imperva.com
Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2
About this certificate
This digital certificate with serial number 01:b2:50:07:51:a7:9e:ac:23:e7:ba:01:a9:17:38:9d was issued on by GlobalSign nv-sa.
With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=imperva.com
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 01:b2:50:07:51:a7:9e:ac:23:e7:ba:01:a9:17:38:9dSerial Number (int): 2255080009240470641002623089904138397
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: de:40:24:38:9c:9d:84:67:82:3c:36:e0:e3:50:4a:d5:1f:86:7c:40
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a
Fingerprint (sha1): 8f:42:4b:f3:c5:92:d8:a2:01:bd:74:87:71:d4:bb:9e:c8:9b:bc:bf
Fingerprint (sha256): 49:a4:e7:03:cc:cf:56:ed:d7:b4:61:ae:f3:67:1e:1b:76:77:5e:8f:27:0a:8c:79:22:e9:1b:b1:ac:6e:fa:35
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl
Check the revocation status for certificate imperva.com
64
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imperva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
questintegrity.com
*.uat1.bakerhughes.com
*.s1ahm.cordant.bakerhughes.com
*.store.bakerhughesds.com
*.siirtecnigi.com
*.po.cordant.bakerhughes.com
*.na01-sanucc.bakerhughes.com
*.ovsgroup.com
bakerhughesds.com
bes.uat.welllink.bakerhughes.com
*.bakerhughesds.com
*.iam.bakerhughes.com
*.pa.bhc1.bakerhughes.com
*.staging.bakerhughesds.com
ga.demo.cordantapm.bakerhughes.com
*.uat.bakerhughes.com
turbinate.com
star.npabhc1-sanucc.bakerhughes.com
*.na02-sanucc.bakerhughes.com
*.staging.valvstore.com
www.questintegrity.com
*.panametricstraining.com
www.turbinate.com
*.trials.bhc3.bakerhughes.com
shopbakerhughes.com
*.jewelsuite.com
bentlyhost.com
*.na.system1apm.bakerhughes.com
*.qatarenergy.c3.bakerhughes.com
panametricstraining.com
*.shopbakerhughes.com
bnhost.na.system1assethealth.bakerhughes.com
*.rca.bakerhughes.com
*.bntechsupport.com
*.divigraph.com
valvstore.com
*.asm.cordant.bakerhughes.com
bntechsupport.com
*.staging.shopbakerhughes.com
bakerhughes.com
star.pabhc1-sanucc.bakerhughes.com
*.bentlyhost.com
*.ahm.cordant.bakerhughes.com
imperva.com
*.stgc.welllink.bakerhughes.com
topguard.bakerhughes.com
*.cordant.bakerhughes.com
*.na.system1assethealth.bakerhughes.com
www.bntechsupport.com
*.stgb.welllink.bakerhughes.com
divigraph.com
siirtecnigi.com
*.bhpartnerplus.com
*.eu02-sanucc.bakerhughes.com
*.welllink.uat.bakerhughes.com
*.valvstore.com
*.staging.bakerhughes.com
*.bakerhughes.com
*.eu.system1assethealth.bakerhughes.com
bhpartnerplus.com
www.bakerhughes.com
*.api.bakerhughes.com
stg70-training.bakerhughes.com
qafco.posimulation.cordant.bakerhughes.com
*.uat1.bakerhughes.com
*.s1ahm.cordant.bakerhughes.com
*.store.bakerhughesds.com
*.siirtecnigi.com
*.po.cordant.bakerhughes.com
*.na01-sanucc.bakerhughes.com
*.ovsgroup.com
bakerhughesds.com
bes.uat.welllink.bakerhughes.com
*.bakerhughesds.com
*.iam.bakerhughes.com
*.pa.bhc1.bakerhughes.com
*.staging.bakerhughesds.com
ga.demo.cordantapm.bakerhughes.com
*.uat.bakerhughes.com
turbinate.com
star.npabhc1-sanucc.bakerhughes.com
*.na02-sanucc.bakerhughes.com
*.staging.valvstore.com
www.questintegrity.com
*.panametricstraining.com
www.turbinate.com
*.trials.bhc3.bakerhughes.com
shopbakerhughes.com
*.jewelsuite.com
bentlyhost.com
*.na.system1apm.bakerhughes.com
*.qatarenergy.c3.bakerhughes.com
panametricstraining.com
*.shopbakerhughes.com
bnhost.na.system1assethealth.bakerhughes.com
