imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:d8:31:96:49:d0:04:46:81:1f:1f:86:af:08:8e:72 was issued on by GlobalSign nv-sa.

With 103 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d8:31:96:49:d0:04:46:81:1f:1f:86:af:08:8e:72
Serial Number (int): 2451769862367277189648046256288206450
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d8:9e:54:3d:2d:9e:ce:11:7a:3c:71:59:1c:68:ac:42:a9:4e:b8:02
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 40:ed:2c:2a:fe:b0:a6:dc:f6:b2:e1:a4:ea:1a:58:d9:a4:4d:fd:cc
Fingerprint (sha256): 79:44:5a:cc:98:6b:ff:ce:ff:d6:7b:91:86:df:a1:44:93:94:2b:02:4b:53:b6:0c:53:1e:ea:57:ad:91:2f:f1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

103

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reservations.villarspalace.ch
accounts-gcp.int.sabre.com
apigw.israir.co.il
reservations.innsofaurora.com
opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com
webouprod.avri.as.prod.asc.sabre.com
www.1p01.usc1.int.planning-optimization.sabre.com
airjapan-ext-api-cert-ase1.ezycommerce.sabre.com
manta-api-ase1.ezycommerce.sabre.com
opscomm.e9.prod.sabre.com
am.reaccom-manager.cert.sabre.com
reservations.grandbeachhotel.com
aerok-api-cert-ase1.ezycommerce.sabre.com
travelbank-ngp.int.sabre.com
reservations.carlton.co.il
u0-ro.avro.cert.aws.sabre.com
aerok-ext-api-ase1.ezycommerce.sabre.com
asreporting-us-central.cert.sabre.com
sud.res.radixxcert.com
reservations.vibehotels.com
bedrooms.sohohouse.com
webarcert.avri.as.cert.asc.sabre.com
reserve.cambridgebeaches.com
bon.res.radixxhost.com
apigw.caspitours.co.il
gettours.co.il
reservations.hotelemeline.com
caw-f9.cert.sabre.com
caw-f9.prod.sabre.com
ey.reaccom-manager.cert.sabre.com
reservation.marinobeach.com
sud.dcs.radixxcert.com
airjapan-api-cert-ase1.ezycommerce.sabre.com
va.reaccom-manager.cert.sabre.com
bon.app.radixxhost.com
redapp-examples-webservice.cert.sabre.com
aerok-api-ase1.ezycommerce.sabre.com
cps.stc.sabre.com
caw-nk.cert.sabre.com
reservations.sociallivingcollection.com
fccs.sabre.com
cert.documents-svc.sabre.com
documents.sabre.com
travelextras-ngp.int.sabre.com
6s.reaccom-manager.cert.sabre.com
opsmobile.amm.sv.as.cert.asc.sabre.com
imperva.com
ws.reaccom-manager.cert.sabre.com
reservations.villarslodge.ch
sudanair-ext-api-ase1.ezycommerce.sabre.com
opsmobile.mq.as.cert.asc.sabre.com
mld.appota.radixxhost.com
az.reaccom-manager.cert.sabre.com
cert.cps.stc.sabre.com
bon.appota.radixxhost.com
www.gettours.co.il
www.vc01.usc1.int.planning-optimization.sabre.com
mld.res.radixxhost.com
mld.dcs.radixxhost.com
lvrlakebuenavista.mynuvola.com
opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com
reservations.hoteldanieli.com
elbit.sabre.co.il
apigw.ophirtours.co.il
reservations.tfehotels.com
apigw.nehoratours.co.il
reservations.villarsvictoria.ch
reservation.lamaisonfavart.com
reservations.harvestinn.com
crouter-ngp.int.sabre.com
opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com
reservations.showboathotelac.com
weboucert.avri.as.cert.asc.sabre.com
su.reaccom-manager.cert.sabre.com
u0-ro-c1.avro.cert.aws.sabre.com
b6.reaccom-manager.cert.sabre.com
reservations.lodgeatbodegabay.com
reservations.theinterlude.com.au
admin-cert-ew3.ezycommerce.sabre.com
redapp-examples-webservice.int.sabre.com
reservations.hotelderek.com
webtest.x0.ix.cert.sabre.com
la.reaccom-manager.cert.sabre.com
bon.dcs.radixxhost.com
webarprod.avri.as.prod.asc.sabre.com
mondriancondesa.mynuvola.com
skyexpress-api-cert.ezypayment.sabre.com
skyexpress-ext-api-ew3.ezycommerce.sabre.com
mld.app.radixxhost.com
wcp-int.getthere.net
airjapan-api-ase1.ezycommerce.sabre.com
hotels.cert.havail.sabre.com
prd.eticket.radixxhost.com
admin-ew3.ezycommerce.sabre.com
reservations.soneva.com
aerok-ext-api-cert-ase1.ezycommerce.sabre.com
book.bunkhousehotels.com
airjapan-ext-api-ase1.ezycommerce.sabre.com
sud.appota.radixxcert.com
sud.app.radixxcert.com
demo.avfo.as.cert.asc.sabre.com
as.reaccom-manager.cert.sabre.com
sudanair-api-cert.ezypayment.sabre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bANYwqMl8Eh2fxoAtO6
8OQodYuGwsUzIaHocvpFhkGJqyKjrdPh8/zDJhhoYb8WSoW2ACurZy9oZUDs8PLD
EjulMDM2OxSJVQRpWrhDjvlPlml0XI8M7Dk4EIRt/Y1bK9Ai70aFd34rLUc7wdXh
qZoLQuKMn7K3MD67UVR84ggiaIHArp+BYFYBabYOJaT0Nqv59FzObSh3T25N4/BA
wBq0mZRJB+ozXZkEcL1Bdmc1c2DkNSve2Md0ICt8ZPKTxIbKhrgY20y9lEAinfKS
c6WPogmsesntjjyhnuYZDLTpkeRjSLz7LMndXgbyaDanQC5EfJEpUKkKnKAs3Ueu
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2451769862367277189648046256288206450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 16:52:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 16:52:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985480018555399402613011829797998182046304481983034071235585588160164633350614069837951484927545898544918962017332048382054229892099594825636010161752873272250182296045766457682031330444075296829974969701630305766777832116078868653717887853562010450751754672978957454778958121197399438506214643136831422771806825940380825531847556490088082039721605528558641887537561098289100211790238277853425666920314702756429399367132059123055517660776993608063993757296679577687740436525405068525480613258240777147255609668397232343895440077263236626777567218069093278015298719615324948142129691956053947271019103960908178107991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarspalace.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-gcp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.israir.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.innsofaurora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webouprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1p01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opscomm.e9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.grandbeachhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelbank-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.carlton.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asreporting-us-central.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.res.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.vibehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedrooms.sohohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarcert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.cambridgebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.caspitours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelemeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.marinobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.dcs.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-nk.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.sociallivingcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccs.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.documents-svc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelextras-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6s.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarslodge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.mq.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vc01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvrlakebuenavista.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hoteldanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbit.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tfehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.nehoratours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarsvictoria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.lamaisonfavart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.harvestinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouter-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.showboathotelac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboucert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.lodgeatbodegabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.theinterlude.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelderek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.x0.ix.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondriancondesa.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.cert.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.eticket.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.soneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.bunkhousehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.appota.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.app.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.avfo.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d89e543d2d9ece117a3c71591c68ac42a94eb802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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