imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:fe:39:4b:4b:7d:18:35:c8:3c:f0:4d:75:c0:b2:a1 was issued on by GlobalSign nv-sa.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fe:39:4b:4b:7d:18:35:c8:3c:f0:4d:75:c0:b2:a1
Serial Number (int): 2649233460674964598544442737976980129
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:4f:27:27:67:81:4c:ef:cd:aa:0b:4d:d6:98:cb:8c:20:25:44:1d
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 55:d7:52:44:d8:83:6f:39:f1:ec:94:dd:85:4d:c6:25:41:f2:92:4b
Fingerprint (sha256): 6b:f6:95:1c:71:24:91:5e:d3:a4:25:fb:aa:51:28:80:57:3d:7c:76:21:2d:87:d9:c6:d6:74:ae:00:41:0f:42

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doctors.ololrmc.com
doctors.childrensmn.org
doctors.silvercross.org
providerdirectory.uabmedicine.org
providers.overlakehospital.org
*.baptisthealth.net
findadoc.umchealthsystem.com
*.broadwayhealth.org
doctors.virtua.org
miami-neurociencia-medicos.baptisthealth.net
doctors.aikenregional.com
doctorsqa.bcbsm.com
medicos.nuvancehealth.org
doctors.stdom.com
providers.bestcare.org
providers.chnola.org
api.kyruus.com
doctors.stonybrookmedicine.edu
*.int2.healthsparq.com
*.unitypoint.org
providers.billingsclinic.org
care.bellin.org
*.dev2.healthsparq.com
*.nuvancehealth.org
*.northbay.org
dev.doctors.apps.baptisthealth.net
doctors.stfran.com
providers.baptisthealth.com
providers.mhealthfairview.org
preview-api.kyruus.com
miami-cancer-doctors.baptisthealth.net
doctors.oloah.org
login.doctorsqa.bcbsm.com
*.kyruus.com
*.prd2.healthsparq.com
providers.atlanticare.org
doctors.saintlukeskc.org
providers.nortonhealthcare.com
*.atlantichealth.org
*.lourdesrmc.com
providers.gundersenhealth.org
*.provider-match.com
*.northernlighthealth.org
*.healthsparq.com
*.uat2.healthsparq.com
*.adventisthealth.org
providers.nahealth.com
*.prdqa2.healthsparq.com
*.customer.kyruus.com
imperva.com
doctors.hackensackmeridianhealth.org
providers.inspirahealthnetwork.org
broadwayhealth.org
providers.munsonhealthcare.org
providers.emoryhealthcare.org
doctors.massgeneralbrigham.org
providers.ecmc.edu
*.ololchildrens.org
providers.priviahealth.com
orthoatlanta.piedmont.org
providers.arh.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK6TCCCdGgAwIBAgIQAf45S0t9GDXIPPBNdcCyoTANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMTAeFw0yMzAx
MjMxODU5MDlaFw0yMzA3MjIxODU5MDlaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjidUSgvV9bSc1cJMBrQ
wHkNZp5COrpuXsKxw2K1Z67c8eXQqPpqe16FSInGOtMTMozwWDBj0pZnDhpp+IKz
GrN1zQKXPylzZwKC/ngJLef9QlohEbeTp5YaI2O3L5pcVLdRHQNUrxjHXOFpdwTW
iIMU0PgbEC8B+JzmEpQoZ2sIZvbeF74jbSg3ZdZjXbcRvbxtvbc9AiSii/6xPFuh
uc599oR/910mcLA+7viwIN/FAZsWoFVuACumObZUwCSqdyngGIviokCalDBLYr5U
jpJ+0XZIJ98lAjkM3860azCYT4oy920b2cvQAm9pOgoMNRHe4LTwA51fZbDhknYt
EQIDAQABo4IH7zCCB+swggYRBgNVHREEggYIMIIGBIITZG9jdG9ycy5vbG9scm1j
LmNvbYIXZG9jdG9ycy5jaGlsZHJlbnNtbi5vcmeCF2RvY3RvcnMuc2lsdmVyY3Jv
c3Mub3JngiFwcm92aWRlcmRpcmVjdG9yeS51YWJtZWRpY2luZS5vcmeCHnByb3Zp
ZGVycy5vdmVybGFrZWhvc3BpdGFsLm9yZ4ITKi5iYXB0aXN0aGVhbHRoLm5ldIIc
ZmluZGFkb2MudW1jaGVhbHRoc3lzdGVtLmNvbYIUKi5icm9hZHdheWhlYWx0aC5v
cmeCEmRvY3RvcnMudmlydHVhLm9yZ4IsbWlhbWktbmV1cm9jaWVuY2lhLW1lZGlj
b3MuYmFwdGlzdGhlYWx0aC5uZXSCGWRvY3RvcnMuYWlrZW5yZWdpb25hbC5jb22C
E2RvY3RvcnNxYS5iY2JzbS5jb22CGW1lZGljb3MubnV2YW5jZWhlYWx0aC5vcmeC
