imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:bf:18:96:a2:36:93:61:a6:6c:f2:80:a9:16:f2:6e was issued on by GlobalSign nv-sa.

With 146 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bf:18:96:a2:36:93:61:a6:6c:f2:80:a9:16:f2:6e
Serial Number (int): 2321455408022482304210420263493759598
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 60:2f:56:b9:f0:d2:0e:0d:25:38:59:3d:be:de:81:03:6b:2e:d0:06
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 1e:ba:64:dd:08:af:b7:ab:2b:cd:e1:b5:67:af:5f:7a:d9:46:e2:b5
Fingerprint (sha256): 5d:2c:42:65:3e:57:65:9c:64:3e:bd:a4:d7:8f:7d:ba:f6:6a:67:94:d0:23:1f:c5:7d:cc:b3:7a:31:29:d2:58

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

146

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

solutionsnavigator.com
*.shoppertraksucks.com
simplexfiredetection.com
*.infrastructure.jci.com
ecom-qa-na.com
*.easternsheetmetal.com
*.simplexfiredetection.com
r102estimatoremea.com
ecom-dev-yn1.com
atyourservice-hr-payroll.com
fireclass.it
*.wotsecurity.com
*.campaign-stg.hitachiaircon.com
johnsoncontrols-mondial.com
wsjsociety.com
*.r102estimatoremea.com
dgatprogram.com
*.eeforum.net
*.adtsmarthome.co.uk
*.redwolf.net.nz
*.go.solutions.johnsoncontrols.com
*.mmcarnot.com
*.tycofs.com
*.ccureusergroup.com
*.ecom-dev-yn.com
*.ecom-qa-na.com
*.shoppertrac.com
*.shrinkindex.sensormatic.com
*.adt.ie
*.ecom-test-yn.com
*.sabroe.co.uk
*.ukarcdmz.com
adtsmarthome.co.uk
ccureusergroup.com
*.jci.flowis.com
*.mzxtechnology.com
shoppertraksux.com
*.jciarabia.com
jcibeta.com
onlinetechxchange.com
*.ecom-dev-yn1.com
*.ga.jci.com
securitysat.cl
adt.ie
johnsoncontrols.com.eg
shoppertrac.com
*.partscenterapi.jci.com
*.yorkinnovation.com
ntsecurity.uk
*.fireclass.co.uk
*.airbear.com
*.news.jcimaxprogram.com
jch-channelhub.com
mmcarnot.com
jcihub.com
*.jcihost.com
imperva.com
johnsoncontrols.ie
*.sterigenics.fortworth1.johnsoncontrols.com
shoppertraksucks.com
*.cloudvue.io
carnotrefrigeration.com
*.adtchile.cl
*.rescueair.com
*.solutionsnavigator.com
*.sensormatic-rec.com
*.johnsoncontrols-brasil.com
*.wsjsociety.com
logix-controls.com
ecom-test-yn.com
sensormatic-rec.com
*.shoppertrack-rct.com
*.shoppertrak.com
*.mmrefrigeration.com
jciarabia.com
*.campaign.hitachiaircon.com
smaas-sensormatic.com
jcipat.com
*.jcipat.com
*.infuzion.sensormatic.com
*.jcitraininginstitute.com
*.shoppertrac-rct.com
*.hvacnavigator.com
*.gstlab.sensormatic.com
rescueair.com
*.smaas-sensormatic.com
*.atyourservice-hr-payroll.com
*.securitysat.cl
ecom-dev-yn2.com
jcihost.com
*.tycofireandsecurity.com.au
*.fireclass.it
shoppertrack-rct.com
tempered.io
*.smartvue.com
*.ntsecurity.uk
*.solutions.jci.com
*.gordonbrothers.com.au
