imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:12:d9:40:d6:bf:6d:67:01:f1:6b:d0:99:f7:3e:ab was issued on by GlobalSign nv-sa.

With 117 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:12:d9:40:d6:bf:6d:67:01:f1:6b:d0:99:f7:3e:ab
Serial Number (int): 1427095759186149667032481404538011307
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:c1:32:b8:02:98:25:0a:e6:ba:3d:2d:20:ef:93:a5:73:80:71:b9
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 07:cd:56:f7:3b:db:ae:6d:47:c6:b0:1f:1e:d7:f3:42:09:49:4c:19
Fingerprint (sha256): 93:b7:d7:d2:e9:10:d7:39:9e:42:53:29:e8:3f:25:20:e4:e2:ca:82:de:b1:40:c1:2e:56:f0:82:dd:1e:6b:94

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

117

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sixtyhotels.com
test50.sabre.co.il
*.tapatiosprings.com
reservations.thelondonwesthollywood.com
demo-oda.avro.cert.aws.sabre.com
be-p2.synxis.com
*.theleela.com
test18.sabre.co.il
*.e9.cert.sabre.com
*.tsts.cert.sabre.com
*.avri.as.cert.asc.sabre.com
airconnectivity-gui.int.sabre.com
*.nomadetulum.com
*.pacificairlines.com.vn
20q4resint-waf.radixxuat.com
*.prod.sabre.com
*.thehotelzags.com
*.tsts.sabre.com
be-cms-api.sabrehospitality.com
checkin.superairjet.com
reservations.bucuti.com
weblaprod.avri.as.prod.asc.sabre.com
*.amm.kz.as.cert.asc.sabre.com
*.cert.sabre.com
demo-ls.avro.cert.aws.sabre.com
*.naplesgrande.com
be-integcert.synxis.com
airconnectivity-gui.cert.sabre.com
gol-dcci.prod.sabre.com
*.amm.pg.as.cert.asc.sabre.com
digitalexperience-b2c.voegol.com.br
*.stayaka.com
*.avri.as.prod.asc.sabre.com
*.thecrawfordhotel.com
*.sabre.com
b6-ro-c1.avro.cert.aws.sabre.com
checkin-cert.superairjet.com
digitalexperience-dc.voegol.com.br
suntours.sabre.co.il
*.thewilliamvale.com
pciproxy-uat.sabrepacific.net.au
*.huttonhotel.com
*.amm.nk.as.cert.asc.sabre.com
sabre360.sabre.co.il
imperva.com
webguru.lognet-systems.com
*.crp.as.cert.asc.sabre.com
*.synxis.com
airconnectivity-gui.sabre.com
gol-dcci.cert.sabre.com
*.bostonharborhotel.com
*.thedarcyhotel.com
dcci-cert.superairjet.com
shan.ophirtours.co.il
*.rittenhousehotel.com
*.avfo.as.dev.asc.sabre.com
*.avfo.as.prod.asc.sabre.com
b6-ro.avro.cert.aws.sabre.com
test.sabre.co.il
g3-ro-c1.avro.cert.aws.sabre.com
*.theoxfordhotel.com
be-euat-p2.synxis.com
praesum.sabretn.net.au
reservations.cheeca.com
*.crestahotels.com
*.downtowngrand.com
*.hotelcommonwealth.com
*.avix.ix-mn.prod.asc.sabre.com
vuelos.aerolineas.com.ar
*.amm.pg.as.prod.asc.sabre.com
*.sabrehospitality.com
digitalexperience-hom-dc.voegol.com.br
be-cms-euat-p2.synxis.com
digitalexperience-stage-b2c.voegol.com.br
*.cert.asc.sabre.com
book.standardhotels.com
*.amm.am.as.cert.asc.sabre.com
*.brasada.com
*.seymourhotels.com
*.therallyhotel.com
*.avix.ix-ws.prod.asc.sabre.com
b2-ro.avro.cert.aws.sabre.com
demo-odm.avro.cert.aws.sabre.com
