imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:30:12:1c:07:39:6d:b6:bd:b8:50:2c:2a:0c:b1:23 was issued on by GlobalSign nv-sa.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:30:12:1c:07:39:6d:b6:bd:b8:50:2c:2a:0c:b1:23
Serial Number (int): 1578825548991825677934622923832471843
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d8:9e:54:3d:2d:9e:ce:11:7a:3c:71:59:1c:68:ac:42:a9:4e:b8:02
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): aa:ee:60:c4:4b:53:3a:73:7c:36:03:e1:9d:9b:4b:68:61:80:84:a6
Fingerprint (sha256): 8a:7c:e8:6a:df:70:73:18:10:7a:a2:b1:bc:aa:6e:d2:26:da:0e:22:16:10:ec:fd:bc:30:ac:08:5e:8a:38:f5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lvrlakebuenavista.mynuvola.com
opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com
reservations.hoteldanieli.com
reservations.villarspalace.ch
accounts-gcp.int.sabre.com
apigw.israir.co.il
elbit.sabre.co.il
apigw.ophirtours.co.il
reservations.tfehotels.com
reservations.innsofaurora.com
apigw.nehoratours.co.il
opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com
webouprod.avri.as.prod.asc.sabre.com
www.1p01.usc1.int.planning-optimization.sabre.com
airjapan-ext-api-cert-ase1.ezycommerce.sabre.com
manta-api-ase1.ezycommerce.sabre.com
reservations.villarsvictoria.ch
reservation.lamaisonfavart.com
crouter-ngp.int.sabre.com
am.reaccom-manager.cert.sabre.com
opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com
reservations.grandbeachhotel.com
reservations.showboathotelac.com
aerok-api-cert-ase1.ezycommerce.sabre.com
u0-ro.avro.cert.aws.sabre.com
weboucert.avri.as.cert.asc.sabre.com
aerok-ext-api-ase1.ezycommerce.sabre.com
asreporting-us-central.cert.sabre.com
su.reaccom-manager.cert.sabre.com
sud.res.radixxcert.com
u0-ro-c1.avro.cert.aws.sabre.com
reservations.vibehotels.com
bedrooms.sohohouse.com
reservations.theinterlude.com.au
webarcert.avri.as.cert.asc.sabre.com
admin-cert-ew3.ezycommerce.sabre.com
reserve.cambridgebeaches.com
bon.res.radixxhost.com
reservations.hotelderek.com
apigw.caspitours.co.il
webtest.x0.ix.cert.sabre.com
caw-f9.cert.sabre.com
bon.dcs.radixxhost.com
ey.reaccom-manager.cert.sabre.com
webarprod.avri.as.prod.asc.sabre.com
mondriancondesa.mynuvola.com
skyexpress-api-cert.ezypayment.sabre.com
skyexpress-ext-api-ew3.ezycommerce.sabre.com
reservation.marinobeach.com
sud.dcs.radixxcert.com
airjapan-api-cert-ase1.ezycommerce.sabre.com
wcp-int.getthere.net
airjapan-api-ase1.ezycommerce.sabre.com
bon.app.radixxhost.com
accounts.gke.int.havail.sabre.com
aerok-api-ase1.ezycommerce.sabre.com
hotels.cert.havail.sabre.com
cps.stc.sabre.com
reservations.sociallivingcollection.com
admin-ew3.ezycommerce.sabre.com
fccs.sabre.com
travelextras-ngp.int.sabre.com
6s.reaccom-manager.cert.sabre.com
reservations.soneva.com
opsmobile.amm.sv.as.cert.asc.sabre.com
aerok-ext-api-cert-ase1.ezycommerce.sabre.com
book.bunkhousehotels.com
imperva.com
airjapan-ext-api-ase1.ezycommerce.sabre.com
reservations.villarslodge.ch
sudanair-ext-api-ase1.ezycommerce.sabre.com
opsmobile.mq.as.cert.asc.sabre.com
sud.appota.radixxcert.com
az.reaccom-manager.cert.sabre.com
cert.cps.stc.sabre.com
sud.app.radixxcert.com
bon.appota.radixxhost.com
www.vc01.usc1.int.planning-optimization.sabre.com
demo.avfo.as.cert.asc.sabre.com
sudanair-api-cert.ezypayment.sabre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bANYwqMl8Eh2fxoAtO6
8OQodYuGwsUzIaHocvpFhkGJqyKjrdPh8/zDJhhoYb8WSoW2ACurZy9oZUDs8PLD
EjulMDM2OxSJVQRpWrhDjvlPlml0XI8M7Dk4EIRt/Y1bK9Ai70aFd34rLUc7wdXh
qZoLQuKMn7K3MD67UVR84ggiaIHArp+BYFYBabYOJaT0Nqv59FzObSh3T25N4/BA
wBq0mZRJB+ozXZkEcL1Bdmc1c2DkNSve2Md0ICt8ZPKTxIbKhrgY20y9lEAinfKS
c6WPogmsesntjjyhnuYZDLTpkeRjSLz7LMndXgbyaDanQC5EfJEpUKkKnKAs3Ueu
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1578825548991825677934622923832471843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 14:31:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 14:31:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985480018555399402613011829797998182046304481983034071235585588160164633350614069837951484927545898544918962017332048382054229892099594825636010161752873272250182296045766457682031330444075296829974969701630305766777832116078868653717887853562010450751754672978957454778958121197399438506214643136831422771806825940380825531847556490088082039721605528558641887537561098289100211790238277853425666920314702756429399367132059123055517660776993608063993757296679577687740436525405068525480613258240777147255609668397232343895440077263236626777567218069093278015298719615324948142129691956053947271019103960908178107991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvrlakebuenavista.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hoteldanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarspalace.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-gcp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.israir.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbit.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tfehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.innsofaurora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.nehoratours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webouprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1p01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarsvictoria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.lamaisonfavart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouter-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.grandbeachhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.showboathotelac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboucert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asreporting-us-central.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.res.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.vibehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedrooms.sohohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.theinterlude.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarcert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.cambridgebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelderek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.caspitours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.x0.ix.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondriancondesa.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.marinobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.dcs.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.gke.int.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.cert.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.sociallivingcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccs.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelextras-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6s.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.soneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.bunkhousehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarslodge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.mq.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.appota.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.app.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vc01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.avfo.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d89e543d2d9ece117a3c71591c68ac42a94eb802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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