imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:27:63:d4:41:09:5b:13:4a:7b:75:31:f1:10:61:78 was issued on by GlobalSign nv-sa.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:27:63:d4:41:09:5b:13:4a:7b:75:31:f1:10:61:78
Serial Number (int): 1533752348316824751797088932494074232
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e1:b6:f9:46:b9:d2:d7:fa:40:00:c9:38:17:9c:b7:41:cb:ae:8f:67
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): ef:9f:70:1d:b8:67:29:e7:8f:da:5b:a5:13:85:7a:11:97:66:2d:e6
Fingerprint (sha256): 94:fa:1d:4f:28:4f:68:30:16:16:64:2b:ab:d8:94:9a:23:0a:5f:d3:b9:31:ec:11:40:a9:ba:ab:11:50:84:26

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eriss.nhs.uk
www.covid19-cas.nhs.uk
*.plymouth.nhs.uk
*.norfolkcommunityhealthandcare.nhs.uk
*.continuityofcarer-tools.nhs.uk
*.royalmarsden.nhs.uk
frimleyhealthandcare.org.uk
frimleyhealthcharity.org
*.frimleyhealthandcare.org.uk
*.somersetccg.nhs.uk
continuityofcarer-tools.nhs.uk
*.dhc.nhs.uk
*.nwas.nhs.uk
woundcarelite.kentcht.nhs.uk
www.cypmh-model.nhs.uk
bradfordhospitals.nhs.uk
healthgis.nhs.uk
*.ncic.nhs.uk
cypmh-model.nhs.uk
*.scwcsu.nhs.uk
*.lnwh.nhs.uk
frimleyhealthcareercentre.org.uk
*.rwt.nhs.uk
*.frimleyhealthcharity.org
*.yorkhospitals.nhs.uk
*.bdct.nhs.uk
*.imperial.nhs.uk
lpft.nhs.uk
*.rwh-tr.nhs.uk
*.uhmb.nhs.uk
www.shropscommunityhealth.nhs.uk
ncic.nhs.uk
*.oxleas.nhs.uk
*.secureboundary.nhs.uk
*.frimleyhealth.nhs.uk
*.nhsla.com
*.slam.nhs.uk
*.homerton.nhs.uk
*.bthft.nhs.uk
*.thamesvalleysurreycarerecords.net
*.healthgis.nhs.uk
*.plymouthhospitals.nhs.uk
thamesvalleysurreycarerecords.net
*.chesterfieldroyal.nhs.uk
*.lpft.nhs.uk
*.yas.nhs.uk
*.kentcht.nhs.uk
mtw.nhs.uk
*.lthtr.nhs.uk
imperva.com
*.mtw.nhs.uk
*.frimleytraininghub.co.uk
*.rmh.nhs.uk
plymouthhospitals.nhs.uk
*.bradfordhospitals.nhs.uk
*.england.nhs.uk
*.ice-ni.nnuh.nhs.uk
webcentre-sch.smartmedia.net
covid19-cas.nhs.uk
*.frimleyhealthcareercentre.org.uk
eriss.nhs.uk
rmmatters.rmh.nhs.uk
norfolkcommunityhealthandcare.nhs.uk
*.cypmh-model.nhs.uk
lnwh.nhs.uk
*.shropcom.nhs.uk
yastransfers.yas.nhs.uk
scwcsu.nhs.uk
frimleytraininghub.co.uk
bdct.nhs.uk
*.uclh.nhs.uk
shropscommunityhealth.nhs.uk
training-sch.smartmedia.net

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHPTHyJaT81sbkIZW6tr
H+VLIpDticgN0+Wrh8C/QZr1hevk5YXqESobjCHNDiJhMmTgQeL0VHly6hfzYBHK
1BAaJn8UjNpUsS+WnqbHHrLpjdWPsxZWUVS/eRG4Ouc7hOY8NxkpZvz5+l2Gm7+N
Xkay65pDLd6OkWZNz9mJBBobZ00o3PhyPqpW3vtA2roVcmzjVSqyKgElsMFAtxpQ
glAq50X/6XARtuJQ9uORlMdRecABzAqA7MPGgQ5OPceQDJnjkYIN744qUkkk4IDM
q+SIU2ck1VD4yK4jJkvRn77u2KzhyqEayWvzko+RNl18HYn0OpCbujSG8VtPoiOO
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1533752348316824751797088932494074232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 17:03:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 17:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18235431200350939096237330265166374450725646805984158334105403396778208333834206754239615656961495492824342939779346906394718615970182581996152476283066233046682765593981192736590740506807668569805831953251993651677422822945024966650684026862654157984388409801719775611092718500655688242463886296809282191819228880906129897060293756623072847311633334081234791243813995231885213277678433819779131162654613101725692283810807189329256205704907405928778207108234693570919635158302892567505351937527865696119037394800602864027179983914916082319499970424099577022493231488180745383530234357759402699898542501731669886865081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eriss.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmarsden.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthandcare.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthandcare.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somersetccg.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woundcarelite.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperial.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwh-tr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhmb.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxleas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secureboundary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homerton.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thamesvalleysurreycarerecords.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamesvalleysurreycarerecords.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chesterfieldroyal.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lthtr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleytraininghub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ice-ni.nnuh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcentre-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eriss.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmmatters.rmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shropcom.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yastransfers.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleytraininghub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1b6f946b9d2d7fa4000c938179cb741cbae8f67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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