imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:27:4f:55:43:63:fa:6c:79:f7:c8:45:69:7f:64:bd was issued on by GlobalSign nv-sa.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:27:4f:55:43:63:fa:6c:79:f7:c8:45:69:7f:64:bd
Serial Number (int): 1533336638876638251678442364283610301
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 61:e0:18:90:96:c2:64:ef:0f:b6:08:ed:04:00:3f:3e:cc:cc:01:cb
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 25:5a:7d:ce:19:d7:da:86:01:f9:68:e7:0d:77:b6:d8:3b:99:c0:27
Fingerprint (sha256): 9c:b1:2f:46:9a:4b:fe:ed:cd:70:4f:57:6a:c3:e7:b8:50:c4:4f:53:6e:c5:96:71:03:1e:ec:3e:69:79:4f:98

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ppd.carrefour.com
pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
*.carrefourproperty.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
*.daas-cbq.carrefour.com
*.grupocarrefour.com.br
prep.apitms-transporteurs.carrefour.com
*.greenweez.com
*.voyages.carrefour.fr
*.training.carrefour.com
carrefour.it
carrefourproperty.com
*.voyages.carrefour.be
*.aloa-assurances.fr
fondation-carrefour.org
*.uat.carrefour-banque.fr
*.cartepass.fr
*.carrefour.pl
*.fondation-carrefour.org
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
ext-serviceclients.carla.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
*.carrefourproperty.fr
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
carrefourproperty.es
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
*.fr.carrefour.com
fr-mim.ppd.carrefour.com
carrefourproperty.it
imperva.com
*.croquetteland.com
*.carrefourproperty.it
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
*.carrefourproperty.es
*.carrefour.fr
dejbox.fr
*.carrefour.be
*.carrefourbelgium.be
financialwebsupplier.ppd.carrefour.com
carrefourproperty.fr
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
supeco.fr
carrefour.pl
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkJIOBL+3rJO3+cuThq
IHGzTzRDAA0fsY8gg0ToouVgeXKaEovm5OuOOMV5hmDuStis0qeo3+qTtQesagbE
5fNTtVGgTs+D9DB7FzfnqqBd3WdcvOHiGmKbIqJjq2K/SMV85qY1ZCNdmSrzpsbj
fNgfTz9uhTYIcJQcIMYpZ/hhrhHGfsJwkJJzjWLoASyU4SIFgRPG4BoJiB7zw5kh
8BaN3A3POXukmwvFOpne6y/HHMJuUw0bzswAjKIGXxf4geIST+4tbkfsLWi2FVHE
+CGH/yBo2S8/biWtwubfvPlNVCqGmyM5VgRgskJEVYhAwLsjdKyumpQmZL5gU1C4
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1533336638876638251678442364283610301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 17:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 17:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25544042722420724588342275717743604012296213127843188299554286616687464923524367261150559341278211041814470541790449701914553313236165374758466287231429815459816489488738555603585193836340881289533865142106329536110107882071360515191415780542142590267662713110998837876091727491919876381670863127596862667568242436692679262464873266850496237762696517360620879599743490985292013768498765446554987330374925257270433567258391315034367369891438372084612799214786046879824588434202971347576308808993002074754396820387580600746795973894768100968928780255143218138955940953033889468800678629969182377794346730606777726973989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.apitms-transporteurs.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-serviceclients.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61e0189096c264ef0fb608ed04003f3ecccc01cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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