imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:7c:8e:28:0f:3c:dd:ed:5e:fd:65:48:8e:72:97:17 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7c:8e:28:0f:3c:dd:ed:5e:fd:65:48:8e:72:97:17
Serial Number (int): 1975956082249312324828144669629257495
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:f0:7d:6c:ba:f0:43:fa:e3:02:2c:87:24:13:b1:c3:39:98:56:c4
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): ea:a9:ce:b3:d8:20:6a:4d:0b:ce:43:82:03:a3:5f:d9:7b:7b:d7:85
Fingerprint (sha256): 75:c5:2e:25:13:25:27:b3:a1:2f:d0:c7:23:3d:58:fd:ef:1e:6d:46:e1:8d:27:37:39:5c:0d:81:5c:d0:ce:f6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ism-india.org
www.offermakerz.com
www.lauradimon.com
www.cinceroinvestmentproperties.com
newswedenbmwriders.com
whydentalimplants.org
www.oslchurchdenver.org
www.magnifiedadvertising.com
www.askthepolitician.org
www.maizevirtualprepschool.com
monochronicle.com
www.greencanadaled.ca
www.opinionmom.com
nextmiletech.com
stmdllc.com
www.grimecastmedia.com
cinceroinvestmentproperties.com
www.amazingspacenyc.com
generationjones.com
injectbeauty.com
wallstreetbuzz.com
ohanaclinic.com
www.generationjones.com
lauradimon.com
www.eckcreativemedia.com
neurosas.org
haydonbolts.com
brtexpress.com
www.nextmiletech.com
orchidadvocacy.org
www.grantscanada.org
www.whydentalimplants.org
greencanadaled.ca
www.thecelebrityartist.com
www.amandaleejones.com
magnifiedadvertising.com
myglutenfreeteen.com
venturecapitalfactoring.com
admechanics.com
www.blancoagency.com
www.vickyphotoart.com
imperva.com
fennyengineering.com
www.pmchurch.net
amandaleejones.com
oslchurchdenver.org
almadenrv.com
www.foliagedesignhsv.com
perituza.com
www.palauconservation.org
www.axience.com
vickyphotoart.com
www.yearbookscanning.com
grimecastmedia.com
www.admechanics.com
www.d-garcia.net
offermakerz.com
www.brtexpress.com
axience.com
blancoagency.com
zimglobalinvest.com
maizevirtualprepschool.com
palauconservation.org
www.stmdllc.com
www.ghostsofmenacestreet.com
www.mypainweb.org
www.neurosas.org
ghostsofmenacestreet.com
www.orchidadvocacy.org
eckcreativemedia.com
foliagedesignhsv.com
www.purelandscape.ca
askthepolitician.org
www.fairviewhomes.net
yearbookscanning.com
www.injectbeauty.com
www.junkcarboyswinstonsalemnc.com
www.andtheshowmustgoon.com
www.venturecapitalfactoring.com
www.haydonbolts.com
www.zimglobalinvest.com
ism-india.org
iveysgiftsandmore.com
www.yarravalleyschoolofmusic.com.au
www.restauranthoppen.com
www.iveysgiftsandmore.com
mypainweb.org
www.fennyengineering.com
www.perituza.com
amazingspacenyc.com
www.monochronicle.com
d-garcia.net
parisienbeautyschool.com
purelandscape.ca
fairviewhomes.net
www.almadenrv.com
www.ohanaclinic.com
opinionmom.com
pmchurch.net
www.parisienbeautyschool.com
www.wallstreetbuzz.com
www.myglutenfreeteen.com
junkcarboyswinstonsalemnc.com
www.newswedenbmwriders.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPPk+5G+HiXDEVZz4TdF
98YgMeg5HFk8vpA6Xkn9qCROgTPZ4hCa4PHqzKNwpbDt41rQA7j/NwkhjwCRnfte
6wfXqjVRyWhCQ/t3M+UJBnorfd1b/mWYaG7xux/pyax5LhlTN6/NbyIyenhJ/dPQ
YGJG/0tRSf+k1wvv3wC4iMADxBc0jDVVh+bbb3jU7f8ocP6fRrJSuBvEWTjeh9mH
x/VhjlCu02C6GEAMPg8aYAQwVBfRKzv3FrKJA3FN6CxEuBc64s8k1m5fm1bEFc3T
tlIRdrdbRAw5jvQzgFLFITpF/jcDd5nSw6/yB+yXQRlAomOFsA7H05sNKl5LMtYs
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1975956082249312324828144669629257495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 21:59:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 21:59:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23348116956258292358734037285638806469448259645091843698786072386222233710766339073952056755800934576416898990491150870043421231370032946694205492294767231616699184871155691965085614984898251236477052147179110072714009777277977134187894920231529061337452677584331252111715871463742599443870299023279722643928278948435774561476185623506938831892061221380121552406056797426395848030811522793355580342608525180462311806562345472377730473600259361393319725741421195150984005635498531603058408824841319781484774402429371761409750744173250825973464809918099449054812381801027175182207155777831885034470482201667707510074433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ism-india.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offermakerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauradimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinceroinvestmentproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newswedenbmwriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whydentalimplants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oslchurchdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnifiedadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askthepolitician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maizevirtualprepschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monochronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greencanadaled.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opinionmom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextmiletech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmdllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grimecastmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinceroinvestmentproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazingspacenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generationjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injectbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallstreetbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohanaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generationjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauradimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eckcreativemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurosas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haydonbolts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brtexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextmiletech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchidadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grantscanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whydentalimplants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencanadaled.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecelebrityartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amandaleejones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnifiedadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myglutenfreeteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturecapitalfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blancoagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vickyphotoart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fennyengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandaleejones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oslchurchdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almadenrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foliagedesignhsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perituza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palauconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vickyphotoart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yearbookscanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimecastmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-garcia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offermakerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brtexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blancoagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimglobalinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maizevirtualprepschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palauconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmdllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostsofmenacestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypainweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurosas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostsofmenacestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orchidadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eckcreativemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foliagedesignhsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purelandscape.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askthepolitician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairviewhomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yearbookscanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.injectbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junkcarboyswinstonsalemnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andtheshowmustgoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturecapitalfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haydonbolts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zimglobalinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ism-india.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iveysgiftsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yarravalleyschoolofmusic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restauranthoppen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iveysgiftsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypainweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fennyengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perituza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazingspacenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monochronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-garcia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisienbeautyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purelandscape.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairviewhomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almadenrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohanaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinionmom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parisienbeautyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallstreetbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myglutenfreeteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junkcarboyswinstonsalemnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newswedenbmwriders.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5df07d6cbaf043fae3022c872413b1c3399856c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c893e26b3000004030047304502210088388fc7950458d7cd8bb0538280e612e1e31f02d6213d1874bcb8d685c6b22e02201881607371a8bf23bea09afcd5a84e116c5e217d47018a92e53106aa9ca793f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c893e271e0000040300463044022011119ae753bc4b74dcfc9a37191b971668548eeaaab317ff2faaac1c5bd3786902201e0ad59d14c98ba7820aed0aa8f2df17fd609ebd7c3530278fc6d46e7355ce2400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c893e2909000004030046304402201739053eb457959024df6c5bec66ecefb7b6e7b830d4b8cc86b4a853a08175800220636680190ef4b68dea76364c5f4d82d616bf3125628edf9a7732b9517cbdab8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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