imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:8f:fe:8b:35:50:34:a6:d5:dc:3b:e5:d0:d1:f0:de was issued on by GlobalSign nv-sa.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8f:fe:8b:35:50:34:a6:d5:dc:3b:e5:d0:d1:f0:de
Serial Number (int): 2076889207808981457541618456713097438
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 51:9f:bb:eb:39:39:a0:f4:5c:ce:23:55:1f:fb:8a:c1:6e:f9:12:b6
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 7a:18:74:a6:51:f4:3c:3f:0b:9b:b6:a2:59:d8:8b:57:60:01:60:40
Fingerprint (sha256): 84:3c:81:f7:6c:7c:0d:03:e5:28:94:5f:1e:68:e8:bd:88:14:94:0e:8b:4f:7c:bb:65:a8:46:57:25:5a:8a:3c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsep.in
detailedassessment.com
v2.mindspark.in
student.detailedassessment.com
www.aqad.in
www.assettalentsearch.com
o.mindspark.in
assetdynamic.com
www.assetonline.in
ov.mindspark.in
www.lsep.in
assettalentsearch.com
www.ei-usa.com
www.mindspark.in
www.detailedassessment.com
teacher.detailedassessment.com
assetonline.in
imperva.com
*.ei.study
learn.mindspark.in
*.mindspark.in
ei-usa.com
ei.study
mindspark.in
test.detailedassessment.com
aqad.in
solappcms.lsep.in
www.assetdynamic.com
shiksha.mindspark.in
aqadcbse.mindspark.in
v.mindspark.in

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dfI4dTuwYqlUDuvF0oX
k+fWJ7IBZ7O4VF4RKv0YYJHJDtRlrzPyluuOysHFImIeh29nzNUfXPMBvoNEzWKT
GXMOURG4sRO6h5AiHdtCcRvTG5KFF592Yl+Natjp7QQkS1agThIirHyCHC1PTkGY
OfgCnRaKBTxsZqBWZZcmDV4sa7tttAL8LTMMlNiIFb2Jks9LsDSE2vPBRRE3Zvp6
LINuBqG2d+AZg4itAFvmvlutMAkO9dp/fBAytkWJenJtfGyGHJFjrV/ruNhmNgJZ
msOFgR9qnDrNvYxCP/GCRw+QDdfPedk9qKbcZAUMTl0hkk1Y3sW3YbrYojWRDIj5
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2076889207808981457541618456713097438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 06:48:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 06:48:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26490213137322152521822912775593596045418010777686414005534293999306770644179068253827867885966051219714691483734623902547139022915208807919972203725568477578966551204185364166578442585050886777285324775344183647633750917099719579956745896471792509809528675219086509979367921808960478580733752701004931573916380110900862878075361978365677547331493362817685198029159016096186409889011464428561659932446295127792722643245150945661053515496842752771766003498432829289985297724057998377075190406733153539135671611392549455609098449867822265851476066266567476617351683833314867629506066131430132314072925262175463876917571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ov.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solappcms.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiksha.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqadcbse.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mindspark.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							519fbbeb3939a0f45cce23551ffb8ac16ef912b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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