imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:be:a2:a5:c5:11:38:23:18:88:a2:5c:d2:5a:57:c3 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:be:a2:a5:c5:11:38:23:18:88:a2:5c:d2:5a:57:c3
Serial Number (int): 2319063282898503320214335640303196099
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2f:c6:6e:ab:e6:9e:de:80:d0:2a:ad:be:81:4e:ff:5a:d3:ae:a6:22
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 4f:d9:08:c2:df:5b:0d:cf:61:a6:f5:7c:17:1f:37:1a:29:a0:00:c5
Fingerprint (sha256): 65:0d:19:2c:94:81:09:20:76:17:dc:dd:f4:c2:b1:0a:88:08:aa:b7:84:7e:f7:bc:6b:3b:7d:89:d9:f3:71:27

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crystalalchemybowls.com
www.mostrafilmfestival.org
www.orderyoursteps.net
bishaherbals.com
www.wsequipment.com
khalagaat.space
medallionadvy.com
www.charkeducation.com
www.thekindnessclub.net
brasco.org
onealkingdomfit.com
www.women-in-tax.org
www.natalieshear.com
cmtyoutreach.org
www.iosso.com
www.willbaum.com
www.globalvalidity.com
www.lostvoices.org
aswaadvisory.com
www.innovationbureau.co.uk
www.magnumbowlingproducts.com
www.asia-ibs.com
parceirosplay.com.br
www.hiddenfork.com
garantia-total.com
www.misspiercecounty.org
www.roaringforkresources.com
chelseadays.com
www.brasco.org
www.yourpetsmatter.org
www.bishaherbals.com
elevatewm.com
www.garantia-total.com
www.medallionadvy.com
crystalalchemybowls.com
roadscholarsdriving.com
thewhitenoisepodcast.com
thekindnessclub.net
natalieshear.com
www.avti-online.com
magnumbowlingproducts.com
www.campfirehk.org
twc-training.co.uk
www.kalorconsultancy.com
www.angieday.com
imperva.com
newskt.com.br
lostvoices.org
www.superiorroofllc.com
salsabeelcars.site
www.thewhitenoisepodcast.com
www.twc-training.co.uk
www.ideaslab.com
dotmac.ng
avti-online.com
orderyoursteps.net
globalvalidity.com
www.khalagaat.space
www.newbeginningscs.com
www.roadscholarsdriving.com
www.elevatewm.com
campfirehk.org
looperpedalreviews.com
www.aswaadvisory.com
willbaum.com
www.chelseadays.com
www.looperpedalreviews.com
charkeducation.com
www.dotmac.ng
ecoartsconnections.org
sagradocorazon.ed.cr
ideaslab.com
artmsr.com
iosso.com
www.liggettonline.com
www.artmsr.com
www.ecoartsconnections.org
www.salsabeelcars.site
roaringforkresources.com
www.saryon.com
newbeginningscs.com
asia-ibs.com
fjordsmalfournier.com
www.onealkingdomfit.com
www.earthentouchbuilders.com
saryon.com
conferenciapastoral.org
earthentouchbuilders.com
innovationbureau.co.uk
mediaquestoutdoor.com
www.parceirosplay.com.br
www.sagradocorazon.ed.cr
www.fjordsmalfournier.com
superiorroofllc.com
kalorconsultancy.com
mostrafilmfestival.org
www.cmtyoutreach.org
women-in-tax.org
www.firstrankdigital.com
www.mediaquestoutdoor.com
wsequipment.com
www.newskt.com.br
hiddenfork.com
www.conferenciapastoral.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwV/n9Pq7CjmrZgR1I1P
LRfOTjgu7gJ6j/D00HGPY0WVCu67EjsotqzQdSfAVIGizjHR9nWuL7s0sdZUAl/F
mVm4D7Ae6dhRV5IDg4LynfGWsKEtHfyJVj+2KyOWf7MS1R8CruFFXO+OPTqH5DdD
DN1bSV9nuFro36zTx9Q/9R74FKBEa0pEg4mayFSsmKHUVX+86eY2EGfJqBdouFO/
96MyRLFGmmdHuWeOQz25c67ZZOGJBplN+wHYIbJv5gY0Y9T7wCbLM6td56gPvpdI
RfBwvUhVW2jkephd/ejfqAf0hf9lNe4ZAVMk6pkwTprWx1PfhGOyaIvaDN8XL5Or
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2319063282898503320214335640303196099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 08:20:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 08:20:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17044882597864119627478035632577972296835933763937931242154850950059865033132425254009087553118542767814935266601759276098740381419143439499633474535275945457591849092333039115715811519907963280325381012138780612345966857703154891158514607739167090412877392239706572735800341984244924879347721257044321383659843000040811393555506518301103566931890205143061152317028509637572419815365735819001969394103125737054840676479570947673443999740060904160363849893080595115490512814737866203234427859998582134371186048225610678430445955379304289590649177820908710596932205182016491406178435687437171524799225421783266690837417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalalchemybowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostrafilmfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orderyoursteps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishaherbals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalagaat.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medallionadvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charkeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekindnessclub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onealkingdomfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.women-in-tax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natalieshear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmtyoutreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalvalidity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lostvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswaadvisory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationbureau.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnumbowlingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asia-ibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceirosplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiddenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garantia-total.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misspiercecounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roaringforkresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelseadays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourpetsmatter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishaherbals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevatewm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garantia-total.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medallionadvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalalchemybowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadscholarsdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewhitenoisepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekindnessclub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natalieshear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avti-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnumbowlingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campfirehk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc-training.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalorconsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angieday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newskt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorroofllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salsabeelcars.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewhitenoisepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twc-training.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideaslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avti-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderyoursteps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalvalidity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khalagaat.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbeginningscs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadscholarsdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevatewm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campfirehk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'looperpedalreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswaadvisory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chelseadays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.looperpedalreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charkeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoartsconnections.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagradocorazon.ed.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artmsr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liggettonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artmsr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoartsconnections.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salsabeelcars.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roaringforkresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saryon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbeginningscs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia-ibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjordsmalfournier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onealkingdomfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthentouchbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saryon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferenciapastoral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthentouchbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationbureau.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaquestoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parceirosplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagradocorazon.ed.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjordsmalfournier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorroofllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalorconsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostrafilmfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmtyoutreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women-in-tax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstrankdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaquestoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newskt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiddenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conferenciapastoral.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fc66eabe69ede80d02aadbe814eff5ad3aea622
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a25d91c75ea08b533ca37801079f740513811912990f1976bd470bfee8c0ab7297123ff0caeaafcef97b5ead98cf636f0f80cfe036e3fc86f688867cab080ce3e14ac2ee009715c6caf41eebbcaf5138910f4cc90eac271eda3ae67dc3fb52d65f94912ce1c89ad48ae38f8983ae029ad9965a378a5f09f04f69a446ec8b1e828c41d18b1ab08375160d020eca725d3d0eeaff89feed1cadb367297a5f8a4472a699f53393f220c7f18fb62b0a283fa0f908a5b7a591813144d292d8c203f6ab2a7bbb79420b6bfbd4f4acded23ade501463407dffa50ac6dde828157a52777318cbe5a1a9a2978e4a4fd03696c53dbd6e6ba1ca903ff5b48dacc887978318d