imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:8c:4e:a7:40:34:e4:ae:4e:07:c8:52:90:f2:32:61 was issued on by GlobalSign nv-sa.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8c:4e:a7:40:34:e4:ae:4e:07:c8:52:90:f2:32:61
Serial Number (int): 2057744834903001139435813690592604769
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1a:8f:94:6c:6a:de:9d:79:71:6d:2a:2e:c2:c4:7f:0e:e4:c2:79:99
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 4a:a4:49:93:06:e7:6e:15:41:45:d0:8e:e7:73:cf:3b:ee:02:37:11
Fingerprint (sha256): 85:dc:da:9a:b3:24:96:5e:7b:29:29:b7:2e:13:da:9f:c9:46:f5:b6:e1:3b:4f:8a:a4:e0:2c:b2:fc:a1:d6:57

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rocks-ext.qa.holcim.digital
now.lafarge.com
zonda-eu-qa.holcim.digital
rmx-console-rmx-qa.ext.ocp.qa.lafargeholcim-go.com
ssolh.lhinside.com
geocycle.live
api.hssp.qa.holcim.digital
rocks-ext.holcim.digital
myorder-api-qa.holcim.digital
zonda-eu.holcim.digital
zonda-mea-qa.holcim.digital
now.neueplastrec.ch
zonda-umg-eu.ext.ocp.qa.lafargeholcim-go.com
api.hssp.dev.holcim.digital
td.holcim.digital
geocycle.holcim.digital
now.holcim.ch
api.hssp.holcim.digital
now.holcim.com
lhim.ea.holcim.net
filebeat-meraki-qa.holcim.digital
imperva.com
geocycle.io
heim.ea.holcim.net
qa.now.geocycle.com
rmxd-integration-rmxd-prod.ext.ocp.prod.lafargeholcim-go.com
filebeat-meraki-dev.holcim.digital
www.mygeocycle.com
www.geocycle.io
zonda-mea.holcim.digital
afrportaldev.holcim.digital
fireq-web-fireq-prod.ext.ocp.prod.lafargeholcim-go.com
now-qa-lafarge.holcim.digital
zonda-eu-qr.ext.ocp.qa.lafargeholcim-go.com
now-qa-eu.holcim.com
heim-qa.ea.holcim.net
rmx-console-rmx-prod.apps.lfgh.ocpqa.lafargeholcim-go.com
fireq-mobile-webapi-fireq-prod.ext.ocp.prod.lafargeholcim-go.com
rmxd-integration-rmxd-qa.ext.ocp.qa.lafargeholcim-go.com
www.geocycle.live
rmxd-integration-rmxd-ua.ext.ocp.qa.lafargeholcim-go.com
filebeat-meraki.holcim.digital
lhim-qa.ea.holcim.net
mygeocycle.com
td-qa.holcim.digital
now.geocycle.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAUOsHd+UmO6rC42q7By
fjWjL8GbrO4PW5TXfCt3+Ub/ZdQK8E1HwVzmFhUGdocpJnMFXrxfL57JuvQWEtSq
NLDIN2iKwU5EmyHm5K3mNhL/5nuapkeFhTRtF2bJ+Xcc+q1GM0ywPSBnqrmg8nzr
zcs5XC3hU/gSsIPEcr1u8GYekBsFXkniJDumoBhKhLTm0aGqAF9P5/CGrYYIwMD7
+abRIhBMNtqM0RTBiplYGPR3J7lKucGCCy7Vqs/Ul/mkRK0b2RHyONpNgktOpBOl
rYtBLlLhksYUddAAJwJY/kJsIcV+VGnFGW/UfhIJ9M5yTCioMiS+eNNFrPan1W7F
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2057744834903001139435813690592604769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 16:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 16:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16665950142629635525091704188802669692016421631439665195726716966609159914122549701818548582263270363511198434583289056667489984866708563999150331386432464179542157732211203912374363784452094344634226982222749380458978960139244627910419668716250477672324710185625454483019998529060650652085791051013858417871298842382523741233159940267865011577411162277105663635260333198401522703332912880680142702504652707054946859921694509113065381178130262163393928400896584385270228744564264618049461608479724710024114570740503309008948301287084678362513103915500919378118791536371071541115561278113753589271996448383615617647911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocks-ext.qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.lafarge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx-console-rmx-qa.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssolh.lhinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocks-ext.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myorder-api-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-mea-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.neueplastrec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-umg-eu.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.dev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.holcim.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hssp.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhim.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocycle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heim.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.now.geocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki-dev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygeocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocycle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-mea.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrportaldev.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireq-web-fireq-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now-qa-lafarge.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonda-eu-qr.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now-qa-eu.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heim-qa.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx-console-rmx-prod.apps.lfgh.ocpqa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireq-mobile-webapi-fireq-prod.ext.ocp.prod.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-qa.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocycle.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxd-integration-rmxd-ua.ext.ocp.qa.lafargeholcim-go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebeat-meraki.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhim-qa.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygeocycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td-qa.holcim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.geocycle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a8f946c6ade9d79716d2a2ec2c47f0ee4c27999
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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