imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:86:84:f4:74:04:0c:cd:5a:78:26:17:d9:ff:74:8a was issued on by GlobalSign nv-sa.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:86:84:f4:74:04:0c:cd:5a:78:26:17:d9:ff:74:8a
Serial Number (int): 2027692420473075575175045809765840010
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 79:bf:e7:3c:2a:f0:90:d0:d3:3e:5a:48:65:1a:00:76:fa:c1:49:13
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 0f:62:1c:2c:e3:cf:77:30:2c:95:46:f4:c2:66:1c:d8:ab:b7:22:6f
Fingerprint (sha256): 52:4d:bd:b2:d7:b7:29:3f:d5:fd:e7:bd:ea:08:e5:c6:e7:f5:11:f2:87:7f:6c:f7:52:dd:c4:23:ee:0b:d8:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

document-generator.amadeusasia.com
vpay.customsolutions.amadeus.com
airtrade.amadeus.be
*.bws-gateway.amadeusasia.com
docs.amadeus-discover.com
uat.bmcshopping.amadeuses.com
crystalcruises.contextsearch.saas.amadeus.com
prodloymig.frequentflyer.aero
*.script.sca.amadeus.com
gbiservices.bmp.viaamadeus.com
uat.crystalcruises.contextsearch.saas.amadeus.com
uat-jarvis.americas.touchless.amadeus.com
uat.touchless.saas.amadeus.com
airport-companion.azoresairlines.airlines.api.amadeus.com
scripts.customsolutions.amadeus.com
airlineretailing.amadeus.com
airport-companion.lufthansa.airlines.api.amadeus.com
test.airport-companion.airlink.airlines.api.amadeus.com
*.apps.amadeus.fr
airport-companion.airlink.airlines.api.amadeus.com
*.sca.amadeus.com
test.airport-companion.taca.airlines.api.amadeus.com
admin0.flightportal.travel
uat-services.americas.touchless.amadeus.com
*.pre.sca.amadeus.com
wav.ca.amadeus.com
uat.datasync2.amadeuses.com
*.amadeusasia.com
touchless.saas.amadeus.com
uat-tropicalservices.americas.touchless.amadeus.com
*.airport-companion.azoresairlines.airlines.api.amadeus.com
*.contextsearch.saas.amadeus.com
clubmed-portal-services.bespoke.amadeus.com
to.discover-exp.com
airport-companion.taca.airlines.api.amadeus.com
*.api.connect.travelaudience.com
*.script.pre.sca.amadeus.com
online.iraqiairways.com.iq
pilot.crystalcruises.contextsearch.saas.amadeus.com
book.nileair.com
*.saas.amadeus.com
uat.far.amadeuses.com
airport-companion.hawaiianairlines.airlines.api.amadeus.com
*.amadeus.fr
api-des.iraqiairways.com.iq
imperva.com
uat-rosiechatbot.americas.touchless.amadeus.com
uat.americas.touchless.amadeus.com
test.airport-companion.hawaiianairlines.airlines.api.amadeus.com
*.clubmed-portal-services.bespoke.amadeus.com
script.sca.amadeus.com
uat-aerochequeras.americas.touchless.amadeus.com
pp-ssf.amadeus.fr
test.airport-companion.fijiairways.airlines.api.amadeus.com
uat-logviewerplus.americas.touchless.amadeus.com
book.flysas.com
uat.scripts.customsolutions.amadeus.com
yourtrip.flysas.com
wav-digital-4.saas.amadeus.com
uat-touchlessinsight.americas.touchless.amadeus.com
airport-companion.fijiairways.airlines.api.amadeus.com
book.air-austral.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0SDqnZI70Vuu7nMyUYs
8E1H78dy+qDJYojd9IfaQwVWXTLKVanppXow+7+h7IL5sywllFvtXM1wuxmI05A6
4eTKicrgVrkClEtkek2nUpOuOgRUorX1vZFq8vYjkYbTQnjY5TLUf4ya6c4VmlUF
f7fv9tRuNnmYFywna/LcuTI/VnmB3qxoDwpHnHT5yehjUWBr5uaLgi9RG8kL/tPB
KGZAzwmTbpQofTw3lVliQeCNLH5wwh4fBiXxBceaqfX/xzuB0j53rio39YVEyksh
tfmxxYau9ad4ecoK3R79dHpvZcJ/6Fk7Ehc4quC73AZGL8oQ+A1b30BrcjlMSZEN
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2027692420473075575175045809765840010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 08:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 08:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18085863280446212622158884667512787432311377085054366028134309294016246432234968152708133261014381401923060990781934055236957666747921452113852568356209517272548741274745814687895083206067607025908238050998410376389996034197010382562332248156479211783455179083948225845676457988249504147052993563338191124451090836811736100035027298235387630060660363513332126567836955333282449996609948198117887511066906915967210012388883148304840139652806943350857203596085338053626600402207549220351582635171978362109089530315682936468692431933546599311552926028420980794443434593069273106360974846263741110231621870841765959896347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'document-generator.amadeusasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpay.customsolutions.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airtrade.amadeus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bws-gateway.amadeusasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.bmcshopping.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalcruises.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodloymig.frequentflyer.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.script.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbiservices.bmp.viaamadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.crystalcruises.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-jarvis.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.touchless.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.azoresairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripts.customsolutions.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airlineretailing.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.lufthansa.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.airlink.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.amadeus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.airlink.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.taca.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin0.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-services.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav.ca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.datasync2.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeusasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchless.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-tropicalservices.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.azoresairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmed-portal-services.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to.discover-exp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.taca.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.connect.travelaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.script.pre.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.iraqiairways.com.iq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.crystalcruises.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.nileair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.far.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.hawaiianairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-des.iraqiairways.com.iq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-rosiechatbot.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.hawaiianairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubmed-portal-services.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-aerochequeras.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-ssf.amadeus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.fijiairways.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-logviewerplus.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.flysas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scripts.customsolutions.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtrip.flysas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wav-digital-4.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-touchlessinsight.americas.touchless.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.fijiairways.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.air-austral.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79bfe73c2af090d0d33e5a48651a0076fac14913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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