imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:aa:82:22:0f:05:1f:7a:ff:a6:aa:cd:df:a7:fc:c0 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:aa:82:22:0f:05:1f:7a:ff:a6:aa:cd:df:a7:fc:c0
Serial Number (int): 2214557873390305210600177014724361408
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c7:b1:d2:bc:07:0a:2a:60:ad:90:8c:70:ed:d3:21:58:27:e6:1d:98
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 36:bd:ce:4f:96:28:dd:96:d2:f9:71:53:a5:ed:5a:31:c8:25:81:44
Fingerprint (sha256): 53:65:c8:0c:7e:38:ae:96:c0:27:17:9b:c7:aa:02:38:c5:22:31:6e:af:48:d3:79:63:11:27:b0:c6:e8:98:d0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

layahealthcare.ie
*.aigportal.de
*.uat.aiglife.co.uk
*.americanhome.co.jp
*.comfortsureplan.com
*.aiglossandtheft.com
*.webservices.servicenetsecure.com
*.layahealthcare.ie
*.serviceplancenter.com
*.aigdirect.com
layalifeinsurance.ie
*.it1.aiglife.co.uk
techmark.co.jp
*.aigdirectdigital.com
*.aig.co.jp
*.aigag.com
aiguswarranty.com
serviceplancenter.com
*.matrixdirect.com
*.valic.com
americangeneraltermlife.com
hdhvacwarranty.com
*.cropriskservices.com
*.sunamerica.com
www-443.aig.co.jp
comfortsureplan.com
*.dmp.aig.com
americanhome-morph.jp
*.agsourcetrac.com
*.aig.com.hk
*.myserviceplan.com
*.comfortpromise.com
*.aglife.com
*.hdhvacwarranty.com
*.wwiprate.com
*.layalifeinsurance.ie
americanhome-digital.jp
*.hip8api.aig.eu
mbl.aiu.co.jp
*.aig.com.mx
*.group.aiglife.co.uk
www.techmark.co.jp
*.aig.com.my
*.demo.aiglife.co.uk
climateshieldcomplete.com
*.aig.com
*.api.aig.com
servicenet.com
imperva.com
*.aiguswarranty.com
*.pci.api.aig.com
*.servicenethvacregistration.com
www2.aig.co.jp
*.groupprs.aiglife.co.uk
aigcorporate.com
*.americangeneraltermlife.com
servicenethvacregistration.com
aigdirectdigital.com
*.aiginsurance.com
aigtheftandloss.com
*.americangeneral.com
*.westernworld.com
agsourcetrac.com
myretirementmanager.com
*.mechanicalcontractorschoice.com
*.contractorspreferred.com
*.sta.aiglife.co.uk
*.www.aiglife.co.uk
servicenetsecure.com
*.mycomfortshield.com
www-510.aig.co.jp
*.myretirementmanager.com
*.st1.aiglife.co.uk
*.validusholdings.com
contractorspreferred.com
*.pt1.aiglife.co.uk
*.uat.aigdirect.com
aiginsurance.com
*.snapplerefund.com
*.aig.com.ec
*.advisorsolutionscenter.com
mechanicalcontractorschoice.com
*.www-502.aig.co.jp
www-502.aig.co.jp
snapplerefund.com
www5.fujikasai.co.jp
aigdirect.com
mycomfortshield.com
valic.com
*.aig.com.tw
*.aigcorporate.com
www-434.aig.co.jp
*.aiglife.co.uk
*.americanhome-morph.jp
*.talbotuw.com
*.yourserviceplan.com
*.vfis.com
*.servicenetsecure.com
myserviceplan.com
*.hip12api.aig.com
aigportal.de
comfortpromise.com
www-465.aig.co.jp
*.aig.com.br
*.st2.aiglife.co.uk
*.aigseguros.com.br
*.aig.com.sg
*.aigtheftandloss.com
*.americanhome-digital.jp
*.developers.aig.com
aiglossandtheft.com
*.cloud.api.aig.com
*.climateshieldcomplete.com
*.servicenet.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLeWJIAU54JZ+RbWYghK
D7YafrjZ+SPnqj+yVqiCyeni9RsOjneMyW7bRhStevin1Wov4M+X3ExYMF8ftJGZ
eVyruNbVoWLUQZCTmG05S3HMC9t9mxJvUJe5be5xh8M6/1xoH68CFH9FbC/doCu2
HUj7p2xzn9U6ugEAqEH9rk77AUy9Aqz9/Ao991jgR9syqSVthNeIB3a2dUi6TCav
iO3xJVYl4F+FUjKzBSMaa7lNTIwHYhnpkNtahwlCREeUmHXTaY4drI8kO+uOJW0I
ta+dOcWjE917XZwi1VtVN5z8ePwkSNFLyr9xcreDnad0XHCXPng/ba9X+hxFheNm
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2214557873390305210600177014724361408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 15:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 06:20:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19278752229349164684934033692154994736824657878259934137802327000868080027875307486969378564019157960393700750787974404109982781133892349390384228700804312308001931260463530016524718632072656601784494139915155274351008349132251300577856689125370958081309994854371815939624478904562060912692295962846350233365744009141522553419125304929705566519491108730481974172153360495296970209783395924946828938885129142641878290957883874367073103152132470968579655609771122693689832832903845468605319510427974387802568321700521178167979873681167706553599221477900722684401206447951598635996937764969151331187656673886410482345487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2357 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webservices.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layahealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceplancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cropriskservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-443.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortsureplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmp.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdhvacwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwiprate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.layalifeinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanhome-digital.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip8api.aig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbl.aiu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.group.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techmark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiguswarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pci.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupprs.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americangeneraltermlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenethvacregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirectdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americangeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsourcetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sta.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-510.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myretirementmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.validusholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractorspreferred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pt1.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advisorsolutionscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalcontractorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-502.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapplerefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.fujikasai.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycomfortshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-434.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-morph.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talbotuw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicenetsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myserviceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hip12api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-465.aig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st2.aiglife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aig.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aigtheftandloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanhome-digital.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developers.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglossandtheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.api.aig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climateshieldcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicenet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7b1d2bc070a2a60ad908c70edd3215827e61d98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a927ad389a944c359adf51772493e37ec879efbe243c79f053532b0b95934bf50e8399c2c91e8275ecba6ab7b4328686a596b4c7305d18483af5c9962a730e578fa5d6fff5e8676470bb842043396240abc2a68b2cb1a7416f2d69fc872ce1db4f0add6e6a1e60f91e5261e3b0c9bd6e6ba478a91f16bde0c02327b09f131a095b427dd6016e88df42a7cac2f78a628ff17e399f5cab9da5669f8013671ceb9b6d8adc8137a9252aa270bf77a2666c5d00a33c9d6328e93f164897f1b5ac75b597af278e571156b3f3020f68cfc1f260f4b4f2c78a8ac38376057c6d51110f81dd7afd259f3a2ac5a3f27ca8539d0230197042bae7cfa3abe4133d30bb20f6d