digitalexperience-hom-b2c.voegol.com.br
hotelphg.com
*.crp.as.prod.asc.sabre.com
checkin-stage.superairjet.com
*.cert.int.sabre.com
bookings.hotelcommonwealth.com
*.themavenhotel.com
be-cms-api-p2.synxis.com
*.amm.jt.as.cert.asc.sabre.com
*.amm.ai.as.prod.asc.sabre.com
*.marbellaclub.com
weblacert.avri.as.cert.asc.sabre.com
webetdev.avix.ix-et.prod.asc.sabre.com
ladm360.sabre.co.il
*.clubquartershotels.com
*.devint.int.sabre.com
*.thedraytonhotel.com
*.catbirdhotel.com
*.thebocaraton.com
*.hotelphg.com
*.portolahotel.com
*.puenteromano.com
*.gisborough-hall.com
*.betulum.com
reservations.hotel-icon.com
reservations.tranquilitybay.com
reserve.sanderling-resort.com
b2-ro-c1.avro.cert.aws.sabre.com
praesum.sabrepacific.net.au
g3-ro.avro.cert.aws.sabre.com
*.amararesort.com
dcci.superairjet.com
*.vietnamairlines.com
reservations.villaflorence.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQ0TCCD7mgAwIBAgIQARLZQNa/bWcB8WvQmfc+qzANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgSDIgMjAyMTAeFw0yMTA5
MjMxNTAxMjdaFw0yMjAzMjUwNTU2MDNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFFnPlW89np9f/x7MZe
V4XvNJHDYapC4zuWPGtGzD+NASiVEfGH16tlvy1qKPcY/+2vlNuvcI0GkB+wRbdZ
Q8uMnsAmX+8tO8VYYyijA7Lb8/Zb0P0b+a9r0ZDQ62ZhfRemBbyHFFYin3aevNtL
zQt2T4ZGrjDAtX+oqRib+F6ay23rU/20zstfreK4quzlYOCKCqKwhtKGFW2wcrjR
YwpyLI8Oqey7kvxed2BB/yb1VMWJI5It/AOMUuzj/EF3KO1vDGkXvXCdlK4vdhF+
tZHTHYny0rVr71j8VGaakP7Wbw+YV2+l/UtThhbp72dfDd3WgnnhIDEN9HKDcOOv
DwIDAQABo4IN1zCCDdMwggv5BgNVHREEggvwMIIL7IIRKi5zaXh0eWhvdGVscy5j
b22CEnRlc3Q1MC5zYWJyZS5jby5pbIIUKi50YXBhdGlvc3ByaW5ncy5jb22CJ3Jl
c2VydmF0aW9ucy50aGVsb25kb253ZXN0aG9sbHl3b29kLmNvbYIgZGVtby1vZGEu
YXZyby5jZXJ0LmF3cy5zYWJyZS5jb22CEGJlLXAyLnN5bnhpcy5jb22CDioudGhl
bGVlbGEuY29tghJ0ZXN0MTguc2FicmUuY28uaWyCEyouZTkuY2VydC5zYWJyZS5j
b22CFSoudHN0cy5jZXJ0LnNhYnJlLmNvbYIcKi5hdnJpLmFzLmNlcnQuYXNjLnNh
YnJlLmNvbYIhYWlyY29ubmVjdGl2aXR5LWd1aS5pbnQuc2FicmUuY29tghEqLm5v
bWFkZXR1bHVtLmNvbYIYKi5wYWNpZmljYWlybGluZXMuY29tLnZughwyMHE0cmVz
aW50LXdhZi5yYWRpeHh1YXQuY29tghAqLnByb2Quc2FicmUuY29tghIqLnRoZWhv
dGVsemFncy5jb22CECoudHN0cy5zYWJyZS5jb22CH2JlLWNtcy1hcGkuc2FicmVo
b3NwaXRhbGl0eS5jb22CF2NoZWNraW4uc3VwZXJhaXJqZXQuY29tghdyZXNlcnZh
dGlvbnMuYnVjdXRpLmNvbYIkd2VibGFwcm9kLmF2cmkuYXMucHJvZC5hc2Muc2Fi
cmUuY29tgh4qLmFtbS5rei5hcy5jZXJ0LmFzYy5zYWJyZS5jb22CECouY2VydC5z
YWJyZS5jb22CH2RlbW8tbHMuYXZyby5jZXJ0LmF3cy5zYWJyZS5jb22CEioubmFw
bGVzZ3JhbmRlLmNvbYIXYmUtaW50ZWdjZXJ0LnN5bnhpcy5jb22CImFpcmNvbm5l
Y3Rpdml0eS1ndWkuY2VydC5zYWJyZS5jb22CF2dvbC1kY2NpLnByb2Quc2FicmUu
Y29tgh4qLmFtbS5wZy5hcy5jZXJ0LmFzYy5zYWJyZS5jb22CI2RpZ2l0YWxleHBl
cmllbmNlLWIyYy52b2Vnb2wuY29tLmJygg0qLnN0YXlha2EuY29tghwqLmF2cmku
YXMucHJvZC5hc2Muc2FicmUuY29tghYqLnRoZWNyYXdmb3JkaG90ZWwuY29tggsq
LnNhYnJlLmNvbYIgYjYtcm8tYzEuYXZyby5jZXJ0LmF3cy5zYWJyZS5jb22CHGNo
ZWNraW4tY2VydC5zdXBlcmFpcmpldC5jb22CImRpZ2l0YWxleHBlcmllbmNlLWRj
LnZvZWdvbC5jb20uYnKCFHN1bnRvdXJzLnNhYnJlLmNvLmlsghQqLnRoZXdpbGxp
