imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:8a:3a:b9:32:c2:b3:5c:26:21:37:77:8e:01:44:5b was issued on by GlobalSign nv-sa.

With 141 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8a:3a:b9:32:c2:b3:5c:26:21:37:77:8e:01:44:5b
Serial Number (int): 2046956014939428124948977478117966939
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3d:1e:ec:be:f6:95:68:10:ad:56:11:6b:6b:25:4e:d2:20:c4:a0:e2
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 52:89:79:c9:14:8c:7b:95:db:22:7f:2b:2b:47:bc:86:67:d2:03:8e
Fingerprint (sha256): 7e:cb:05:65:e0:87:50:33:2f:2e:07:15:59:98:d2:cf:27:82:da:93:c5:fd:e1:d2:3b:a6:36:9e:ac:e6:20:cf

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

141

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dx31.dev.aws.sabre.com
*.p.cloud.sabrehospitality.com
deasy.co.il
*.airserbia.com
thesetaihotels.com
*.cert3.virtuallythere.com
*.flyravn.com
*.dx13.cert.aws.sabre.com
*.penair.com
*.sabrenow.com
*.ci11.cert.aws.sabre.com
*.sabre.co.il
db-int.rail.sabre.com
*.dev.aws.sabre.com
ascert.avix.ix-as.prod.asc.sabre.com
*.updatesite.sabre.com
*.ci12.prod.aws.sabre.com
*.dxci21.dev.aws.sabre.com
*.avri.as.cert.asc.sabre.com
*.dx23.cert.aws.sabre.com
*.airseychelles.com
*.prod.sabre.com
*.aem1.cert.aws.sabre.com
*.checkin.caymanairways.com
*.shopholidays.de
*.caymanairways.com
*.checkin.malindoair.com
*.cert.sabre.com
*.canadiannorth.com
*.int.sabre.com
*.dx11.prod.aws.sabre.com
*.dx22.cert.aws.sabre.com
*.cert.aws.sabre.com
dx.ci21.prod.aws.sabre.com
dx.ci22.prod.aws.sabre.com
*.dx54.dev.aws.sabre.com
*.cert.virtuallythere.com
*.sabredemos.com
mandarinoriental.com
*.trumphotels.com
*.as.sswaem.cert.aws.sabre.com
*.avri.as.prod.asc.sabre.com
*.c.cloud.sabrehospitality.com
*.loewshotels.com
*.cert4.virtuallythere.com
*.ci12.cert.aws.sabre.com
*.updatesite.cert.sabre.com
*.sabre.com
*.svc.virtuallythere.com
*.ci14.cert.aws.sabre.com
*.grand.hyatt.com.tr
*.internal.cert.virtuallythere.com
sundorholidays.co.il
imperva.com
*.deasy.co.il
mmweb.mn.amm.as.prod.asc.sabre.com
*.omanair.com
*.dx12.dev.aws.sabre.com
*.cdc.sabre.com
*.synxis.com
*.dai01.cert.aws.sabre.com
*.regency.hyatt.com.sa
*.shs.dev.asc.sabre.com
*.historichotels.org
dc-cert.aeromexico.com
*.firstair.ca
tripcase.com
*.dai02.cert.aws.sabre.com
*.ci01.cert.aws.sabre.com
*.ci02.cert.aws.sabre.com
sabre.com
*.bts.synxis.com
db-training.rail.sabre.com
fontainebleau.com
*.virtuallythere.com
*.dx11.cert.aws.sabre.com
*.developer.sabre.com
*.fontainebleau.com
clientbaseonline.com
*.dx51.dev.aws.sabre.com
*.shs.prod.asc.sabre.com
*.agentconnect.cert.sabre.com
*.dx11.dev.aws.sabre.com
*.ci13.cert.aws.sabre.com
*.dx52.dev.aws.sabre.com
*.sundorholidays.co.il
*.sabrehospitality.com
*.as.cert.asc.sabre.com
*.dai11.prod.aws.sabre.com
*.as.sswaem.prod.aws.sabre.com
historichotels.org
*.checkin.lionairthai.com
*.dxci11.dev.aws.sabre.com
*.dx24.cert.aws.sabre.com
*.silverairways.com
*.tripcase.com
*.aca.as.cert.asc.sabre.com
*.airmalta.com
*.getthere.net
*.profiles.sabre.com
*.flica.net
*.mandarinoriental.com
*.prod.aws.sabre.com
*.webservicesholidays.de
*.aem2.cert.aws.sabre.com
*.virginaustralia.com
*.rail.sabre.com
*.atlantic-hotels.de
*.dx12.prod.aws.sabre.com
*.clientbaseonline.com
*.dx21.cert.aws.sabre.com
*.malindoair.com
*.regency.hyatt.com.tr
*.dx12.cert.aws.sabre.com
*.dx14.cert.aws.sabre.com
*.dx61.dev.aws.sabre.com
*.dx41.dev.aws.sabre.com
*.crt.aws.sabrenow.com
security.aeromexico.com
*.as.prod.asc.sabre.com
*.dai12.prod.aws.sabre.com
*.shs.cert.asc.sabre.com
*.ethiopianairlines.com
*.ci11.prod.aws.sabre.com
*.dxci31.dev.aws.sabre.com
db.rail.sabre.com
*.cert.getthere.net
*.dx01.cert.aws.sabre.com
*.asc.synxis.com
*.dx53.dev.aws.sabre.com
*.saudigulfairlines.com
*.airniugini.com.pg
*.dx02.cert.aws.sabre.com
*.lionairthai.com
*.flysilver.com
*.aem1.dev.aws.sabre.com
*.internal.prod.virtuallythere.com
*.thesetaihotels.com
asdev.avix.ix-as.prod.asc.sabre.com
*.vietnamairlines.com
shopholidays.de