EWRvY3RvcnMuc3Rkb20uY29tghZwcm92aWRlcnMuYmVzdGNhcmUub3JnghRwcm92
aWRlcnMuY2hub2xhLm9yZ4IOYXBpLmt5cnV1cy5jb22CHmRvY3RvcnMuc3Rvbnli
cm9va21lZGljaW5lLmVkdYIWKi5pbnQyLmhlYWx0aHNwYXJxLmNvbYIQKi51bml0
eXBvaW50Lm9yZ4IccHJvdmlkZXJzLmJpbGxpbmdzY2xpbmljLm9yZ4IPY2FyZS5i
ZWxsaW4ub3JnghYqLmRldjIuaGVhbHRoc3BhcnEuY29tghMqLm51dmFuY2VoZWFs
dGgub3Jngg4qLm5vcnRoYmF5Lm9yZ4IiZGV2LmRvY3RvcnMuYXBwcy5iYXB0aXN0
aGVhbHRoLm5ldIISZG9jdG9ycy5zdGZyYW4uY29tghtwcm92aWRlcnMuYmFwdGlz
dGhlYWx0aC5jb22CHXByb3ZpZGVycy5taGVhbHRoZmFpcnZpZXcub3JnghZwcmV2
aWV3LWFwaS5reXJ1dXMuY29tgiZtaWFtaS1jYW5jZXItZG9jdG9ycy5iYXB0aXN0
aGVhbHRoLm5ldIIRZG9jdG9ycy5vbG9haC5vcmeCGWxvZ2luLmRvY3RvcnNxYS5i
Y2JzbS5jb22CDCoua3lydXVzLmNvbYIWKi5wcmQyLmhlYWx0aHNwYXJxLmNvbYIZ
cHJvdmlkZXJzLmF0bGFudGljYXJlLm9yZ4IYZG9jdG9ycy5zYWludGx1a2Vza2Mu
b3Jngh5wcm92aWRlcnMubm9ydG9uaGVhbHRoY2FyZS5jb22CFCouYXRsYW50aWNo
ZWFsdGgub3JnghAqLmxvdXJkZXNybWMuY29tgh1wcm92aWRlcnMuZ3VuZGVyc2Vu
aGVhbHRoLm9yZ4IUKi5wcm92aWRlci1tYXRjaC5jb22CGSoubm9ydGhlcm5saWdo
dGhlYWx0aC5vcmeCESouaGVhbHRoc3BhcnEuY29tghYqLnVhdDIuaGVhbHRoc3Bh
cnEuY29tghUqLmFkdmVudGlzdGhlYWx0aC5vcmeCFnByb3ZpZGVycy5uYWhlYWx0
aC5jb22CGCoucHJkcWEyLmhlYWx0aHNwYXJxLmNvbYIVKi5jdXN0b21lci5reXJ1
dXMuY29tggtpbXBlcnZhLmNvbYIkZG9jdG9ycy5oYWNrZW5zYWNrbWVyaWRpYW5o
ZWFsdGgub3JngiJwcm92aWRlcnMuaW5zcGlyYWhlYWx0aG5ldHdvcmsub3JnghJi
cm9hZHdheWhlYWx0aC5vcmeCHnByb3ZpZGVycy5tdW5zb25oZWFsdGhjYXJlLm9y
Z4IdcHJvdmlkZXJzLmVtb3J5aGVhbHRoY2FyZS5vcmeCHmRvY3RvcnMubWFzc2dl
bmVyYWxicmlnaGFtLm9yZ4IScHJvdmlkZXJzLmVjbWMuZWR1ghMqLm9sb2xjaGls
ZHJlbnMub3Jnghpwcm92aWRlcnMucHJpdmlhaGVhbHRoLmNvbYIZb3J0aG9hdGxh
bnRhLnBpZWRtb250Lm9yZ4IRcHJvdmlkZXJzLmFyaC5vcmcwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU3k8n
J2eBTO/NqgtN1pjLjCAlRB0wVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGg
MgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y
ZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggr
BgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3Iz
ZHZ0bHNjYTIwMjNxMTBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMS5jcnQwHwYDVR0j
BBgwFoAUSu6iR2NDOz5487Rhg3KIep3kvbcwSAYDVR0fBEEwPzA9oDugOYY3aHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3Ex
LmNybDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6uF
3vRIsUJRv7NLUesvrcUsyUU1oajdDUiu1F3a0vCFU8JyEOu9PbgYzJq7EI8ypyr0
hEtvLMHd64WkMnCwQTeS4VPReOuxZ4t1pWOsSXWDU5H3OPLKPNuIPzGLQ/7dOG3A
gmZMkf0oGfVw/mboyP0HLjKj49Am52rpQYIhpr73omKl59Up3FwkCuLh7JSoegOD
CgvS9c2omB9ErIbUNz4F4buNW+Bf8iclUh+/VUWZfU5zKr8bV+DjALHkinGdHzeg
1VG/96uHn0KPENbZx9WDbw9hPPRGtFDQun+qGKipNSAYc1N0aeJmv7L9pAtobNyI
jzZRTKIvM4wptAvkpQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjidUSgvV9bSc1cJMBrQ
wHkNZp5COrpuXsKxw2K1Z67c8eXQqPpqe16FSInGOtMTMozwWDBj0pZnDhpp+IKz
GrN1zQKXPylzZwKC/ngJLef9QlohEbeTp5YaI2O3L5pcVLdRHQNUrxjHXOFpdwTW
iIMU0PgbEC8B+JzmEpQoZ2sIZvbeF74jbSg3ZdZjXbcRvbxtvbc9AiSii/6xPFuh
uc599oR/910mcLA+7viwIN/FAZsWoFVuACumObZUwCSqdyngGIviokCalDBLYr5U
jpJ+0XZIJ98lAjkM3860azCYT4oy920b2cvQAm9pOgoMNRHe4LTwA51fZbDhknYt