airbear.com
mmrefrigeration.com
*.autocall.com
jcimaxprogram.com
*.tycomonitor.com
*.jch-channelhub.com
*.hitachi-airconditioning.hu
mzxtechnology.com
tyco.ca
*.dgatprogram.com
*.johnsoncontrols.ie
wotsecurity.com
*.uk.jci.com
adtchile.cl
*.shoppertraksux.com
yorkinnovation.com
*.jcimaxprogram.com
*.tyco.ca
*.synergy.sensormatic.com
redwolf.net.nz
gordonbrothers.com.au
*.ecom-dev-yn2.com
*.jcihub.com
ecom-dev-yn.com
smartvue.com
*.channelhub.jch-marketingcenter.com
*.membercenter.americandynamics.net
hitachi-airconditioning.hu
*.moresites.sensormatic.com
eeforum.net
*.logix-controls.com
cloudvue.io
*.carnotrefrigeration.com
*.jcibeta.com
*.staging.channelhub.jch-marketingcenter.com
*.us.jci.com
3otec.com
shoppertrac-rct.com
*.johnsoncontrols.com.eg
*.onlinetechxchange.com
*.johnsoncontrols-mondial.com
jcitraininginstitute.com
sabroe.co.uk
*.3otec.com
*.tempered.io
*.testkan.tycois.com
hvacnavigator.com
*.tyco.be

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIISAjCCEOqgAwIBAgIQAb8YlqI2k2GmbPKAqRbybjANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEw
MjUxMTE4NDNaFw0yNDA0MjIxMTE4NDNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi4OvQiN6TUmwWosZ/si
npO+eesDtP2T89+9lyfVNFznGdmHaXA6IluJxvybO3fB63x1InRynH8m+C0q1OPY
gDjXrt7ajoWX+nkiEvejoHev26IfRXMyTmeRa+1wWYiyAPz23IFjefucIekrBsYo
6Iu7piVWzSTlhsX6WpKhzN9fOqaQ5gs5wkLDsUMUqakxUVmfD7s6woxY7vUNRAup
/0sQthx0jaDCKbwLpbUCGHWJZonaRIpIDQFBL1lIXwGgg+RagIrPNndC6DHe0end
uO+2DAAFkUFqGtfsS7pHZJ54AH6HMRGMMKqc0k2ttpwMEyVptRuZnBiYoEsmx3L9
/QIDAQABo4IPCDCCDwQwggu8BgNVHREEgguzMIILr4IWc29sdXRpb25zbmF2aWdh
dG9yLmNvbYIWKi5zaG9wcGVydHJha3N1Y2tzLmNvbYIYc2ltcGxleGZpcmVkZXRl
Y3Rpb24uY29tghgqLmluZnJhc3RydWN0dXJlLmpjaS5jb22CDmVjb20tcWEtbmEu
Y29tghcqLmVhc3Rlcm5zaGVldG1ldGFsLmNvbYIaKi5zaW1wbGV4ZmlyZWRldGVj
dGlvbi5jb22CFXIxMDJlc3RpbWF0b3JlbWVhLmNvbYIQZWNvbS1kZXYteW4xLmNv
bYIcYXR5b3Vyc2VydmljZS1oci1wYXlyb2xsLmNvbYIMZmlyZWNsYXNzLml0ghEq
LndvdHNlY3VyaXR5LmNvbYIgKi5jYW1wYWlnbi1zdGcuaGl0YWNoaWFpcmNvbi5j
b22CG2pvaG5zb25jb250cm9scy1tb25kaWFsLmNvbYIOd3Nqc29jaWV0eS5jb22C
FyoucjEwMmVzdGltYXRvcmVtZWEuY29tgg9kZ2F0cHJvZ3JhbS5jb22CDSouZWVm
b3J1bS5uZXSCFCouYWR0c21hcnRob21lLmNvLnVrghAqLnJlZHdvbGYubmV0Lm56
giIqLmdvLnNvbHV0aW9ucy5qb2huc29uY29udHJvbHMuY29tgg4qLm1tY2Fybm90
LmNvbYIMKi50eWNvZnMuY29tghQqLmNjdXJldXNlcmdyb3VwLmNvbYIRKi5lY29t
LWRldi15bi5jb22CECouZWNvbS1xYS1uYS5jb22CESouc2hvcHBlcnRyYWMuY29t
gh0qLnNocmlua2luZGV4LnNlbnNvcm1hdGljLmNvbYIIKi5hZHQuaWWCEiouZWNv
bS10ZXN0LXluLmNvbYIOKi5zYWJyb2UuY28udWuCDioudWthcmNkbXouY29tghJh
ZHRzbWFydGhvbWUuY28udWuCEmNjdXJldXNlcmdyb3VwLmNvbYIQKi5qY2kuZmxv
d2lzLmNvbYITKi5tenh0ZWNobm9sb2d5LmNvbYISc2hvcHBlcnRyYWtzdXguY29t
gg8qLmpjaWFyYWJpYS5jb22CC2pjaWJldGEuY29tghVvbmxpbmV0ZWNoeGNoYW5n
