imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:84:7c:b5:10:0b:c2:68:40:eb:af:2d:37:d6:1d:cd was issued on by GlobalSign nv-sa.

With 123 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:84:7c:b5:10:0b:c2:68:40:eb:af:2d:37:d6:1d:cd
Serial Number (int): 2017140545165757412241874110534524365
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0f:43:b2:f9:bc:99:2b:4c:03:a9:7c:ed:36:d3:fa:1a:35:27:1c:e5
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 72:ef:12:c6:89:ec:4f:3b:d2:a8:9e:19:98:2c:dc:ca:09:cb:dc:cb
Fingerprint (sha256): 5a:ae:b7:70:ed:b8:a4:5e:03:cf:9c:99:df:9c:72:9f:c4:90:21:ef:b5:84:ee:d6:d6:ae:56:52:cc:22:7a:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

123

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sixtyhotels.com
test50.sabre.co.il
*.thejewelny.com
booking.yonik.co.il
*.tapatiosprings.com
demo-oda.avro.cert.aws.sabre.com
be-p2.synxis.com
*.theleela.com
test18.sabre.co.il
*.e9.cert.sabre.com
*.tsts.cert.sabre.com
*.avri.as.cert.asc.sabre.com
airconnectivity-gui.int.sabre.com
*.nomadetulum.com
*.parkterracehotel.com
*.pacificairlines.com.vn
20q4resint-waf.radixxuat.com
*.prod.sabre.com
*.thehotelzags.com
*.tsts.sabre.com
be-cms-api.sabrehospitality.com
checkin.superairjet.com
reservations.bucuti.com
weblaprod.avri.as.prod.asc.sabre.com
caw-1s1.cert.sabre.com
*.amm.kz.as.cert.asc.sabre.com
*.cert.sabre.com
demo-ls.avro.cert.aws.sabre.com
*.naplesgrande.com
be-integcert.synxis.com
*.cheeca.com
airconnectivity-gui.cert.sabre.com
gol-dcci.prod.sabre.com
*.amm.pg.as.cert.asc.sabre.com
digitalexperience-b2c.voegol.com.br
*.stayaka.com
*.avri.as.prod.asc.sabre.com
*.thecrawfordhotel.com
*.sabre.com
b6-ro-c1.avro.cert.aws.sabre.com
checkin-cert.superairjet.com
digitalexperience-dc.voegol.com.br
suntours.sabre.co.il
*.thewilliamvale.com
pciproxy-uat.sabrepacific.net.au
*.huttonhotel.com
*.amm.nk.as.cert.asc.sabre.com
sabre360.sabre.co.il
imperva.com
webguru.lognet-systems.com
*.crp.as.cert.asc.sabre.com
*.synxis.com
airconnectivity-gui.sabre.com
gol-dcci.cert.sabre.com
*.bostonharborhotel.com
*.thedarcyhotel.com
dcci-cert.superairjet.com
shan.ophirtours.co.il
*.rittenhousehotel.com
*.avfo.as.dev.asc.sabre.com
*.avfo.as.prod.asc.sabre.com
b6-ro.avro.cert.aws.sabre.com
*.tranquilitybay.com
test.sabre.co.il
g3-ro-c1.avro.cert.aws.sabre.com
*.theoxfordhotel.com
be-euat-p2.synxis.com
praesum.sabretn.net.au
*.crestahotels.com
*.downtowngrand.com
*.villaflorence.com
*.hotelcommonwealth.com
asdc5.dev.aws.sabrenow.com
*.avix.ix-mn.prod.asc.sabre.com
vuelos.aerolineas.com.ar
*.amm.pg.as.prod.asc.sabre.com
*.sabrehospitality.com
digitalexperience-hom-dc.voegol.com.br
be-cms-euat-p2.synxis.com
digitalexperience-stage-b2c.voegol.com.br
book.standardhotels.com
*.amm.am.as.cert.asc.sabre.com
*.brasada.com
*.seymourhotels.com
*.therallyhotel.com
*.avix.ix-ws.prod.asc.sabre.com
b2-ro.avro.cert.aws.sabre.com
demo-odm.avro.cert.aws.sabre.com
*.thelondonwesthollywood.com
digitalexperience-hom-b2c.voegol.com.br
hotelphg.com
*.crp.as.prod.asc.sabre.com
checkin-stage.superairjet.com
*.cert.int.sabre.com
bookings.hotelcommonwealth.com
*.themavenhotel.com
be-cms-api-p2.synxis.com
*.amm.jt.as.cert.asc.sabre.com
*.angadartshotel.com
*.amm.ai.as.prod.asc.sabre.com
*.marbellaclub.com
weblacert.avri.as.cert.asc.sabre.com
webetdev.avix.ix-et.prod.asc.sabre.com
ladm360.sabre.co.il
*.clubquartershotels.com
*.devint.int.sabre.com
*.thedraytonhotel.com
*.catbirdhotel.com
*.thebocaraton.com
*.hotelphg.com
*.portolahotel.com
*.puenteromano.com
*.gisborough-hall.com
*.betulum.com
reservations.hotel-icon.com
reserve.sanderling-resort.com
b2-ro-c1.avro.cert.aws.sabre.com
praesum.sabrepacific.net.au
g3-ro.avro.cert.aws.sabre.com
ey.avfo.as.dev.asc.sabre.com
*.amararesort.com
dcci.superairjet.com
*.vietnamairlines.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvFE0XkBz9uw2FeqUKPn
knHmEW6gdT/vM8xiknxOayLpF7YSCz96A4djyHNe5V+8L9PsmtFBGl4fwQesD7Jz
25+Pq3pyrDjjPe1NJcNadOhnVhDftFbZbWx+QygG/OU5WSV/k37boIyrRfZNxIwH
91aBCNFBn0/hLDNYlBvys9b7eGwRoP1yKOiPi8hTJs2fGqszM61JaEVUiQRPd5j3
l/o1Sb8e/gcXpuvHj7fQhUlheCw9qI0tJ8EJc/HpC+crQEwvPha6hH0ZZigmmoMa
mANR7BDOdZw1+me9wiVw3IF5m0PXmBAtE3c6AjjcvLMmzMcR6l+tWldiEcpdXKuR
