imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:9b:66:22:be:cb:dd:a7:d4:e3:ea:39:42:a0:38:c4 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9b:66:22:be:cb:dd:a7:d4:e3:ea:39:42:a0:38:c4
Serial Number (int): 2136105567443522657073424360101918916
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:c1:32:b8:02:98:25:0a:e6:ba:3d:2d:20:ef:93:a5:73:80:71:b9
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 35:ae:17:52:7a:88:d8:96:73:bc:63:4c:1b:16:12:f9:5f:5b:e3:21
Fingerprint (sha256): 4a:af:ba:64:04:84:d9:6f:9f:2e:3b:7a:ff:c8:dc:fe:5d:3e:d0:7a:62:17:16:40:16:bb:28:2c:cd:b1:22:de

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sixtyhotels.com
*.tapatiosprings.com
reservations.thelondonwesthollywood.com
demo-oda.avro.cert.aws.sabre.com
be-p2.synxis.com
*.theleela.com
*.e9.cert.sabre.com
*.tsts.cert.sabre.com
*.avri.as.cert.asc.sabre.com
airconnectivity-gui.int.sabre.com
*.pacificairlines.com.vn
20q4resint-waf.radixxuat.com
*.prod.sabre.com
*.thehotelzags.com
*.tsts.sabre.com
be-cms-api.sabrehospitality.com
checkin.superairjet.com
reservations.bucuti.com
weblaprod.avri.as.prod.asc.sabre.com
*.amm.kz.as.cert.asc.sabre.com
*.cert.sabre.com
demo-ls.avro.cert.aws.sabre.com
*.naplesgrande.com
be-integcert.synxis.com
airconnectivity-gui.cert.sabre.com
gol-dcci.prod.sabre.com
*.amm.pg.as.cert.asc.sabre.com
digitalexperience-b2c.voegol.com.br
*.stayaka.com
*.avri.as.prod.asc.sabre.com
*.thecrawfordhotel.com
*.sabre.com
b6-ro-c1.avro.cert.aws.sabre.com
checkin-cert.superairjet.com
digitalexperience-dc.voegol.com.br
*.thewilliamvale.com
pciproxy-uat.sabrepacific.net.au
*.amm.nk.as.cert.asc.sabre.com
imperva.com
*.crp.as.cert.asc.sabre.com
*.synxis.com
airconnectivity-gui.sabre.com
gol-dcci.cert.sabre.com
*.bostonharborhotel.com
*.thedarcyhotel.com
dcci-cert.superairjet.com
shan.ophirtours.co.il
*.rittenhousehotel.com
*.avfo.as.dev.asc.sabre.com
*.avfo.as.prod.asc.sabre.com
b6-ro.avro.cert.aws.sabre.com
g3-ro-c1.avro.cert.aws.sabre.com
*.theoxfordhotel.com
be-euat-p2.synxis.com
praesum.sabretn.net.au
reservations.cheeca.com
*.crestahotels.com
*.downtowngrand.com
*.hotelcommonwealth.com
*.avix.ix-mn.prod.asc.sabre.com
vuelos.aerolineas.com.ar
*.amm.pg.as.prod.asc.sabre.com
*.sabrehospitality.com
digitalexperience-hom-dc.voegol.com.br
be-cms-euat-p2.synxis.com
digitalexperience-stage-b2c.voegol.com.br
*.cert.asc.sabre.com
book.standardhotels.com
*.amm.am.as.cert.asc.sabre.com
*.brasada.com
*.seymourhotels.com
*.therallyhotel.com
*.avix.ix-ws.prod.asc.sabre.com
b2-ro.avro.cert.aws.sabre.com
demo-odm.avro.cert.aws.sabre.com
digitalexperience-hom-b2c.voegol.com.br
hotelphg.com
*.crp.as.prod.asc.sabre.com
checkin-stage.superairjet.com
*.cert.int.sabre.com
bookings.hotelcommonwealth.com
*.themavenhotel.com
be-cms-api-p2.synxis.com
*.amm.jt.as.cert.asc.sabre.com
*.amm.ai.as.prod.asc.sabre.com
*.marbellaclub.com
weblacert.avri.as.cert.asc.sabre.com
webetdev.avix.ix-et.prod.asc.sabre.com
*.clubquartershotels.com
*.devint.int.sabre.com
*.thedraytonhotel.com
*.catbirdhotel.com
*.thebocaraton.com
*.hotelphg.com
*.portolahotel.com
*.puenteromano.com
reservations.tranquilitybay.com
b2-ro-c1.avro.cert.aws.sabre.com
praesum.sabrepacific.net.au
g3-ro.avro.cert.aws.sabre.com
*.amararesort.com
dcci.superairjet.com
*.vietnamairlines.com
reservations.villaflorence.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFFnPlW89np9f/x7MZe
V4XvNJHDYapC4zuWPGtGzD+NASiVEfGH16tlvy1qKPcY/+2vlNuvcI0GkB+wRbdZ
Q8uMnsAmX+8tO8VYYyijA7Lb8/Zb0P0b+a9r0ZDQ62ZhfRemBbyHFFYin3aevNtL
zQt2T4ZGrjDAtX+oqRib+F6ay23rU/20zstfreK4quzlYOCKCqKwhtKGFW2wcrjR
YwpyLI8Oqey7kvxed2BB/yb1VMWJI5It/AOMUuzj/EF3KO1vDGkXvXCdlK4vdhF+
tZHTHYny0rVr71j8VGaakP7Wbw+YV2+l/UtThhbp72dfDd3WgnnhIDEN9HKDcOOv
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2136105567443522657073424360101918916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 17:43:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 08:38:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22857650303242154022883994915102321366104219574997255199939920733658960385185648350708148539357203707351311982349467971826590839346648126056690921834957296082944701441513083216040074023395586197835493960249616490529444326746407522393591489054749964372843374005100006912518040572526224445273394243557730149747977852333322551733242267834504116308835286555935767083801644795581310012788992273527236066868399557863502601096118659708232790344992631272093440874584788452185500699820112737608066749387242563493474914604621261604067636809784976669371153351930195408806860632848354106184557707623954580226442455170106276425487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapatiosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.thelondonwesthollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oda.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificairlines.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20q4resint-waf.radixxuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehotelzags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bucuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblaprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.kz.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-ls.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesgrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-integcert.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrawfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewilliamvale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pciproxy-uat.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.nk.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonharborhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedarcyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shan.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittenhousehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoxfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabretn.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.cheeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crestahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtowngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-mn.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuelos.aerolineas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-stage-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.standardhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.am.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therallyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-ws.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-odm.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themavenhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.jt.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.ai.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblacert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetdev.avix.ix-et.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubquartershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedraytonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portolahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puenteromano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tranquilitybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amararesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villaflorence.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3c132b80298250ae6ba3d2d20ef93a5738071b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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