imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:fb:ea:2b:83:07:ef:89:8f:c6:ef:a9:0f:a8:7f:5f was issued on by GlobalSign nv-sa.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:fb:ea:2b:83:07:ef:89:8f:c6:ef:a9:0f:a8:7f:5f
Serial Number (int): 2637244038487530162397763670892904287
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1a:8f:94:6c:6a:de:9d:79:71:6d:2a:2e:c2:c4:7f:0e:e4:c2:79:99
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): f7:79:15:a7:7f:5b:f8:e7:27:de:b6:6f:00:ef:ff:b9:88:16:c8:28
Fingerprint (sha256): 51:b0:75:a2:8e:9b:d2:ef:4e:15:ce:7d:3f:26:57:4c:03:bf:8a:60:12:0c:07:bd:7f:bc:45:26:42:c7:33:88

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rocks-ext.qa.holcim.digital
now.lafarge.com
zonda-eu-qa.holcim.digital
rmx-console-rmx-qa.ext.ocp.qa.lafargeholcim-go.com
ssolh.lhinside.com
geocycle.live
api.hssp.qa.holcim.digital
rocks-ext.holcim.digital
myorder-api-qa.holcim.digital
zonda-eu.holcim.digital
zonda-mea-qa.holcim.digital
now.neueplastrec.ch
zonda-umg-eu.ext.ocp.qa.lafargeholcim-go.com
api.hssp.dev.holcim.digital
td.holcim.digital
geocycle.holcim.digital
now.holcim.ch
api.hssp.holcim.digital
now.holcim.com
lhim.ea.holcim.net
filebeat-meraki-qa.holcim.digital
imperva.com
geocycle.io
heim.ea.holcim.net
qa.now.geocycle.com
rmxd-integration-rmxd-prod.ext.ocp.prod.lafargeholcim-go.com
filebeat-meraki-dev.holcim.digital
www.mygeocycle.com
www.geocycle.io
zonda-mea.holcim.digital
afrportaldev.holcim.digital
rocks-ext.ua.holcim.digital
fireq-web-fireq-prod.ext.ocp.prod.lafargeholcim-go.com
now-qa-lafarge.holcim.digital
zonda-eu-qr.ext.ocp.qa.lafargeholcim-go.com
now-qa-eu.holcim.com
heim-qa.ea.holcim.net
rmx-console-rmx-prod.apps.lfgh.ocpqa.lafargeholcim-go.com
fireq-mobile-webapi-fireq-prod.ext.ocp.prod.lafargeholcim-go.com
rmxd-integration-rmxd-qa.ext.ocp.qa.lafargeholcim-go.com
www.geocycle.live
rmxd-integration-rmxd-ua.ext.ocp.qa.lafargeholcim-go.com
filebeat-meraki.holcim.digital
lhim-qa.ea.holcim.net
mygeocycle.com
td-qa.holcim.digital
now.geocycle.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAUOsHd+UmO6rC42q7By
fjWjL8GbrO4PW5TXfCt3+Ub/ZdQK8E1HwVzmFhUGdocpJnMFXrxfL57JuvQWEtSq
NLDIN2iKwU5EmyHm5K3mNhL/5nuapkeFhTRtF2bJ+Xcc+q1GM0ywPSBnqrmg8nzr
zcs5XC3hU/gSsIPEcr1u8GYekBsFXkniJDumoBhKhLTm0aGqAF9P5/CGrYYIwMD7
+abRIhBMNtqM0RTBiplYGPR3J7lKucGCCy7Vqs/Ul/mkRK0b2RHyONpNgktOpBOl
rYtBLlLhksYUddAAJwJY/kJsIcV+VGnFGW/UfhIJ9M5yTCioMiS+eNNFrPan1W7F
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2637244038487530162397763670892904287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 14:41:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-21 14:41:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16665950142629635525091704188802669692016421631439665195726716966609159914122549701818548582263270363511198434583289056667489984866708563999150331386432464179542157732211203912374363784452094344634226982222749380458978960139244627910419668716250477672324710185625454483019998529060650652085791051013858417871298842382523741233159940267865011577411162277105663635260333198401522703332912880680142702504652707054946859921694509113065381178130262163393928400896584385270228744564264618049461608479724710024114570740503309008948301287084678362513103915500919378118791536371071541115561278113753589271996448383615617647911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocks-ext.qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.lafarge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx-console-rmx-qa.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssolh.lhinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocks-ext.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myorder-api-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-mea-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.neueplastrec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-umg-eu.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.dev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.holcim.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhim.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heim.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.now.geocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki-dev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygeocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocycle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-mea.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrportaldev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocks-ext.ua.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireq-web-fireq-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now-qa-lafarge.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu-qr.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now-qa-eu.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heim-qa.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx-console-rmx-prod.apps.lfgh.ocpqa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireq-mobile-webapi-fireq-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-qa.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocycle.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-ua.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhim-qa.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygeocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.geocycle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a8f946c6ade9d79716d2a2ec2c47f0ee4c27999
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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