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2017140545165757412241874110534524365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 20:32:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-19 11:27:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18549766615052400738795834795995501202041094488737296241996628831533305888506216638654273882978462942571478001751437599822545940865372815973503039493253010382451294630802892357262635501998539496901673417578993588626184678180563861472476701250017748809461189453145262353278828167009426831036376191418389623496314552076827714750273576936872906386053866031815103516453337701580899700644984543277006721350142695826908362104364191949225958117314106619915935287316185842696454150892337036153763996831639590978029229819143794978012505244002428279030309513897370600145612754863012256157130616490969424124100526827890451124697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test50.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thejewelny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.yonik.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapatiosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oda.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test18.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomadetulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkterracehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificairlines.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20q4resint-waf.radixxuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehotelzags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bucuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblaprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-1s1.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.kz.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-ls.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesgrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-integcert.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrawfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntours.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewilliamvale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pciproxy-uat.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huttonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.nk.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webguru.lognet-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonharborhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedarcyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shan.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittenhousehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tranquilitybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoxfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabretn.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crestahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtowngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villaflorence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdc5.dev.aws.sabrenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-mn.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuelos.aerolineas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-stage-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.standardhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.am.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therallyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-ws.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-odm.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelondonwesthollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themavenhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.jt.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angadartshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.ai.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblacert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetdev.avix.ix-et.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladm360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubquartershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedraytonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portolahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puenteromano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisborough-hall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotel-icon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sanderling-resort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amararesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f43b2f9bc992b4c03a97ced36d3fa1a35271ce5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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