*.rca.bakerhughes.com
*.bntechsupport.com
*.divigraph.com
valvstore.com
*.asm.cordant.bakerhughes.com
bntechsupport.com
*.staging.shopbakerhughes.com
bakerhughes.com
star.pabhc1-sanucc.bakerhughes.com
*.bentlyhost.com
*.ahm.cordant.bakerhughes.com
imperva.com
*.stgc.welllink.bakerhughes.com
topguard.bakerhughes.com
*.cordant.bakerhughes.com
*.na.system1assethealth.bakerhughes.com
www.bntechsupport.com
*.stgb.welllink.bakerhughes.com
divigraph.com
siirtecnigi.com
*.bhpartnerplus.com
*.eu02-sanucc.bakerhughes.com
*.welllink.uat.bakerhughes.com
*.valvstore.com
*.staging.bakerhughes.com
*.bakerhughes.com
*.eu.system1assethealth.bakerhughes.com
bhpartnerplus.com
www.bakerhughes.com
*.api.bakerhughes.com
stg70-training.bakerhughes.com
qafco.posimulation.cordant.bakerhughes.com
Other certificates including the domain name imperva.com
(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
Certificate
The complete raw certificate details for imperva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMxjCCC66gAwIBAgIQAbJQB1Gnnqwj57oBqRc4nTANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMjAeFw0yNDA0 MTgxNTA3NTVaFw0yNDEwMTUxNTA3NTVaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6bgd4jw7jerK9L0Nii R3tEItXNxSeBP0bpKcr6iMacdBFNJOes8VCL1dKTCxJueOe17B+pZsjJ19jqB4/V QEy9huCBpzBTHq9OlR3FKWttYPxzLbvBvDFGJgEPV5lmjxdBNgjWHFRB4mlA3Rkr oEyPKg49CiFuWb0Iv/Orw+mYwbyK+3mvzqKzOYjPUd3QMJaiGdQFRaNc3nB5tBab vYYbxu90KcihdlPgJKy8peU0oPWXtCQ+nrljCNwlw05Dk062/OEWqUxrnA8yc6ZO bs6jfBdC9+3xeJHD8RU3V2pbDThR34raIMVPMPiMNYg6qZ0SELCJBPzRHe5e55bt 8wIDAQABo4IJzDCCCcgwggaABgNVHREEggZ3MIIGc4IScXVlc3RpbnRlZ3JpdHku Y29tghYqLnVhdDEuYmFrZXJodWdoZXMuY29tgh8qLnMxYWhtLmNvcmRhbnQuYmFr ZXJodWdoZXMuY29tghkqLnN0b3JlLmJha2VyaHVnaGVzZHMuY29tghEqLnNpaXJ0 ZWNuaWdpLmNvbYIcKi5wby5jb3JkYW50LmJha2VyaHVnaGVzLmNvbYIdKi5uYTAx LXNhbnVjYy5iYWtlcmh1Z2hlcy5jb22CDioub3ZzZ3JvdXAuY29tghFiYWtlcmh1 Z2hlc2RzLmNvbYIgYmVzLnVhdC53ZWxsbGluay5iYWtlcmh1Z2hlcy5jb22CEyou YmFrZXJodWdoZXNkcy5jb22CFSouaWFtLmJha2VyaHVnaGVzLmNvbYIZKi5wYS5i aGMxLmJha2VyaHVnaGVzLmNvbYIbKi5zdGFnaW5nLmJha2VyaHVnaGVzZHMuY29t giJnYS5kZW1vLmNvcmRhbnRhcG0uYmFrZXJodWdoZXMuY29tghUqLnVhdC5iYWtl cmh1Z2hlcy5jb22CDXR1cmJpbmF0ZS5jb22CI3N0YXIubnBhYmhjMS1zYW51Y2Mu YmFrZXJodWdoZXMuY29tgh0qLm5hMDItc2FudWNjLmJha2VyaHVnaGVzLmNvbYIX Ki5zdGFnaW5nLnZhbHZzdG9yZS5jb22CFnd3dy5xdWVzdGludGVncml0eS5jb22C GSoucGFuYW1ldHJpY3N0cmFpbmluZy5jb22CEXd3dy50dXJiaW5hdGUuY29tgh0q LnRyaWFscy5iaGMzLmJha2VyaHVnaGVzLmNvbYITc2hvcGJha2VyaHVnaGVzLmNv bYIQKi5qZXdlbHN1aXRlLmNvbYIOYmVudGx5aG9zdC5jb22CHyoubmEuc3lzdGVt MWFwbS5iYWtlcmh1Z2hlcy5jb22CICoucWF0YXJlbmVyZ3kuYzMuYmFrZXJodWdo ZXMuY29tghdwYW5hbWV0cmljc3RyYWluaW5nLmNvbYIVKi5zaG9wYmFrZXJodWdo ZXMuY29tgixibmhvc3QubmEuc3lzdGVtMWFzc2V0aGVhbHRoLmJha2VyaHVnaGVz LmNvbYIVKi5yY2EuYmFrZXJodWdoZXMuY29tghMqLmJudGVjaHN1cHBvcnQuY29t gg8qLmRpdmlncmFwaC5jb22CDXZhbHZzdG9yZS5jb22CHSouYXNtLmNvcmRhbnQu YmFrZXJodWdoZXMuY29tghFibnRlY2hzdXBwb3J0LmNvbYIdKi5zdGFnaW5nLnNo b3BiYWtlcmh1Z2hlcy5jb22CD2Jha2VyaHVnaGVzLmNvbYIic3Rhci5wYWJoYzEt c2FudWNjLmJha2VyaHVnaGVzLmNvbYIQKi5iZW50bHlob3N0LmNvbYIdKi5haG0u Y29yZGFudC5iYWtlcmh1Z2hlcy5jb22CC2ltcGVydmEuY29tgh8qLnN0Z2Mud2Vs bGxpbmsuYmFrZXJodWdoZXMuY29tghh0b3BndWFyZC5iYWtlcmh1Z2hlcy5jb22C GSouY29yZGFudC5iYWtlcmh1Z2hlcy5jb22CJyoubmEuc3lzdGVtMWFzc2V0aGVh bHRoLmJha2VyaHVnaGVzLmNvbYIVd3d3LmJudGVjaHN1cHBvcnQuY29tgh8qLnN0 Z2Iud2VsbGxpbmsuYmFrZXJodWdoZXMuY29tgg1kaXZpZ3JhcGguY29tgg9zaWly dGVjbmlnaS5jb22CEyouYmhwYXJ0bmVycGx1cy5jb22CHSouZXUwMi1zYW51Y2Mu