imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:f7:20:9d:ab:2d:01:73:ff:6f:a2:e7:9d:cc:27:e8 was issued on by GlobalSign nv-sa.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f7:20:9d:ab:2d:01:73:ff:6f:a2:e7:9d:cc:27:e8
Serial Number (int): 2612386848748195093586233880837105640
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 60:b8:f5:0f:52:0e:a6:6e:cb:fe:98:b6:f4:a7:19:56:18:0d:61:34
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): d5:f6:8f:f0:44:78:e2:32:13:ae:50:40:6e:50:7d:1e:d1:c2:10:aa
Fingerprint (sha256): 83:bd:ae:cd:06:b8:45:5c:16:42:79:c0:00:3c:95:02:79:3d:18:24:91:c6:cf:38:7b:e7:b2:48:f0:10:ed:f4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.med.harvard.edu
cgap-wolf.hms.harvard.edu
cgap.hms.harvard.edu
*.hcp.med.harvard.edu
cgap-msa.hms.harvard.edu
*.wyss.harvard.edu
apps.hms.harvard.edu
xwebservices.hms.harvard.edu
cgap-devtest.hms.harvard.edu
calendars.med.harvard.edu
*.hms.harvard.edu
*.cbmi.med.harvard.edu
amprod.hms.harvard.edu
masscpr-sharing.hms.harvard.edu
genetics.hms.harvard.edu
bioplex.hms.harvard.edu
staging.4dnucleome.org
*.admissions.hms.harvard.edu
cgap-mgb.hms.harvard.edu
data.4dnucleome.org
security.hms.harvard.edu
admissions.gradeducation.hms.harvard.edu
*.harvard.edu
imperva.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWb49qBde4C8mvOM6P3p
UV+GqTlo8sR6jCfr7epxsahUNqYqNj6rnEPU+VeUphxhP7D1slh5GbqiuX19azGW
lKnIF9dZ7noY3K1im/CCRpzS7+C9L4447AsASfgY0pkr1owZJ4ebUJn1NRsH+H3T
0zxeG2zvLpraqlKX/+YD2q/8/zts6etByZmV/x38HD5QPooN91bDsGt/dvPxFd+g
nIm//NnfRFjQYXpTpb7sz1wp55XPipBpwzPW8tl++Q5fGyjGtzVA4AIyYZTjeF4O
0tdLVOwu08zXIC9nMU8G7U106yJNnCg44GbAdNFx82Qh7vR4jJMmJBhDePEmebhE
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2612386848748195093586233880837105640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 03:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 03:58:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16335518979399163416428818430220833003239948209864129673852171509352053139223773099683061849851401839209903120476742829281787971150187868657943986023679902868401978081214580430982874887218227113662064517734213415752235995683108945656179094107166814826380926873938380778525337666376260872594463444584364447186736813998408855031174602686888600815774885312038480295853859154090631261607717823949846425144448697036407053353769380780720418697203045685421951441850775235802189657095731724297040378631496366228763815884293629978194445415737355652316031606835633005346848686575802406554539989127139357986162984303012093641729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgap-wolf.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgap.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hcp.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgap-msa.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyss.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwebservices.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgap-devtest.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendars.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbmi.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amprod.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masscpr-sharing.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioplex.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.4dnucleome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admissions.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgap-mgb.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.4dnucleome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.gradeducation.hms.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60b8f50f520ea66ecbfe98b6f4a71956180d6134
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00223f62728c0ca6cdb30f09ab60876a63a676cf13bd9765e6f75148a2824ce6494495c6b0d1ffb39cec7dc5ed6dc719dd6d574f05dd4d5d4d9cf66e0059893b54020da11d2eb939b7b4206daa2da50fe49981f877ce9d0f137ce99942ad37afab58a779fb89d7256fcd825d54c6c7dd7eae691507a4e298c0c25115484da7832eee7ebcf217fc4f8cfb629d44c682f94d686c62fcf160efc85b224640aa0cb87e82e4db5528808b4bb6c3baaa74eae1c68f50fa5c49fbc76a8dcf70c882294e7c8da8a2023b260a36e0e952f4a217f78bcd1eb2cdfc2abf28ba387339c314233893045dfb3a69a618e2526ede633d043ca9cca188aa1df8d57bb71f816e723fe9