ZS5jb22CEiouZWNvbS1kZXYteW4xLmNvbYIMKi5nYS5qY2kuY29tgg5zZWN1cml0
eXNhdC5jbIIGYWR0LmllghZqb2huc29uY29udHJvbHMuY29tLmVngg9zaG9wcGVy
dHJhYy5jb22CGCoucGFydHNjZW50ZXJhcGkuamNpLmNvbYIUKi55b3JraW5ub3Zh
dGlvbi5jb22CDW50c2VjdXJpdHkudWuCESouZmlyZWNsYXNzLmNvLnVrgg0qLmFp
cmJlYXIuY29tghgqLm5ld3MuamNpbWF4cHJvZ3JhbS5jb22CEmpjaC1jaGFubmVs
aHViLmNvbYIMbW1jYXJub3QuY29tggpqY2lodWIuY29tgg0qLmpjaWhvc3QuY29t
ggtpbXBlcnZhLmNvbYISam9obnNvbmNvbnRyb2xzLmllgiwqLnN0ZXJpZ2VuaWNz
LmZvcnR3b3J0aDEuam9obnNvbmNvbnRyb2xzLmNvbYIUc2hvcHBlcnRyYWtzdWNr
cy5jb22CDSouY2xvdWR2dWUuaW+CF2Nhcm5vdHJlZnJpZ2VyYXRpb24uY29tgg0q
LmFkdGNoaWxlLmNsgg8qLnJlc2N1ZWFpci5jb22CGCouc29sdXRpb25zbmF2aWdh
dG9yLmNvbYIVKi5zZW5zb3JtYXRpYy1yZWMuY29tghwqLmpvaG5zb25jb250cm9s
cy1icmFzaWwuY29tghAqLndzanNvY2lldHkuY29tghJsb2dpeC1jb250cm9scy5j
b22CEGVjb20tdGVzdC15bi5jb22CE3NlbnNvcm1hdGljLXJlYy5jb22CFiouc2hv
cHBlcnRyYWNrLXJjdC5jb22CESouc2hvcHBlcnRyYWsuY29tghUqLm1tcmVmcmln
ZXJhdGlvbi5jb22CDWpjaWFyYWJpYS5jb22CHCouY2FtcGFpZ24uaGl0YWNoaWFp
cmNvbi5jb22CFXNtYWFzLXNlbnNvcm1hdGljLmNvbYIKamNpcGF0LmNvbYIMKi5q
Y2lwYXQuY29tghoqLmluZnV6aW9uLnNlbnNvcm1hdGljLmNvbYIaKi5qY2l0cmFp
bmluZ2luc3RpdHV0ZS5jb22CFSouc2hvcHBlcnRyYWMtcmN0LmNvbYITKi5odmFj
bmF2aWdhdG9yLmNvbYIYKi5nc3RsYWIuc2Vuc29ybWF0aWMuY29tgg1yZXNjdWVh
aXIuY29tghcqLnNtYWFzLXNlbnNvcm1hdGljLmNvbYIeKi5hdHlvdXJzZXJ2aWNl
LWhyLXBheXJvbGwuY29tghAqLnNlY3VyaXR5c2F0LmNsghBlY29tLWRldi15bjIu
Y29tggtqY2lob3N0LmNvbYIcKi50eWNvZmlyZWFuZHNlY3VyaXR5LmNvbS5hdYIO
Ki5maXJlY2xhc3MuaXSCFHNob3BwZXJ0cmFjay1yY3QuY29tggt0ZW1wZXJlZC5p
b4IOKi5zbWFydHZ1ZS5jb22CDyoubnRzZWN1cml0eS51a4ITKi5zb2x1dGlvbnMu
amNpLmNvbYIXKi5nb3Jkb25icm90aGVycy5jb20uYXWCC2FpcmJlYXIuY29tghNt
bXJlZnJpZ2VyYXRpb24uY29tgg4qLmF1dG9jYWxsLmNvbYIRamNpbWF4cHJvZ3Jh
bS5jb22CESoudHljb21vbml0b3IuY29tghQqLmpjaC1jaGFubmVsaHViLmNvbYIc
Ki5oaXRhY2hpLWFpcmNvbmRpdGlvbmluZy5odYIRbXp4dGVjaG5vbG9neS5jb22C
B3R5Y28uY2GCESouZGdhdHByb2dyYW0uY29tghQqLmpvaG5zb25jb250cm9scy5p
ZYIPd290c2VjdXJpdHkuY29tggwqLnVrLmpjaS5jb22CC2FkdGNoaWxlLmNsghQq
LnNob3BwZXJ0cmFrc3V4LmNvbYISeW9ya2lubm92YXRpb24uY29tghMqLmpjaW1h
eHByb2dyYW0uY29tggkqLnR5Y28uY2GCGSouc3luZXJneS5zZW5zb3JtYXRpYy5j
b22CDnJlZHdvbGYubmV0Lm56ghVnb3Jkb25icm90aGVycy5jb20uYXWCEiouZWNv
bS1kZXYteW4yLmNvbYIMKi5qY2lodWIuY29tgg9lY29tLWRldi15bi5jb22CDHNt
YXJ0dnVlLmNvbYIkKi5jaGFubmVsaHViLmpjaC1tYXJrZXRpbmdjZW50ZXIuY29t
giMqLm1lbWJlcmNlbnRlci5hbWVyaWNhbmR5bmFtaWNzLm5ldIIaaGl0YWNoaS1h
aXJjb25kaXRpb25pbmcuaHWCGyoubW9yZXNpdGVzLnNlbnNvcm1hdGljLmNvbYIL
ZWVmb3J1bS5uZXSCFCoubG9naXgtY29udHJvbHMuY29tggtjbG91ZHZ1ZS5pb4IZ
Ki5jYXJub3RyZWZyaWdlcmF0aW9uLmNvbYINKi5qY2liZXRhLmNvbYIsKi5zdGFn
aW5nLmNoYW5uZWxodWIuamNoLW1hcmtldGluZ2NlbnRlci5jb22CDCoudXMuamNp
LmNvbYIJM290ZWMuY29tghNzaG9wcGVydHJhYy1yY3QuY29tghgqLmpvaG5zb25j
