imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:b3:5c:06:d5:12:bc:c1:fb:b1:6c:d4:e6:7a:9d:31 was issued on by GlobalSign nv-sa.

With 119 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b3:5c:06:d5:12:bc:c1:fb:b1:6c:d4:e6:7a:9d:31
Serial Number (int): 2260515656458120197632140130412830001
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:c1:32:b8:02:98:25:0a:e6:ba:3d:2d:20:ef:93:a5:73:80:71:b9
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): dc:d7:b0:cb:33:6d:ce:fb:f3:89:d3:c5:14:08:53:a1:46:5c:f3:23
Fingerprint (sha256): 9c:df:b4:45:dc:35:27:3e:c2:ab:d7:9f:cf:1b:49:38:95:36:4a:ac:6e:88:65:cb:1c:65:76:66:3e:b7:11:d6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

119

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sixtyhotels.com
test50.sabre.co.il
*.tapatiosprings.com
reservations.thelondonwesthollywood.com
demo-oda.avro.cert.aws.sabre.com
be-p2.synxis.com
*.theleela.com
test18.sabre.co.il
*.e9.cert.sabre.com
*.tsts.cert.sabre.com
*.avri.as.cert.asc.sabre.com
airconnectivity-gui.int.sabre.com
*.nomadetulum.com
*.pacificairlines.com.vn
20q4resint-waf.radixxuat.com
*.prod.sabre.com
*.thehotelzags.com
*.tsts.sabre.com
be-cms-api.sabrehospitality.com
checkin.superairjet.com
reservations.bucuti.com
weblaprod.avri.as.prod.asc.sabre.com
*.amm.kz.as.cert.asc.sabre.com
*.cert.sabre.com
demo-ls.avro.cert.aws.sabre.com
*.naplesgrande.com
be-integcert.synxis.com
airconnectivity-gui.cert.sabre.com
gol-dcci.prod.sabre.com
*.amm.pg.as.cert.asc.sabre.com
digitalexperience-b2c.voegol.com.br
*.stayaka.com
*.avri.as.prod.asc.sabre.com
*.thecrawfordhotel.com
*.sabre.com
b6-ro-c1.avro.cert.aws.sabre.com
checkin-cert.superairjet.com
digitalexperience-dc.voegol.com.br
suntours.sabre.co.il
*.thewilliamvale.com
pciproxy-uat.sabrepacific.net.au
*.huttonhotel.com
*.amm.nk.as.cert.asc.sabre.com
sabre360.sabre.co.il
imperva.com
webguru.lognet-systems.com
*.crp.as.cert.asc.sabre.com
*.synxis.com
airconnectivity-gui.sabre.com
gol-dcci.cert.sabre.com
*.bostonharborhotel.com
*.thedarcyhotel.com
dcci-cert.superairjet.com
shan.ophirtours.co.il
*.rittenhousehotel.com
*.avfo.as.dev.asc.sabre.com
*.avfo.as.prod.asc.sabre.com
b6-ro.avro.cert.aws.sabre.com
test.sabre.co.il
g3-ro-c1.avro.cert.aws.sabre.com
*.theoxfordhotel.com
be-euat-p2.synxis.com
praesum.sabretn.net.au
reservations.cheeca.com
*.crestahotels.com
*.downtowngrand.com
*.hotelcommonwealth.com
asdc5.dev.aws.sabrenow.com
*.avix.ix-mn.prod.asc.sabre.com
vuelos.aerolineas.com.ar
*.amm.pg.as.prod.asc.sabre.com
*.sabrehospitality.com
digitalexperience-hom-dc.voegol.com.br
be-cms-euat-p2.synxis.com
digitalexperience-stage-b2c.voegol.com.br
*.cert.asc.sabre.com
book.standardhotels.com
*.amm.am.as.cert.asc.sabre.com
*.brasada.com
*.seymourhotels.com
*.therallyhotel.com
*.avix.ix-ws.prod.asc.sabre.com
b2-ro.avro.cert.aws.sabre.com
demo-odm.avro.cert.aws.sabre.com
digitalexperience-hom-b2c.voegol.com.br
hotelphg.com
*.crp.as.prod.asc.sabre.com
checkin-stage.superairjet.com
*.cert.int.sabre.com
bookings.hotelcommonwealth.com
*.themavenhotel.com
be-cms-api-p2.synxis.com
*.amm.jt.as.cert.asc.sabre.com
*.angadartshotel.com
*.amm.ai.as.prod.asc.sabre.com
*.marbellaclub.com
weblacert.avri.as.cert.asc.sabre.com
webetdev.avix.ix-et.prod.asc.sabre.com
ladm360.sabre.co.il
*.clubquartershotels.com
*.devint.int.sabre.com
*.thedraytonhotel.com
*.catbirdhotel.com
*.thebocaraton.com
*.hotelphg.com
*.portolahotel.com
*.puenteromano.com
*.gisborough-hall.com
*.betulum.com
reservations.hotel-icon.com
reservations.tranquilitybay.com
reserve.sanderling-resort.com
b2-ro-c1.avro.cert.aws.sabre.com
praesum.sabrepacific.net.au
g3-ro.avro.cert.aws.sabre.com
*.amararesort.com
dcci.superairjet.com
*.vietnamairlines.com
reservations.villaflorence.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFFnPlW89np9f/x7MZe
V4XvNJHDYapC4zuWPGtGzD+NASiVEfGH16tlvy1qKPcY/+2vlNuvcI0GkB+wRbdZ
Q8uMnsAmX+8tO8VYYyijA7Lb8/Zb0P0b+a9r0ZDQ62ZhfRemBbyHFFYin3aevNtL
zQt2T4ZGrjDAtX+oqRib+F6ay23rU/20zstfreK4quzlYOCKCqKwhtKGFW2wcrjR
YwpyLI8Oqey7kvxed2BB/yb1VMWJI5It/AOMUuzj/EF3KO1vDGkXvXCdlK4vdhF+
tZHTHYny0rVr71j8VGaakP7Wbw+YV2+l/UtThhbp72dfDd3WgnnhIDEN9HKDcOOv