YW12YWxlLmNvbYIgcGNpcHJveHktdWF0LnNhYnJlcGFjaWZpYy5uZXQuYXWCESou
aHV0dG9uaG90ZWwuY29tgh4qLmFtbS5uay5hcy5jZXJ0LmFzYy5zYWJyZS5jb22C
FHNhYnJlMzYwLnNhYnJlLmNvLmlsggtpbXBlcnZhLmNvbYIad2ViZ3VydS5sb2du
ZXQtc3lzdGVtcy5jb22CGyouY3JwLmFzLmNlcnQuYXNjLnNhYnJlLmNvbYIMKi5z
eW54aXMuY29tgh1haXJjb25uZWN0aXZpdHktZ3VpLnNhYnJlLmNvbYIXZ29sLWRj
Y2kuY2VydC5zYWJyZS5jb22CFyouYm9zdG9uaGFyYm9yaG90ZWwuY29tghMqLnRo
ZWRhcmN5aG90ZWwuY29tghlkY2NpLWNlcnQuc3VwZXJhaXJqZXQuY29tghVzaGFu
Lm9waGlydG91cnMuY28uaWyCFioucml0dGVuaG91c2Vob3RlbC5jb22CGyouYXZm
by5hcy5kZXYuYXNjLnNhYnJlLmNvbYIcKi5hdmZvLmFzLnByb2QuYXNjLnNhYnJl
LmNvbYIdYjYtcm8uYXZyby5jZXJ0LmF3cy5zYWJyZS5jb22CEHRlc3Quc2FicmUu
Y28uaWyCIGczLXJvLWMxLmF2cm8uY2VydC5hd3Muc2FicmUuY29tghQqLnRoZW94
Zm9yZGhvdGVsLmNvbYIVYmUtZXVhdC1wMi5zeW54aXMuY29tghZwcmFlc3VtLnNh
YnJldG4ubmV0LmF1ghdyZXNlcnZhdGlvbnMuY2hlZWNhLmNvbYISKi5jcmVzdGFo
b3RlbHMuY29tghMqLmRvd250b3duZ3JhbmQuY29tghcqLmhvdGVsY29tbW9ud2Vh
bHRoLmNvbYIfKi5hdml4Lml4LW1uLnByb2QuYXNjLnNhYnJlLmNvbYIYdnVlbG9z
LmFlcm9saW5lYXMuY29tLmFygh4qLmFtbS5wZy5hcy5wcm9kLmFzYy5zYWJyZS5j
b22CFiouc2FicmVob3NwaXRhbGl0eS5jb22CJmRpZ2l0YWxleHBlcmllbmNlLWhv
bS1kYy52b2Vnb2wuY29tLmJyghliZS1jbXMtZXVhdC1wMi5zeW54aXMuY29tgilk
aWdpdGFsZXhwZXJpZW5jZS1zdGFnZS1iMmMudm9lZ29sLmNvbS5icoIUKi5jZXJ0
LmFzYy5zYWJyZS5jb22CF2Jvb2suc3RhbmRhcmRob3RlbHMuY29tgh4qLmFtbS5h
bS5hcy5jZXJ0LmFzYy5zYWJyZS5jb22CDSouYnJhc2FkYS5jb22CEyouc2V5bW91
cmhvdGVscy5jb22CEyoudGhlcmFsbHlob3RlbC5jb22CHyouYXZpeC5peC13cy5w
cm9kLmFzYy5zYWJyZS5jb22CHWIyLXJvLmF2cm8uY2VydC5hd3Muc2FicmUuY29t
giBkZW1vLW9kbS5hdnJvLmNlcnQuYXdzLnNhYnJlLmNvbYInZGlnaXRhbGV4cGVy
aWVuY2UtaG9tLWIyYy52b2Vnb2wuY29tLmJyggxob3RlbHBoZy5jb22CGyouY3Jw
LmFzLnByb2QuYXNjLnNhYnJlLmNvbYIdY2hlY2tpbi1zdGFnZS5zdXBlcmFpcmpl
dC5jb22CFCouY2VydC5pbnQuc2FicmUuY29tgh5ib29raW5ncy5ob3RlbGNvbW1v
bndlYWx0aC5jb22CEyoudGhlbWF2ZW5ob3RlbC5jb22CGGJlLWNtcy1hcGktcDIu
c3lueGlzLmNvbYIeKi5hbW0uanQuYXMuY2VydC5hc2Muc2FicmUuY29tgh4qLmFt
bS5haS5hcy5wcm9kLmFzYy5zYWJyZS5jb22CEioubWFyYmVsbGFjbHViLmNvbYIk
d2VibGFjZXJ0LmF2cmkuYXMuY2VydC5hc2Muc2FicmUuY29tgiZ3ZWJldGRldi5h
dml4Lml4LWV0LnByb2QuYXNjLnNhYnJlLmNvbYITbGFkbTM2MC5zYWJyZS5jby5p
bIIYKi5jbHVicXVhcnRlcnNob3RlbHMuY29tghYqLmRldmludC5pbnQuc2FicmUu
Y29tghUqLnRoZWRyYXl0b25ob3RlbC5jb22CEiouY2F0YmlyZGhvdGVsLmNvbYIS
Ki50aGVib2NhcmF0b24uY29tgg4qLmhvdGVscGhnLmNvbYISKi5wb3J0b2xhaG90
ZWwuY29tghIqLnB1ZW50ZXJvbWFuby5jb22CFSouZ2lzYm9yb3VnaC1oYWxsLmNv
bYINKi5iZXR1bHVtLmNvbYIbcmVzZXJ2YXRpb25zLmhvdGVsLWljb24uY29tgh9y
ZXNlcnZhdGlvbnMudHJhbnF1aWxpdHliYXkuY29tgh1yZXNlcnZlLnNhbmRlcmxp
bmctcmVzb3J0LmNvbYIgYjItcm8tYzEuYXZyby5jZXJ0LmF3cy5zYWJyZS5jb22C
G3ByYWVzdW0uc2FicmVwYWNpZmljLm5ldC5hdYIdZzMtcm8uYXZyby5jZXJ0LmF3
cy5zYWJyZS5jb22CESouYW1hcmFyZXNvcnQuY29tghRkY2NpLnN1cGVyYWlyamV0
LmNvbYIVKi52aWV0bmFtYWlybGluZXMuY29tgh5yZXNlcnZhdGlvbnMudmlsbGFm
bG9yZW5jZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAdBgNVHQ4EFgQUs8EyuAKYJQrmuj0tIO+TpXOAcbkwVwYDVR0g
BFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRw
czovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAA
MIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xv
YmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYWgyMjAyMTBKBggrBgEFBQcw
AoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3Iz
ZHZ0bHNjYWgyMjAyMS5jcnQwHwYDVR0jBBgwFoAUKjS5qvq/PIjxR/LSEni+xeWq
sGkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9j
YS9nc2F0bGFzcjNkdnRsc2NhaDIyMDIxLmNybDATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAnJ41FKhthr7Q049xwjhgDz9ElYDeukwjJwpO
9jI0gC0syAeH2827boNIXeDJl5IbMyXt/Y25d5DNoK+5mkyFIRgKUNCf9d8BE/Z3
BRq2Lr/Guc7nLagMbHz3RINOnAgxO7drwFB/BIs/9Xw9gGAIcLNPSgykoFWyW62D
x7ksH8hjlr7onfqTcJUKhGCcqTR4drDF0hFAIR50i1qOF0mLzVLdPeJQ0Xez8eMW
A3cGGg+YAPvIiIDO8e1nUTN4HCoJ8OaS+gfiQX0J8ZXRSkfPZHsEF0WT3UXa8lMo
MV+Ki6dwKveiq86ssSO57m+n6KvofoSbnSSiomO4XIs5YPZnMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFFnPlW89np9f/x7MZe
V4XvNJHDYapC4zuWPGtGzD+NASiVEfGH16tlvy1qKPcY/+2vlNuvcI0GkB+wRbdZ
Q8uMnsAmX+8tO8VYYyijA7Lb8/Zb0P0b+a9r0ZDQ62ZhfRemBbyHFFYin3aevNtL
zQt2T4ZGrjDAtX+oqRib+F6ay23rU/20zstfreK4quzlYOCKCqKwhtKGFW2wcrjR
YwpyLI8Oqey7kvxed2BB/yb1VMWJI5It/AOMUuzj/EF3KO1vDGkXvXCdlK4vdhF+
tZHTHYny0rVr71j8VGaakP7Wbw+YV2+l/UtThhbp72dfDd3WgnnhIDEN9HKDcOOv
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1427095759186149667032481404538011307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 15:01:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 05:56:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22857650303242154022883994915102321366104219574997255199939920733658960385185648350708148539357203707351311982349467971826590839346648126056690921834957296082944701441513083216040074023395586197835493960249616490529444326746407522393591489054749964372843374005100006912518040572526224445273394243557730149747977852333322551733242267834504116308835286555935767083801644795581310012788992273527236066868399557863502601096118659708232790344992631272093440874584788452185500699820112737608066749387242563493474914604621261604067636809784976669371153351930195408806860632848354106184557707623954580226442455170106276425487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test50.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapatiosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.thelondonwesthollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oda.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test18.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomadetulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificairlines.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20q4resint-waf.radixxuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehotelzags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bucuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblaprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.kz.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-ls.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesgrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-integcert.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrawfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntours.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewilliamvale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pciproxy-uat.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huttonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.nk.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webguru.lognet-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonharborhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedarcyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shan.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittenhousehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoxfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabretn.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.cheeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crestahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtowngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-mn.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuelos.aerolineas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-stage-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.standardhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.am.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therallyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-ws.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-odm.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themavenhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.jt.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.ai.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblacert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetdev.avix.ix-et.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladm360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubquartershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedraytonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portolahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puenteromano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisborough-hall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotel-icon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tranquilitybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sanderling-resort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amararesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villaflorence.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3c132b80298250ae6ba3d2d20ef93a5738071b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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