YmFrZXJodWdoZXMuY29tgh4qLndlbGxsaW5rLnVhdC5iYWtlcmh1Z2hlcy5jb22C DyoudmFsdnN0b3JlLmNvbYIZKi5zdGFnaW5nLmJha2VyaHVnaGVzLmNvbYIRKi5i YWtlcmh1Z2hlcy5jb22CJyouZXUuc3lzdGVtMWFzc2V0aGVhbHRoLmJha2VyaHVn aGVzLmNvbYIRYmhwYXJ0bmVycGx1cy5jb22CE3d3dy5iYWtlcmh1Z2hlcy5jb22C FSouYXBpLmJha2VyaHVnaGVzLmNvbYIec3RnNzAtdHJhaW5pbmcuYmFrZXJodWdo ZXMuY29tgipxYWZjby5wb3NpbXVsYXRpb24uY29yZGFudC5iYWtlcmh1Z2hlcy5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAdBgNVHQ4EFgQU3kAkOJydhGeCPDbg41BK1R+GfEAwVwYDVR0gBFAwTjAIBgZn gQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEF BQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5j b20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRxMjBKBggrBgEFBQcwAoY+aHR0cDov L3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIw MjRxMi5jcnQwHwYDVR0jBBgwFoAUrw0C0MMbnlj47zdiLecDXZ5BSoowSAYDVR0f BEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFz cjNkdnRsc2NhMjAyNHEyLmNybDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA PxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGO8cAeLgAABAMASDBG AiEAhlAbkd+DEYeYmK5L8ZwiscxIx8MbTQbuxF2zpXnXJkECIQCDBt3Ina6Tl9HD f+lhVruOJAO5Shjo15iw8pYb/itLyQB2AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo Qgqf5mdMWjp0AAABjvHAHiYAAAQDAEcwRQIhAIPhJ77lqcanPHOQCEeqpLbBkHnW 3BPx0xlkc0L1oIzfAiAZxcX38eEazT2xZIPXaTiwzvAltyZfMwkeNozMCl2H4QB2 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjvHAHsIAAAQDAEcw RQIhAOMH18C7sZl6ltdspxAiSksAALx4Yku9nmNjirpL2zHkAiBlp7vbSr8uJqzX q2XWcaCvSm9kpeBNYfwp75XobEUQTTANBgkqhkiG9w0BAQsFAAOCAQEANBjBaYAe 5ofG+UGV2aCWAc82IVXbRB1jZCAAmslUebCWoBpz0f1+su5uRK3hGRbm0PfI8qEY CktQTQCg7ieHhahV6aRK6Mx9uWtpBl3BlzEYZgwtendNLTa4RFM2CnUwQA2p3CmI 9n75gfc1z0+kBJb6SJvc7wjThpcaakJ2zChHLbr4gPTtXDdNUGSKjoD3WU8r3kbt hBahgE/NV24UiAoOy6bbLkWhg/LVpa+CYbc5aqYNf6ZknyLRvRNw00R/vBaYO4R5 YP5XQ8D50DDCHhp6r33arWHRg+lFOeKvHGs/AwTqMUi1i+C24N/RdTM7XhAVX9ah sICPyalodhhkAQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6bgd4jw7jerK9L0Nii R3tEItXNxSeBP0bpKcr6iMacdBFNJOes8VCL1dKTCxJueOe17B+pZsjJ19jqB4/V QEy9huCBpzBTHq9OlR3FKWttYPxzLbvBvDFGJgEPV5lmjxdBNgjWHFRB4mlA3Rkr oEyPKg49CiFuWb0Iv/Orw+mYwbyK+3mvzqKzOYjPUd3QMJaiGdQFRaNc3nB5tBab vYYbxu90KcihdlPgJKy8peU0oPWXtCQ+nrljCNwlw05Dk062/OEWqUxrnA8yc6ZO bs6jfBdC9+3xeJHD8RU3V2pbDThR34raIMVPMPiMNYg6qZ0SELCJBPzRHe5e55bt 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2255080009240470641002623089904138397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 15:07:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 15:07:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17672676003434443373802180651170620209573717975780996221183635444213167645244323119884772335367348954136106336363278951571416594339630467740102608434602354523989938176729736548804032465624774853861911702512691691798944950027558131216987875100183727428516808510636893297699826636765021090419426688857277053252610893733314695755502682822895383888837579934570719424875646936246343004996340455406925878553238852985323405289343715791791615410179171592426368835011021012157827161737934508000903945729610870413689488583758666863033003221413066172947117968500301905115209481785484192611630009704346883764750656974863010819571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1655 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questintegrity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat1.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s1ahm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siirtecnigi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.po.