imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:d1:6c:cc:e8:c3:53:d0:23:96:00:cf:18:9c:a6:be was issued on by GlobalSign nv-sa.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d1:6c:cc:e8:c3:53:d0:23:96:00:cf:18:9c:a6:be
Serial Number (int): 2416624774037700746879328251853711038
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 86:75:14:24:22:76:d9:2c:e9:d2:10:36:34:a4:e2:26:c8:00:53:f7
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 9a:02:9c:6d:47:fc:a4:66:ad:56:cc:ef:63:18:c8:1e:18:3e:ae:74
Fingerprint (sha256): 5a:b8:51:0d:02:4f:cc:82:d5:2e:43:74:fd:49:7f:ed:fb:60:64:1d:6f:65:c4:e0:92:9f:10:70:2f:59:45:8d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.covid19-cas.nhs.uk
*.plymouth.nhs.uk
*.norfolkcommunityhealthandcare.nhs.uk
*.continuityofcarer-tools.nhs.uk
*.royalmarsden.nhs.uk
frimleyhealthcharity.org
continuityofcarer-tools.nhs.uk
*.dhc.nhs.uk
*.nwas.nhs.uk
woundcarelite.kentcht.nhs.uk
www.cypmh-model.nhs.uk
*.slam-services.org
bradfordhospitals.nhs.uk
healthgis.nhs.uk
*.ncic.nhs.uk
cypmh-model.nhs.uk
*.scwcsu.nhs.uk
*.lnwh.nhs.uk
frimleyhealthcareercentre.org.uk
*.rwt.nhs.uk
*.frimleyhealthcharity.org
*.yorkhospitals.nhs.uk
*.bdct.nhs.uk
*.imperial.nhs.uk
lpft.nhs.uk
*.frimleyparkhospital.co.uk
*.rwh-tr.nhs.uk
www.shropscommunityhealth.nhs.uk
ncic.nhs.uk
*.oxleas.nhs.uk
*.secureboundary.nhs.uk
*.frimleyhealth.nhs.uk
*.nhsla.com
*.slam.nhs.uk
frimleyparkhospital.co.uk
*.bthft.nhs.uk
pulsesite-sensordata.kentcht.nhs.uk
*.healthgis.nhs.uk
*.plymouthhospitals.nhs.uk
*.chesterfieldroyal.nhs.uk
*.nhsbt.nhs.uk
*.lpft.nhs.uk
*.secamb.nhs.uk
*.yas.nhs.uk
*.kentcht.nhs.uk
mtw.nhs.uk
*.lthtr.nhs.uk
imperva.com
*.mtw.nhs.uk
*.rmh.nhs.uk
plymouthhospitals.nhs.uk
*.bradfordhospitals.nhs.uk
*.england.nhs.uk
*.ice-ni.nnuh.nhs.uk
webcentre-sch.smartmedia.net
*.thh.nhs.uk
covid19-cas.nhs.uk
*.frimleyhealthcareercentre.org.uk
rmmatters.rmh.nhs.uk
norfolkcommunityhealthandcare.nhs.uk
*.cypmh-model.nhs.uk
lnwh.nhs.uk
*.shropcom.nhs.uk
yastransfers.yas.nhs.uk
scwcsu.nhs.uk
thh.nhs.uk
bdct.nhs.uk
*.uclh.nhs.uk
shropscommunityhealth.nhs.uk
training-sch.smartmedia.net

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjS5I3ib3hyqnbgv043c
FT2AbGCHwsDFKsBQfZPfpMerdgLNfXIREtlJYNOkB0bC6BbFvYrRDta4lgSqqIbH
caArw26boxpt1r5NTWs9fhpnyji3PohDhqGTG5HwRC0lLIJaakD7y1aq91A4H1z4
CSUQThviXI1p7ZRMrHD4o0m6yElXY9KZi8z0o995sTTV7p692YKxqqemONKfV4Ik
fCtSFiqL1W8RbdY2vZWaHctPuBTsfEdqml857VM1E4fnQIR6dMPHE8G3yRsH4V5R
0N2SNpSu8leXIOAWHm/MKLwVh8XNvJWx8Bi7hKnetqGHeype9ABHT7K9LQYeHCjm
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2416624774037700746879328251853711038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 13:15:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 13:15:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19466697742446248639977743603189351919461433262680837635580370918968811312677844582769186565599728230365899720687954026921754216587064760092012190225108143941965276265416618946450238861554671236332389521882993974315895869879567025453299292896607154557038012260897331552642242984296788917897652041200613112622261103549591290104006312102888422449009032665750682621341911461621094739425375167012567121498192194773394501074934429260813367557671326353980278108130683749375987875367867424967495444502871499211541185540151179160366800238226409871460894784659221175761138451242356591096924715647032020834460562273524983064293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmarsden.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woundcarelite.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam-services.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperial.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwh-tr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxleas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secureboundary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesite-sensordata.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chesterfieldroyal.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsbt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secamb.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lthtr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ice-ni.nnuh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcentre-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmmatters.rmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shropcom.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yastransfers.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							867514242276d92ce9d2103634a4e226c80053f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b19ba42ec000004030047304502201cdcf7153231e574d3aa84b543fd9621ec10a4442174341d594a642cbb806339022100990ae66241035959c4dabf56b3f8e6f1ac92c65856c13d602b42113e11616159007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b19ba44310000040300473045022100f729ed70556c93c0db79c32217cc6976ee9cc00826190c5ab2077edccbd2da8e02200c2f18ab27a67251db148b3d7cdce24d744473dc6a4899d4e285cb8e01189e3700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b19ba4494000004030046304402202c31529dc3862265eaada389fa262b2f133aad1e3d7d1c67a2338f156338e67602201eb502a557f7b24cd914e45cbd031448a4bbcc5e35627f32e12b0a2d8450b222
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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