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2260515656458120197632140130412830001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-25 08:54:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-25 23:49:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22857650303242154022883994915102321366104219574997255199939920733658960385185648350708148539357203707351311982349467971826590839346648126056690921834957296082944701441513083216040074023395586197835493960249616490529444326746407522393591489054749964372843374005100006912518040572526224445273394243557730149747977852333322551733242267834504116308835286555935767083801644795581310012788992273527236066868399557863502601096118659708232790344992631272093440874584788452185500699820112737608066749387242563493474914604621261604067636809784976669371153351930195408806860632848354106184557707623954580226442455170106276425487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test50.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapatiosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.thelondonwesthollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oda.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test18.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomadetulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificairlines.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20q4resint-waf.radixxuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehotelzags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bucuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblaprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.kz.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-ls.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesgrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-integcert.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrawfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntours.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewilliamvale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pciproxy-uat.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huttonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.nk.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webguru.lognet-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonharborhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedarcyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shan.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittenhousehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoxfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabretn.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.cheeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crestahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtowngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdc5.dev.aws.sabrenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-mn.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuelos.aerolineas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-stage-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.standardhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.am.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therallyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-ws.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-odm.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themavenhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.jt.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angadartshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.ai.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblacert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetdev.avix.ix-et.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladm360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubquartershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedraytonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portolahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puenteromano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisborough-hall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotel-icon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tranquilitybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sanderling-resort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amararesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villaflorence.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3c132b80298250ae6ba3d2d20ef93a5738071b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039baa123d7974e16d455f58f38dc4015879283de5d3e646926d3ec958a80a677550a33d9d9a991cb722d25b9ac797f188d6128fec4cbe1d1d3a583c4180b1cc82b44a87f94c246c456366f1f05b1144ff710f6602d6e33ece48c1645fd3927e9f3a6f55264b7844317c2e3278375ee76a315d548732f967faa9ea199c4acffee93eada37a651fb3f6e171740fa50b5e4f9299270d4119a5abc3c7ca446b5d95e02568d167b6757b018934e9f7bb69c27b533edc559ec67345c200b7cedfaa09583e4d34a2d746091eb4cca358aaa20dbbd013ea988d2586dd1f16f6d93661c62099064e9060ef17b764b12fc5e906f9f7d112d862979138b734d93da23371c1c