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na01-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovsgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.uat.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pa.bhc1.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.bakerhughesds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.demo.cordantapm.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbinate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star.npabhc1-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na02-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questintegrity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panametricstraining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbinate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trials.bhc3.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelsuite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentlyhost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1apm.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qatarenergy.c3.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panametricstraining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnhost.na.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rca.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divigraph.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.shopbakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star.pabhc1-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentlyhost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahm.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgc.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topguard.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bntechsupport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgb.welllink.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divigraph.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siirtecnigi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhpartnerplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu02-sanucc.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welllink.uat.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valvstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.system1assethealth.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhpartnerplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg70-training.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qafco.posimulation.cordant.bakerhughes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) de4024389c9d8467823c36e0e3504ad51f867c40 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef1c01e2e000004030048304602210086501b91df8311879898ae4bf19c22b1cc48c7c31b4d06eec45db3a579d726410221008306ddc89dae9397d1c37fe96156bb8e2403b94a18e8d798b0f2961bfe2b4bc900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef1c01e26000004030047304502210083e127bee5a9c6a73c73900847aaa4b6c19079d6dc13f1d319647342f5a08cdf022019c5c5f7f1e11acd3db16483d76938b0cef025b7265f33091e368ccc0a5d87e1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ef1c01ec20000040300473045022100e307d7c0bbb1997a96d76ca710224a4b0000bc78624bbd9e63638aba4bdb31e4022065a7bbdb4abf2e26acd7ab65d671a0af4a6f64a5e04d61fc29ef95e86c45104d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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