imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:57:dd:46:a4:2f:9d:ca:77:11:44:23:8b:9b:88:d1 was issued on by GlobalSign nv-sa.

With 142 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:57:dd:46:a4:2f:9d:ca:77:11:44:23:8b:9b:88:d1
Serial Number (int): 1785445831784335164835590081810761937
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a9:8c:4c:f6:3a:db:f8:75:65:22:d9:13:3f:45:d6:45:31:ae:40:d4
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 1d:9c:bc:d8:9d:25:3c:f0:38:21:22:31:d0:74:d6:66:29:17:61:22
Fingerprint (sha256): 96:c8:91:cd:51:34:32:b3:48:cd:9c:62:d8:67:67:0a:47:2a:76:33:5c:9a:b8:bd:fb:bc:de:7f:b4:99:e2:0f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

142

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.easyio.com
solutionsnavigator.com
*.projects.jci-hitachi.com
*.shoppertraksucks.com
simplexfiredetection.com
*.infrastructure.jci.com
ecom-qa-na.com
*.easternsheetmetal.com
*.simplexfiredetection.com
r102estimatoremea.com
ecom-dev-yn1.com
fireclass.it
*.wotsecurity.com
*.campaign-stg.hitachiaircon.com
johnsoncontrols-mondial.com
wsjsociety.com
*.hitachiaircon.com
*.r102estimatoremea.com
dgatprogram.com
*.eeforum.net
*.adtsmarthome.co.uk
*.indiana.clickretail.com.br
*.go.solutions.johnsoncontrols.com
*.mmcarnot.com
*.ccureusergroup.com
*.ecom-dev-yn.com
*.ecom-qa-na.com
*.shoppertrac.com
*.shrinkindex.sensormatic.com
*.adt.ie
*.ecom-test-yn.com
*.sabroe.co.uk
*.ukarcdmz.com
adtsmarthome.co.uk
ccureusergroup.com
*.jci.flowis.com
*.mzxtechnology.com
shoppertraksux.com
*.jciarabia.com
jcibeta.com
onlinetechxchange.com
*.ecom-dev-yn1.com
*.ga.jci.com
*.johnsoncontrols.com
securitysat.cl
adt.ie
johnsoncontrols.com.eg
shoppertrac.com
*.partscenterapi.jci.com
*.yorkinnovation.com
ntsecurity.uk
*.fireclass.co.uk
*.mobile.cloudvue.com
jch-channelhub.com
mmcarnot.com
jcihub.com
*.jcihost.com
imperva.com
johnsoncontrols.ie
*.sterigenics.fortworth1.johnsoncontrols.com
shoppertraksucks.com
carnotrefrigeration.com
*.adtchile.cl
*.rescueair.com
*.solutionsnavigator.com
*.sensormatic-rec.com
*.johnsoncontrols-brasil.com
*.wsjsociety.com
logix-controls.com
ecom-test-yn.com
sensormatic-rec.com
*.shoppertrack-rct.com
*.shoppertrak.com
*.mmrefrigeration.com
*.adt.com.br
jciarabia.com
*.campaign.hitachiaircon.com
*.exacq.org
smaas-sensormatic.com
jcipat.com
*.jcipat.com
*.infuzion.sensormatic.com
*.jcitraininginstitute.com
*.shoppertrac-rct.com
*.hvacnavigator.com
*.gstlab.sensormatic.com
rescueair.com
*.smaas-sensormatic.com
*.securitysat.cl
ecom-dev-yn2.com
jcihost.com
*.tycofireandsecurity.com.au
*.fireclass.it
shoppertrack-rct.com
tempered.io
*.smartvue.com
*.ntsecurity.uk
*.solutions.jci.com
*.gordonbrothers.com.au
mmrefrigeration.com
*.autocall.com
jcimaxprogram.com
*.tycomonitor.com
*.jch-channelhub.com
*.hitachi-airconditioning.hu
mzxtechnology.com
tyco.ca
*.dgatprogram.com
*.johnsoncontrols.ie
wotsecurity.com
*.uk.jci.com
adtchile.cl
*.shoppertraksux.com
yorkinnovation.com
*.jcimaxprogram.com
*.tyco.ca
gordonbrothers.com.au
*.ecom-dev-yn2.com
*.jcihub.com
ecom-dev-yn.com
smartvue.com
*.channelhub.jch-marketingcenter.com
*.membercenter.americandynamics.net
hitachi-airconditioning.hu
eeforum.net
*.logix-controls.com
*.carnotrefrigeration.com
*.jcibeta.com
*.staging.channelhub.jch-marketingcenter.com
*.us.jci.com
3otec.com
shoppertrac-rct.com
*.johnsoncontrols.com.eg
*.onlinetechxchange.com
*.johnsoncontrols-mondial.com
jcitraininginstitute.com
sabroe.co.uk
*.3otec.com
*.tempered.io
*.testkan.tycois.com
hvacnavigator.com
*.tyco.be

