imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:8d:fc:db:54:c4:78:34:fd:9e:4f:2c:49:96:b0:83 was issued on by GlobalSign nv-sa.

With 127 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8d:fc:db:54:c4:78:34:fd:9e:4f:2c:49:96:b0:83
Serial Number (int): 2066470397260295360484595407143743619
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0f:71:35:9a:1d:d9:37:83:23:83:0e:2d:db:48:c9:51:24:5e:59:64
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): 29:20:9e:30:39:e2:89:93:47:6e:e0:63:35:17:de:b5:1d:68:84:02
Fingerprint (sha256): 88:e7:60:da:be:f3:a8:1b:e4:70:21:9e:6a:3c:fa:47:1f:fc:2e:3e:24:01:5a:00:b6:1e:c2:c1:68:e1:80:1c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate imperva.com

127

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jansulzer.com
hendrixautorepair.us
www.smidgensinc.com
tap2park.ca
www.designearthsynergy.com
aerospacelogisticsgroup.com
growgreenpower2.com
alarmsystem.it
www.furrgroup.com
jeanrwilkey.com
www.wapiti-consulting.com
www.aerospacelogisticsgroup.com
www.sergiogildearana.com
localfinanceco.com
www.learningchangeslives.org.au
www.nunucollective.org
loanrepaircenter.com
www.mildridesua.com
www.sargentopimienta.com.mx
www.piercinghq.com.au
www.openclimate.org
www.paboard.com
aim18.org
wholehealthrd.com
www.tap2park.ca
greenhalghlaw.com
piercinghq.com.au
www.ianleightonhorsemanship.com
www.usscochrane.org
www.houghzaccone.com
wapiti-consulting.com
www.jansulzer.com
warnersmith.org
www.buggycarwash.com
www.gajalu.com
moviesandshakers.com
www.threadberries.com
furrgroup.com
novooo.com
www.alarmsystem.it
www.boutique-sc.com
www.cooperfamilylawpc.com
imperva.com
prochoiceroofing.com
cooperfamilylawpc.com
www.greenhalghlaw.com
www.voxphotoblog.com
houghzaccone.com
www.biosourcerecruiters.com
www.loanrepaircenter.com
www.warnersmith.org
learningchangeslives.org.au
peachstateopera.org
dcfchurch.ca
boutique-sc.com
anbhotels.com
cultureshiftlabs.com
communitypresbyterian.org
smidgensinc.com
www.bitcoinf.org
nunucollective.org
thomasblackwellspeak.com
www.icsrpa.com
www.localfinanceco.com
www.hendrixautorepair.us
threadberries.com
breakthroughtalentsolutions.com
www.voxphotography.com
www.myroyalphotobooth.com
voxphotoblog.com
www.oggmarketinggroup.com
performancetrends.com
www.aim18.org
www.firesprings.com
www.summitscheduler.com
biosourcerecruiters.com
future-link.biz
sergiogildearana.com
elaineclayton.com
gajalu.com
seed-publishing-group.com
www.jeanrwilkey.com
usscochrane.org
www.bobsinsulation.com
ianleightonhorsemanship.com
papremisealert.com
www.gffg-network.com
colostrumskincare.com
paboard.com
jcomminc.com
www.seed-publishing-group.com
sociedadcardiologicacolombiana.co
www.romrom.com
oggmarketinggroup.com
www.moviesandshakers.com
www.breakthroughtalentsolutions.com
www.novooo.com
www.dcfchurch.ca
www.jcomminc.com
www.performancetrends.com
summitscheduler.com
romrom.com
www.papremisealert.com
buggycarwash.com
themoneymaniac.com
mildridesua.com
www.colostrumskincare.com
www.themoneymaniac.com
www.wholehealthrd.com
www.cultureshiftlabs.com
www.uniquejapan.com
www.anbhotels.com
www.communitypresbyterian.org
www.nickgould.net
bobsinsulation.com
voxphotography.com
www.future-link.biz
icsrpa.com
www.thomasblackwellspeak.com
bitcoinf.org
www.sociedadcardiologicacolombiana.co
gffg-network.com
designearthsynergy.com
www.peachstateopera.org
www.elaineclayton.com
myroyalphotobooth.com
www.growgreenpower2.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSQ4QHLzXCW/7CxdsJdb
tLvYpD8ogS29UIjze8cfx+scTpawLyJURplPk8+Txa7cSaXXO9TKJR2iwKeyDH/G
Vq7kogDcB3WpVLW1Dun87B17HQBBG+F5qu6sUab5Gwo2YFbkeuD5KcaY2+zAv7fw
egzuW5DmrkFYca6diLbv+bZA6SQTqzgNB10aQ6jlAcnS6qlfY16rr0e46mxq6Og4
HUe+rdznnugA0n2sbsuWCKM5LE8dkZIS9B2cICotdja2Yn//d3FkCTvT+aKwDFiS
eXAaXnJu6J9/sqGGHYzaX0ZkJpRBjvSbP1pKGSnpOoDQbTbb3z3FmiO2MohS+aWO
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2066470397260295360484595407143743619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-06 22:48:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 22:48:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17817461616435036768371864722127250081514624750353203684053691651945516209387890544904895207733630961251650186005583694208682781814787247261077931187030047602685116381524700346155134447623659830280276857315223089968008871987117636917133014820361910136098224405865427465162945067128800674954311020369209959522478556449064416163534578670394696649035538124959399481041084820878727623257260766321182019426911378047720250184825619248021686809462170435727454162073745897540655336949963825320237509920552434994602709497926065394024616880102566027077577093411431824483963962809140630466316528729349686208763898517450047983177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2768 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jansulzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendrixautorepair.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smidgensinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tap2park.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designearthsynergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerospacelogisticsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growgreenpower2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alarmsystem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furrgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeanrwilkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wapiti-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aerospacelogisticsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sergiogildearana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localfinanceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningchangeslives.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nunucollective.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanrepaircenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mildridesua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sargentopimienta.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piercinghq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openclimate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aim18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholehealthrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tap2park.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhalghlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piercinghq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ianleightonhorsemanship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usscochrane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houghzaccone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapiti-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jansulzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnersmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buggycarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gajalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesandshakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threadberries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furrgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alarmsystem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutique-sc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperfamilylawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prochoiceroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperfamilylawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhalghlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxphotoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houghzaccone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biosourcerecruiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loanrepaircenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warnersmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningchangeslives.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachstateopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcfchurch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique-sc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureshiftlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitypresbyterian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smidgensinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunucollective.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasblackwellspeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icsrpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localfinanceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendrixautorepair.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threadberries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakthroughtalentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myroyalphotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxphotoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oggmarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancetrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aim18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firesprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summitscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biosourcerecruiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future-link.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergiogildearana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elaineclayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gajalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed-publishing-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeanrwilkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usscochrane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobsinsulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ianleightonhorsemanship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papremisealert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gffg-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colostrumskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcomminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seed-publishing-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sociedadcardiologicacolombiana.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oggmarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moviesandshakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakthroughtalentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcfchurch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcomminc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performancetrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papremisealert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buggycarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themoneymaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mildridesua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colostrumskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themoneymaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholehealthrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultureshiftlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniquejapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitypresbyterian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickgould.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobsinsulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.future-link.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsrpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasblackwellspeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sociedadcardiologicacolombiana.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gffg-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designearthsynergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peachstateopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elaineclayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myroyalphotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growgreenpower2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f71359a1dd9378323830e2ddb48c951245e5964
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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