imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:30:bf:1c:4b:28:1d:be:0f:d5:29:91:c2:d4:3e:c1 was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:30:bf:1c:4b:28:1d:be:0f:d5:29:91:c2:d4:3e:c1
Serial Number (int): 1582334426877308691561403760805953217
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c5:fa:e3:e3:c2:e3:4b:2b:d5:c4:63:4a:33:b4:5d:bc:91:05:0c:e8
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 67:24:92:1b:b5:fa:0d:58:87:de:4d:dc:71:36:e8:3c:bd:1b:d4:a8
Fingerprint (sha256): 6a:c0:fe:3f:3a:f9:7c:e7:b2:4a:ce:a1:40:cb:f9:75:b9:83:32:39:bb:ed:54:40:b4:9e:4a:76:67:c8:8d:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vizion.net
sydney.vizion.net
staging.robotics.customsolutions.amadeus.com
*.crew-change.bespoke.amadeus.com
*.iryoseco.amadeuses.com
latamservicesproxy.bespoke.amadeus.com
*.timatic.bespoke.amadeus.com
*.robotics.customsolutions.amadeus.com
automaticupdate.amadeus.com
backend7.flightportal.travel
*.aircanada.airlines.api.amadeus.com
*.airport-companion.brusselsairlines.airlines.api.amadeus.com
*.pilot.contextsearch.saas.amadeus.com
docs.amadeus-discover.com
uat.getfeasy.com
jakarta.vizion.net
backend1.flightportal.travel
*.sydney.vizion.net
*.amadeusplusme.com
airport-companion.dummies.airlines.api.amadeus.com
*.getfeasy.com
delhi.vizion.net
ifsfwiuat.frequentflyer.aero
*.airport-companion.aircanada.airlines.api.amadeus.com
*.residentes.amadeuses.com
*.avianca.airlines.api.amadeus.com
*.datasync3.amadeuses.com
omuatdot.frequentflyer.aero
airport-companion.austrian.airlines.api.amadeus.com
airport-companion.swiss.airlines.api.amadeus.com
crew-change.bespoke.amadeus.com
*.airport-companion.dummies.airlines.api.amadeus.com
test.getfeasy.com
churning.bespoke.amadeus.com
docs-staging.amadeus-discover.com
vegas.jakarta.vizion.net
backend2.flightportal.travel
backend6.flightportal.travel
amadeus-touchless.com
*.qantas.airlines.api.amadeus.com
app.getfeasy.com
*.emearvrweb.bespoke.amadeus.com
test-backend.flightportal.travel
test.airport-companion.swiss.airlines.api.amadeus.com
*.companion.bespoke.amadeus.com
residentes.amadeuses.com
*.ttc-schedule-change-services.bespoke.amadeus.com
amadeus-digital-game-1.amadeus.com
*.automaticupdate.amadeus.com
qualification.farexpert.amadeus.net
timatic.bespoke.amadeus.com
*.frequentflyer.aero
backend4.flightportal.travel
airport-companion.brusselsairlines.airlines.api.amadeus.com
companion.bespoke.amadeus.com
test.airport-companion.qantas.airlines.api.amadeus.com
booking.amadeus-sherpa.com
preview.amadeusplusme.com
*.rail.sca.amadeus.com
prd02-appgw01.cytriceasy.api.amadeus.net
staging.robotics.saas.amadeus.com
*.asocqa.com
asocqa.com
mgm.hospitality.api.amadeus.com
www.amadeus-touchless.com
*.churning.bespoke.amadeus.com
alentour-experiences-staging.amadeus-discover.com
imperva.com
doc.amadeus.com
skl.israel-admin.bespoke.amadeus.com
*.airport-companion.avianca.airlines.api.amadeus.com
*.corpcodescript.amadeusasia.com
backend5.flightportal.travel
*.clubmed-portal-services.bespoke.amadeus.com
*.latamservicesproxy.bespoke.amadeus.com
*.flightportal.travel
ttc-schedule-change-services.bespoke.amadeus.com
travelaudience.com
vegas.sydney.vizion.net
www.customerservicepoint.amadeus.com
gsapi.bespoke.amadeus.com
alentour-experiences.amadeus-discover.com
*.airport-companion.lufthansa.airlines.api.amadeus.com
alentour-pro-staging.amadeus-discover.com
pro-staging.amadeus-discover.com
api-staging.amadeus-discover.com
*.airport-companion.austrian.airlines.api.amadeus.com
*.uat.contextsearch.saas.amadeus.com
*.travelaudience.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhNIH6YLqLT7gx0D6kIP
dDiIMDeAXIoVVwOvhifd/4QHmtZV+bPgAlQhL4WcZbJli5lO51+VBDZslxfeys0m
OuPgjcbss/uN/ylP0fpIlSaqYthV5ad+TXkuZjbdLlKgjOIhKJ03SBy8lELl7p/N
j8WjYkRCW9FnFGPAj0Z9JK5AavteE2NLlEXO138k54Nv9Dk+eO+78eROg1HeRD79
zpqJjx9K09FDTeaTrUgKc+kaMmRPDBGZz+fI7eqOOOMycmC0ni6VntHux7Wk5iJj
hN90zssFSzteBW96bJbZB2X1OmNASqMzckZLSLh0r7Ly9lVSoojjESRlDUGtEk6s
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1582334426877308691561403760805953217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 08:04:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 08:04:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18945253921786026967909178913303696136655024359455950788488605891052644165854814137363582307518444320651068215342503216925144951960492046836630692635542933734610604041746937725159142738099283480513825209393314437357955676155299522478324332040226664940236008765013981846183870501135959127972050669520035119716951788311302799629851756289118623203280179082291313050155637533307806545146162799109637794220306350080716645041585519003489575640299113558002413805116742123148754555572110754625566481918549673549124388863464197462210953523548805066112833404802860150317141187716812571709298274118107478137138276031275796966639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2995 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydney.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.robotics.customsolutions.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crew-change.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iryoseco.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamservicesproxy.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timatic.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robotics.customsolutions.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaticupdate.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend7.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aircanada.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.brusselsairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilot.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.getfeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakarta.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend1.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydney.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadeusplusme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.dummies.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getfeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhi.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifsfwiuat.frequentflyer.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.aircanada.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.residentes.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avianca.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datasync3.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omuatdot.frequentflyer.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.austrian.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.swiss.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-change.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.dummies.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.getfeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churning.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs-staging.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegas.jakarta.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend2.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend6.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadeus-touchless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qantas.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getfeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emearvrweb.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-backend.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.swiss.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.companion.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residentes.amadeuses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttc-schedule-change-services.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadeus-digital-game-1.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automaticupdate.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualification.farexpert.amadeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timatic.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frequentflyer.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend4.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport-companion.brusselsairlines.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companion.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.airport-companion.qantas.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.amadeus-sherpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.amadeusplusme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rail.sca.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd02-appgw01.cytriceasy.api.amadeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.robotics.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asocqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asocqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgm.hospitality.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amadeus-touchless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.churning.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alentour-experiences-staging.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skl.israel-admin.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.avianca.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corpcodescript.amadeusasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend5.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubmed-portal-services.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latamservicesproxy.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightportal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttc-schedule-change-services.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegas.sydney.vizion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerservicepoint.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsapi.bespoke.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alentour-experiences.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.lufthansa.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alentour-pro-staging.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-staging.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.amadeus-discover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airport-companion.austrian.airlines.api.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.contextsearch.saas.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelaudience.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5fae3e3c2e34b2bd5c4634a33b45dbc91050ce8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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