b250cm9scy5jb20uZWeCFyoub25saW5ldGVjaHhjaGFuZ2UuY29tgh0qLmpvaG5z
b25jb250cm9scy1tb25kaWFsLmNvbYIYamNpdHJhaW5pbmdpbnN0aXR1dGUuY29t
ggxzYWJyb2UuY28udWuCCyouM290ZWMuY29tgg0qLnRlbXBlcmVkLmlvghQqLnRl
c3RrYW4udHljb2lzLmNvbYIRaHZhY25hdmlnYXRvci5jb22CCSoudHljby5iZTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0G
A1UdDgQWBBRgL1a58NIODSU4WT2+3oEDay7QBjBXBgNVHSAEUDBOMAgGBmeBDAEC
ATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh
bHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4GCCsGAQUFBwEB
BIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9j
YS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0MEoGCCsGAQUFBzAChj5odHRwOi8vc2Vj
dXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0
LmNydDAfBgNVHSMEGDAWgBSqEXGPlcRYmIuxbg87UGgkvLgZvDBIBgNVHR8EQTA/
MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2
dGxzY2EyMDIzcTQuY3JsMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYtmjxFiAAAEAwBIMEYCIQDn
/sBG7dua9z8yp2YP3ykBbhBsczNE78metkPQpgl7EgIhAJBqXNPGI0XsZtH/0Is6
afEZ+dQ7BKiui8DlDhSKONvBAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y
b+H61BcAAAGLZo8ReAAABAMASDBGAiEArKZ7F5SXLTKBSMQ3Tsf4vVnCcGj6BReG
jweAhkvHvqUCIQCCWAtsxbPfM7umzoVAszJyNdNm1aWXWDbDXq93TBMVJwB1AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi2aPFC0AAAQDAEYwRAIg
UtHviXyupVqv3aNHQsZgwGImlIgo5zoQjgylqKmI7OECIASjlzOvpKfa11WQd7YW
gYT+CUtSeJerJL+r4VtOcPNwMA0GCSqGSIb3DQEBCwUAA4IBAQBhvWTq12JFf/EG
5DgmZNnzTfLpt5p8d3ZmKGdH+5ZKL5Dku8h/5/l7jyZH2BJPJDkuSBffSP7haehG
dSJc+iwyqsBmJPflE5PrmYeg/quBKfmRNc+zgrrLNIGGl31ToqowB2Mbkmm3AnAz
jtHbAWLqqkLtFhr+G/EbwWYjqeHDu0GmzQCcaDUeRRnUzDb3H7bNzJm1s5QjX2Ol
OA6ujPNcO9LmqkfBgC6n5nic5ReRCqTodP89uWtq/2PUhIYvV4K7m5YZI4NjKnDt
dqBdpMrp1OScdy6ecjpObC2HEXdLOTjBikEAH7k62j3BELOJhzWknsDK8NMtCCrc
PUB9d6mH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi4OvQiN6TUmwWosZ/si
npO+eesDtP2T89+9lyfVNFznGdmHaXA6IluJxvybO3fB63x1InRynH8m+C0q1OPY
gDjXrt7ajoWX+nkiEvejoHev26IfRXMyTmeRa+1wWYiyAPz23IFjefucIekrBsYo
6Iu7piVWzSTlhsX6WpKhzN9fOqaQ5gs5wkLDsUMUqakxUVmfD7s6woxY7vUNRAup
/0sQthx0jaDCKbwLpbUCGHWJZonaRIpIDQFBL1lIXwGgg+RagIrPNndC6DHe0end
uO+2DAAFkUFqGtfsS7pHZJ54AH6HMRGMMKqc0k2ttpwMEyVptRuZnBiYoEsmx3L9
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2321455408022482304210420263493759598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 11:18:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 