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGOcXV69xF8f4xx1aAd
oqcTSbaep06GYUwXKfF1jSGD3lwY+hbdLkTTtVEd46e2PS8UZUsapZsHIRRUPWwo
JXv/Np+gquBoAFvsfcWbofWzLUf/jsUFMnfErucm08lGzZYbZvbo9rA7eK7LdvmR
x6UnlSxiWCMKsME7jGItJg7jmzM07vbRTL1Gl2TxPw0I8HP89Bvv6eiY5U0hzpmc
7PkrDa0efR6X1YsxPiB0WuZv+1FcM8bzIrWEa4wSINOjAz3NvVJ8oJYVC3xW/z6W
EPX5yyJJfQBcKL6aWJxP0Rz1n7o5fcqv2S2hV24c6EHxHBQtjKic2czu4i0Pr6Eu
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1785445831784335164835590081810761937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 18:19:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 18:19:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22913019850028132360695807742176387321238082812773048398709860197442948416110255136609548435963671576014072819163039674654807914526684177442488567928710510027075995107334952346853451285706058228562384645586760274598344159258130781086940833427894205270173257062552888291885937639979261213010487049030597837984427323915757441048939695325539211410522410621024791772016061343010243935361664551181541993722594942743863866252335673957680998993453881171211219559216065593828587938720193622067259134875889273771425689554852690839231346632832918590508783352494335159787687425420147892180608578565916118928311599385014536580733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects.jci-hitachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrastructure.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplexfiredetection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign-stg.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r102estimatoremea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiana.clickretail.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.solutions.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-qa-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrinkindex.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukarcdmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtsmarthome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccureusergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jci.flowis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ga.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adt.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partscenterapi.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.cloudvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcarnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterigenics.fortworth1.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertraksucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutionsnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-brasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsjsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-test-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensormatic-rec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jciarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.hitachiaircon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exacq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infuzion.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstlab.sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescueair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smaas-sensormatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysat.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcihost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycofireandsecurity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireclass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrack-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntsecurity.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutions.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycomonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jch-channelhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzxtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgatprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtchile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppertraksux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcimaxprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbrothers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecom-dev-yn2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dev-yn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membercenter.americandynamics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachi-airconditioning.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logix-controls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnotrefrigeration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcibeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.channelhub.jch-marketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppertrac-rct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinetechxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsoncontrols-mondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcitraininginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabroe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testkan.tycois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacnavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyco.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98c4cf63adbf8756522d9133f45d64531ae40d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef79641d80000040300483046022100b031353c04c5f707f07b7a6d04c1c588fa3a154900c961aee204663d4e614cc20221008d6321823b769642e14870ecbf21ffd94102b26e44881a45a11820ec0c95db6f0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef796421b0000040300483046022100c916f9eef5b97537071ea7dce539d499e48275e06492140944c6bf72b80a46f002210084437d7b9bd44e71911b0eb2800480999dfe29ac1265cc40874675d5629fbf8e00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef79643390000040300483046022100c434f9cd9ce84d0661c766d2a84a0647cbc832a5e374999f8771a72731b19ad0022100ee7f27c0195633b992b3b1b431518e784a45a9ce60b12efb4c9afeb76866e5a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ded316b5741af72ba5416d8fe2f03b46c1773a226724aafa743565f978d2a19e12770a14b607f09b46e65f18cc334b104cb1d4a428c868d224844b58867a3622caf39f77ea81df2bae687169d3561c5bb2801c87146c7bb6126a093daf69335346aa52cc8a691ff9a2969a6568d5464a491ed1e4a24199d9fd3253463a5ac1947bbe3190cdb7081d16448b79e240046b1e0a47f07b70dfc88005f733ce7ddd8115ddc552ec4d7297c59612f2bc65de35dd282acbc67b4dceaf930e539fa0a4f2ad0d452f0568847a87fa6d3f63c191ce8995f63375f34d5120053efbafd6c86fdb8568a13196c117a8fe00d2a1e192431f11a814a848dc3d5f9b6dfb0076c05