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2649233460674964598544442737976980129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 18:59:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 18:59:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22498335944082149104632612484838333359032974157594418326866529070914934028400800677942006354216063289482947292041850431769444492489757756404037421272636797930874209459601747127056127351978423598084266334109918253203452150214131212016416564731603065169083659533643629128894469264146761480851783772376492765081164966694823266353273565443523409777049929031614866476136458159883999023748199138347268947742489733368228190779969318079761540626907213431152848885002529503922262445145696971833566502589878691562001772014598291094710904543744509031310401232632993896703798978815898195686736195780528944494721794990725632765201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.childrensmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.silvercross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providerdirectory.uabmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.overlakehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findadoc.umchealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadwayhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.virtua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami-neurociencia-medicos.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.aikenregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorsqa.bcbsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicos.nuvancehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.bestcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.chnola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stonybrookmedicine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.billingsclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.bellin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuvancehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.doctors.apps.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.mhealthfairview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-api.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami-cancer-doctors.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.oloah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.doctorsqa.bcbsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.saintlukeskc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.nortonhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.gundersenhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provider-match.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northernlighthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventisthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.nahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prdqa2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.hackensackmeridianhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.inspirahealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwayhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.munsonhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.emoryhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.massgeneralbrigham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ecmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ololchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthoatlanta.piedmont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.arh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de4f272767814cefcdaa0b4dd698cb8c2025441d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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