imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:01:7b:36:45:7e:d9:67:02:e7:e6:f6:6f:d4:d1:ed was issued on by GlobalSign nv-sa.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:01:7b:36:45:7e:d9:67:02:e7:e6:f6:6f:d4:d1:ed
Serial Number (int): 1336919328853292610963778296817701357
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 9f:60:36:fb:ce:42:fa:b2:a1:be:b4:4b:36:db:75:17:2d:ae:57:42
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): f7:55:96:a3:e2:68:55:18:d2:c2:a6:38:03:3d:7e:18:ba:0c:d3:db
Fingerprint (sha256): 48:7b:27:19:95:e0:60:76:31:58:5c:6c:db:87:91:81:81:02:9c:94:7a:61:da:12:88:0f:07:83:c6:64:be:75

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capefearfitness.net
mikebaez.com
psig.org
www.smallconcern.com.au
*.pflugervillesmilesdentistry.com
sylviabond.com
sbeventsblog.com
www.fbcnorthville.com
wwfca-apps.org
www.softtruck.com
www.beinvibe.com
www.inquirylearningcenter.org
texasnetcapital.com
www.robertpensaroofing.ca
wondafx.com
faf.co.ao
softtruck.com
bernedoodles.ca
www.excircle.com
www.thegreatcontroversy.com
www.tdfall.com
www.collegereadyplan.com
www.wwfca-apps.org
www.traveloxygen.com
www.vihaanrao-mamta.com
www.prajdomainonlyact.com
pflugervillesmilesdentistry.com
www.meramecriverwinetrail.org
imperva.com
proficiopartners.com
www.mosimtec.com
www.fransabad.com
gregglaser.com
rhinodesignstudio.com
perituza.com
wrightcomputing.com
www.beartech.marketing
jesusisall.com
thefriendlygreen.ca
www.psig.org
inquirylearningcenter.org
www.marijanihotel.co.tz
traveloxygen.com
www.camelothousebb.com
www.gregglaser.com
www.wondafx.com
fisiopt.com
danieltrese.com
www.pairedplus.com
meramecriverwinetrail.org
www.bernedoodles.ca
www.directavenue.com
thegreatcontroversy.com
andrewshousemovers.co.nz
www.andrewshousemovers.co.nz
www.mikebaez.com
www.instratghs.com
vihaanrao-mamta.com
www.ribbonandbluepartyrentals.com
www.sss.com.qa
instratghs.com
www.coletraincoaching.com
aemctax.com
ribbonandbluepartyrentals.com
sss.com.qa
www.jesusisall.com
prajdomainonlyact.com
beinvibe.com
tdfall.com
www.imahotbyisroel.com
www.rhinodesignstudio.com
goodfoodgreatdogs.com
www.huttontree.com
coletraincoaching.com
www.capefearfitness.net
www.faf.co.ao
marijanihotel.co.tz
www.allin1solar.com
www.texasnetcapital.com
farmaciapico.it
directavenue.com
www.fisiopt.com
www.perituza.com
www.sbeventsblog.com
www.sylviabond.com
smallconcern.com.au
www.goodfoodgreatdogs.com
mosimtec.com
www.finishingandcoating.com
imahotbyisroel.com
fransabad.com
finishingandcoating.com
pairedplus.com
www.farmaciapico.it
www.proficiopartners.com
huttontree.com
www.thefriendlygreen.ca
camelothousebb.com
www.wrightcomputing.com
www.qrcream.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV6VfOqv3R905yE16Yav
VYPeUFekF7Kc7Q4JkN0l0HX6nXwNayy2zOHpek3/2rHcB+4GIT6L+bNULtIiStw0
XA7HBjVQsMAAQ1rv5ZZ/NP6W5YA9923J+Bik7Tf1+R1ePTj4V50CPCP4ea+Wa3qo
oeYoXFknUCKNJzUGP6qOGyhYEQDTQTaeVBbwCVUF/sOrzmK63zXMBAvTPFXJaIg1
p12co7+qdYiW9XcIE6M5BW48tSIg2zxjTWfRZQQvc82hX6Iy3y786g4rI7NGFg8e
PhNUEES0DQ+XMCLqFBZ7nDOnfjYM1jsWvPx9dsj1YfbXiWu5K7XjboZ+5y17JcV8
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1336919328853292610963778296817701357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 18:02:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 18:02:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18856148517776084798272027671995103350290484258746235230480977219536492424445682244547686825337099414039356746753217594466641374051674875495491170597628752790916490383968046782507842949585736819167884924805035009001501675721895452455722247629387227032400829883175157106230961224321898964708840887581796947198811663278333180033022905291791526095204366559329696412453427015699417997912769551354701074312431410441308528420140147165224434045899009096616365859784381780229752023285331681520108660547505018481302845904329205141872699821630705515600553187353679667891289579162102601985417323714111932466033354735539928267811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2085 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capefearfitness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikebaez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smallconcern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pflugervillesmilesdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylviabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbeventsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbcnorthville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwfca-apps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softtruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beinvibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inquirylearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnetcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertpensaroofing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wondafx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faf.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softtruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernedoodles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatcontroversy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdfall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegereadyplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwfca-apps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveloxygen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vihaanrao-mamta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prajdomainonlyact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflugervillesmilesdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meramecriverwinetrail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proficiopartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosimtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fransabad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregglaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinodesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perituza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrightcomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beartech.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusisall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefriendlygreen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquirylearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marijanihotel.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveloxygen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camelothousebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregglaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wondafx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisiopt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danieltrese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pairedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meramecriverwinetrail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernedoodles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatcontroversy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewshousemovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewshousemovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikebaez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instratghs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vihaanrao-mamta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ribbonandbluepartyrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sss.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instratghs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coletraincoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemctax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribbonandbluepartyrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sss.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusisall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prajdomainonlyact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinvibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdfall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imahotbyisroel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhinodesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfoodgreatdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttontree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coletraincoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capefearfitness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faf.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijanihotel.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allin1solar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasnetcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmaciapico.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisiopt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perituza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbeventsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sylviabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallconcern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodfoodgreatdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosimtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finishingandcoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imahotbyisroel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fransabad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finishingandcoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pairedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmaciapico.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proficiopartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttontree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefriendlygreen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camelothousebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrightcomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qrcream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f6036fbce42fab2a1beb44b36db75172dae5742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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