imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:15:89:cf:69:42:e2:a7:c0:b8:10:2e:84:15:89:f7 was issued on by GlobalSign nv-sa.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:15:89:cf:69:42:e2:a7:c0:b8:10:2e:84:15:89:f7
Serial Number (int): 1441061352736273469322963954131372535
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 49:37:30:12:38:30:ad:78:9d:7e:8e:36:5a:a8:80:b2:4d:ae:5a:0c
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 15:7d:44:0a:7f:e1:56:98:e0:78:ae:08:18:f0:15:37:bf:fe:ec:30
Fingerprint (sha256): 8d:3f:1d:e0:c4:da:7e:78:60:7c:7a:b6:67:ec:63:0e:d6:91:40:71:24:31:68:b9:87:68:cb:22:84:9a:36:39

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a3gt.wolterskluwer.es
*.accountantspace-dev.co.uk
*.finsit.net
miwolterskluwer.com
www.a3erp-portalempleado.net
*.wolterskluwer.it
a3innuva.wolterskluwer.es
*.accountantspace.co.uk
*.bpointsaas.it
*.cloud-dev.wolterskluwer.eu
*.taa.wolterskluwer.eu
*.foretagsplatsen.se
*.wktmdev.com
a3hrgo.wolterskluwer.es
imperva.com
*.a3software.com
lic1.sw.acclipse.com
a3erp-portalempleado.net
a3innuva-api.wolterskluwer.es
ipoc.enablonsaas.app
portalempleado.net
*.mod730.it
a3factura.wolterskluwer.es
www.portalempleado.net
*.miwolterskluwer.com
*.nextstudio.it
a3factura-smart.wolterskluwer.es

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9qvyGu3ilpSi+UVj83G
6xBYR93imv+Wic57CRyYcHWbiqmYYfvUkYLBfF1SBOsiVL0+6VvVieXvRiS5QKBo
SKfWQfmpeCT5KKZ2kSzfam0HUEZusV3CFeci+wWXK8BpN+g1Y1A09wFSMcZ5j5b5
6N71ObUEU1s1YYwRwPm5RkrMMJXRnLNRtFKlCNe0Jc6TJxSjTHlM7507K71oJGLt
6/T5dh1TyPg4/GFenIyFVjTPFVepF7j7Twf6556aySA86WCg2U3lzdB2zSvBGzv7
A/Xj6v3R/vCSkldKb7Ti53sluwRjhLGx+D5v0uREAz2oErAbSx/IXGfZpHk67I4l
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1441061352736273469322963954131372535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 17:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 17:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18159916017404679442735104138599512866548605567347657301779013137817475536740167561562114074132612259412201603998157283213339862547401233793085716288053505602002551483737576092909890605638115747005758533951695131732167101216385451884963492639903737618016461364540882855213304011653169753459113516793018358452231618684135542454971377207342549882547984210200114898944762980343163962959144992625060968110376949682251021280142801588354251153075881224423737247551081928983517254397415548442090897938497079120377651750746166089492900571247448440196427402902201705054045767019776720547492952198399349054590217907753905431931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (617 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3gt.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountantspace-dev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finsit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwolterskluwer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a3erp-portalempleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolterskluwer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3innuva.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountantspace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpointsaas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud-dev.wolterskluwer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taa.wolterskluwer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foretagsplatsen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wktmdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3hrgo.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lic1.sw.acclipse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3erp-portalempleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3innuva-api.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoc.enablonsaas.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalempleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mod730.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3factura.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalempleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miwolterskluwer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextstudio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3factura-smart.wolterskluwer.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							493730123830ad789d7e8e365aa880b24dae5a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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