11:18:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25017896218475547792694569961678616332281568167094072089611527545878011092504560811595442652898010932255134045532800292221808364032461744004900251442136433011263541341435121987215064313541230282376773843548769290187515965006563720758631137115324280903391578135948434323080213070025862182923279615429754182285856276137770752579220753854098733915156598592373838672096269468086556870764561372816778750800445341799913786227126263936217081239460589083721046933777207766191595257328054270848354269376946779188018901375839218760714532671134150110431314766530505466768564880180818995889894356423368857925620421522739491438077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2995 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructure.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyourservice-hr-payroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign-stg.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redwolf.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.solutions.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrinkindex.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukarcdmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci.flowis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ga.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partscenterapi.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airbear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterigenics.fortworth1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudvue.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-brasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infuzion.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstlab.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atyourservice-hr-payroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutions.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airbear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycomonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synergy.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwolf.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.americandynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moresites.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvue.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testkan.tycois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							602f56b9f0d20e0d2538593dbede81036b2ed006
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061bd64ead762457ff106e4382664d9f34df2e9b79a7c777666286747fb964a2f90e4bbc87fe7f97b8f2647d8124f24392e4817df48fee169e84675225cfa2c32aac06624f7e51393eb9987a0feab8129f99135cfb382bacb348186977d53a2aa3007631b9269b70270338ed1db0162eaaa42ed161afe1bf11bc16623a9e1c3bb41a6cd009c68351e4519d4cc36f71fb6cdcc99b5b394235f63a5380eae8cf35c3bd2e6aa47c1802ea7e6789ce517910aa4e874ff3db96b6aff63d484862f5782bb9b96192383632a70ed76a05da4cae9d4e49c772e9e723a4e6c2d8711774b3938c18a41001fb93ada3dc110b3898735a49ec0caf0d32d082adc3d407d77a987