imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:ed:41:a3:2e:6e:52:bb:79:c6:c7:9c:2e:9c:35:30 was issued on by GlobalSign nv-sa.

With 123 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ed:41:a3:2e:6e:52:bb:79:c6:c7:9c:2e:9c:35:30
Serial Number (int): 2561133636442080188837258872043091248
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 56:49:07:32:ed:06:b3:34:c8:e2:5f:76:f6:6a:95:1c:9c:eb:f3:fc
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): b6:1b:b6:9f:32:df:e9:da:14:ee:e4:91:56:b8:2a:88:1c:83:9c:54
Fingerprint (sha256): 5c:51:bf:49:54:95:cd:ef:5d:e6:0b:aa:4b:cc:be:0c:ad:dc:4d:b0:27:fe:e0:3d:2a:e8:5a:20:32:89:b1:36

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

123

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.psaengineering.com
printerrepairnyc.com
ramseynotes.com
plattevalleyprecast.com
www.greatlakesfilmfest.com
recsonthewall.com
www.liobesitysurgery.com
csmpc.com
www.advocacyforeducation.org
www.fifthwheel.com
intothewildwego.photography
alpharepservice.com
torontocodingbootcamp.com
woodgrillbuffetva.com
claraobrien.com
advocacyforeducation.org
ipa-llc.com
marktkerrin.com
theearthbeneathyourfeet.com
greatlakesfilmfest.com
www.remodelexec.com
www.enjoythemournes.com
www.garbylaw.com
kobincpa.net
thelabelguy.com
www.plexusmarketing.com
burkhardconsulting.com
www.gsministries.org
www.htesgnv.org
www.kranzelshobbies.com
bigideas4littlescholars.com
bphchem.com
rdshanklin.com
www.ipa-llc.com
www.plattevalleyprecast.com
www.sorayayoga.com
chaseinkpr.com
houseofgjertsen.info
www.advancedbsys.com
kranzelshobbies.com
fifthwheel.com
moshimoshi.fun
www.remtechsystems.com
www.therobyngraham.com
www.cornwallalliance.org
www.coachcathysboxes.com
imperva.com
www.blackcannabismagazine.com
www.lunaspas.com
www.egybeautyafrica.com
erijams.com
www.bigideas4littlescholars.com
www.navias.ae
www.aprimaeye.com
dcshortsfest.com
refinedng.com
www.alpharepservice.com
www.audreyalbafilms.com
www.chipspace.it
therobyngraham.com
gsministries.org
www.erijams.com
www.burkhardconsulting.com
www.pagaslease.com
liobesitysurgery.com
www.ramseynotes.com
judgmentrecoverytraining.online
www.chaseinkpr.com
www.printerrepairnyc.com
www.bphchem.com
blackcannabismagazine.com
www.moshimoshi.fun
breakfast-menus.com
www.acchs.edu
www.oursimplegracioushome.com
lunaspas.com
therapiemassagemaidenhead.com
sorayayoga.com
remodelexec.com
www.thelabelguy.com
www.808cleanups.org
malivis.com
htesgnv.org
www.judgmentrecoverytraining.online
www.hybridlynx.com
printerrepairservice.com
www.marktkerrin.com
elencino.com.mx
www.woodgrillbuffetva.com
www.therapiemassagemaidenhead.com
enjoythemournes.com
www.recsonthewall.com
plexusmarketing.com
advancedbsys.com
www.malivis.com
www.dcshortsfest.com
www.houseofgjertsen.info
www.magpiehill.org
www.printerrepairservice.com
www.torontocodingbootcamp.com
remtechsystems.com
www.breakfast-menus.com
hybridlynx.com
808cleanups.org
www.refinedng.com
www.theearthbeneathyourfeet.com
garbylaw.com
www.csmpc.com
magpiehill.org
egybeautyafrica.com
www.kobincpa.net
www.intothewildwego.photography
psaengineering.com
chipspace.it
navias.ae
audreyalbafilms.com
www.rdshanklin.com
oursimplegracioushome.com
aprimaeye.com
www.claraobrien.com
www.elencino.com.mx
acchs.edu
cornwallalliance.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg+BUuX+hzE1qRka33+a
Rbp6xFktQ99en2oqEmlGi2eKoEIs5szH7nWHUhn5JdxF024gRO1pE8tOjaZzsSbV
Z5QH5jQMb5ww/h2bVrDbyLxDKxECXAFGTQPw4BINOAUCZRNxwvHJq/2tyClzCSdI
xFOfQ5Bw+eWBdK8Ci/qSwLkP84HjBn6XIUnHeB4HG+CotfdBgxLe3hLNMrKNix+j
ZTj8lYlfV1eQQQlweR5+l8w8UdkZDrkM2I2OKLhHj7enB2Ttyul/Aa3CMoqRnmXW
IOStSy1gTsBqUiKFFQEKPYLHnFIoZyX96k6NtiT5StCLMaIqntMRAqwH3oYfCXoe
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2561133636442080188837258872043091248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 13:55:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 13:55:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19448344849647635897464376778153322877034745494765066348371220595851649326953665208104751269898503403957665830016566709789649363862497063634694016218699910550512689541807667699716685653167928416649675645924486976734223801838093804578198588797495818037205969301319127678983857821209522053688944650068570036464255115653796187289302385497648570377805488832352954413284316443390028571363609381769947943634149434479277384449884349187471232440752580125247701502092013518811172292183881814867611324051393328232761518462701584819102006039431842133731115288959269783528008634242306469026508819498477744951605800582968015199967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2629 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printerrepairnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramseynotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plattevalleyprecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatlakesfilmfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recsonthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liobesitysurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advocacyforeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fifthwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothewildwego.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpharepservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontocodingbootcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodgrillbuffetva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claraobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacyforeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipa-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marktkerrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theearthbeneathyourfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakesfilmfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remodelexec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoythemournes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garbylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kobincpa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelabelguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plexusmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkhardconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htesgnv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kranzelshobbies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigideas4littlescholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bphchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdshanklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipa-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plattevalleyprecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorayayoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaseinkpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseofgjertsen.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedbsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kranzelshobbies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifthwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moshimoshi.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remtechsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therobyngraham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coachcathysboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackcannabismagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunaspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egybeautyafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erijams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigideas4littlescholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navias.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprimaeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcshortsfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinedng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpharepservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audreyalbafilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chipspace.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therobyngraham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erijams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkhardconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagaslease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liobesitysurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramseynotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judgmentrecoverytraining.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaseinkpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printerrepairnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bphchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcannabismagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moshimoshi.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakfast-menus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acchs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oursimplegracioushome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunaspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapiemassagemaidenhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorayayoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remodelexec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelabelguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.808cleanups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htesgnv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judgmentrecoverytraining.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hybridlynx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printerrepairservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marktkerrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elencino.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodgrillbuffetva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therapiemassagemaidenhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enjoythemournes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recsonthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plexusmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedbsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcshortsfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houseofgjertsen.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpiehill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printerrepairservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torontocodingbootcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remtechsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakfast-menus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybridlynx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '808cleanups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refinedng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theearthbeneathyourfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garbylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csmpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpiehill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egybeautyafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kobincpa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothewildwego.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chipspace.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navias.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audreyalbafilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdshanklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oursimplegracioushome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprimaeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claraobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elencino.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acchs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallalliance.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56490732ed06b334c8e25f76f66a951c9cebf3fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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