Bvv6eiY5U0hzpmc
7PkrDa0efR6X1YsxPiB0WuZv+1FcM8bzIrWEa4wSINOjAz3NvVJ8oJYVC3xW/z6W
EPX5yyJJfQBcKL6aWJxP0Rz1n7o5fcqv2S2hV24c6EHxHBQtjKic2czu4i0Pr6Eu
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2583336166380883180423177535094911703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 16:29:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 16:29:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22913019850028132360695807742176387321238082812773048398709860197442948416110255136609548435963671576014072819163039674654807914526684177442488567928710510027075995107334952346853451285706058228562384645586760274598344159258130781086940833427894205270173257062552888291885937639979261213010487049030597837984427323915757441048939695325539211410522410621024791772016061343010243935361664551181541993722594942743863866252335673957680998993453881171211219559216065593828587938720193622067259134875889273771425689554852690839231346632832918590508783352494335159787687425420147892180608578565916118928311599385014536580733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects.jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructure.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyourservice-hr-payroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign-stg.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redwolf.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.solutions.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrinkindex.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukarcdmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci.flowis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ga.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partscenterapi.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airbear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterigenics.fortworth1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudvue.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-brasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infuzion.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstlab.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atyourservice-hr-payroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutions.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airbear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycomonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synergy.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwolf.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.americandynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moresites.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvue.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testkan.tycois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98c4cf63adbf8756522d9133f45d64531ae40d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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