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXsfz0x6M8F380sIGZU4
U5rMBRQ0O/Dy38l3uAvZSZ5TBeV4UWPpjyYMMBZ0YHG6dKu9544D0mb6aBQQtXDQ
fXRKkaPMnBJ8Ozzi2Nx7UixmF8DSYrjtaVyCcwdj/P3+IqI0oSdsjmrypHgDXOEi
S8oGGRGsPyjvkWw0vs9CWUHAN4R1hxQ194Xe/eEZXdBbNpWsaN8xm3eoZL2wZOwU
WBMqDrlxsGHcvuODgZ85kDfC9V6sMFU+t4Js2T+VnFwEsEIxQBgxoE7AEMBxOa0a
aTe9SQXSyxTykLJE3WQr1mqwbThZ/6WTMymrOEhTHFfsmQUkAMFVtoqY1M/NVvDB
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2046956014939428124948977478117966939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-30 18:13:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 09:08:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21899941593067405923560861277779900246877090964250276184664129376096831567958596707537041052800240165111224081239777157543990222290000904356134769507736270587196874787508524497848097080313370821583324331014696185037597390580709469665321330058814614716023926682565989039961863354894717399912582844736143898154278092371606581388911782494151307316682722637539526148109576932689418835979894652560116908340776229553887880173334120683054268257142576825311774401943667830223229120461328377736547051590339031791173439299375035632107679478653990413488351431849866523105473276932048098525424236318507455485246348535426106573187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx31.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p.cloud.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deasy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airserbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesetaihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert3.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyravn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx13.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci11.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-int.rail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascert.avix.ix-as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updatesite.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci12.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxci21.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx23.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airseychelles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem1.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkin.caymanairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopholidays.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caymanairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkin.malindoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadiannorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx11.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx22.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dx.ci21.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dx.ci22.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx54.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabredemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandarinoriental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trumphotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as.sswaem.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c.cloud.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loewshotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert4.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci12.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updatesite.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svc.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci14.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grand.hyatt.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.cert.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundorholidays.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deasy.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmweb.mn.amm.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx12.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai01.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regency.hyatt.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shs.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-cert.aeromexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai02.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci01.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci02.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bts.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-training.rail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontainebleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx11.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developer.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontainebleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientbaseonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx51.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shs.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agentconnect.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx11.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci13.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx52.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sundorholidays.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai11.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as.sswaem.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkin.lionairthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxci11.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx24.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silverairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aca.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airmalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profiles.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mandarinoriental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webservicesholidays.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem2.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantic-hotels.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx12.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clientbaseonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx21.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malindoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regency.hyatt.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx12.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx14.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx61.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx41.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crt.aws.sabrenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.aeromexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai12.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shs.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiopianairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci11.prod.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxci31.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.rail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx01.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asc.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx53.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saudigulfairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airniugini.com.pg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx02.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionairthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flysilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem1.dev.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.prod.virtuallythere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesetaihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdev.avix.ix-as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopholidays.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1eecbef6956810ad56116b6b254ed220c4a0e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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