imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:f3:a0:01:58:ab:5a:a2:f2:a2:22:d8:fe:99:55:2a was issued on by GlobalSign nv-sa.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f3:a0:01:58:ab:5a:a2:f2:a2:22:d8:fe:99:55:2a
Serial Number (int): 2594201424615460966440927686488053034
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: db:a2:08:79:87:c5:00:74:17:d4:56:94:8b:bb:c8:a6:72:44:35:c2
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 7c:dd:1b:ab:63:fe:0c:9b:10:5c:d9:f8:83:ae:fd:b5:1d:de:51:83
Fingerprint (sha256): 9f:4c:1d:57:03:5e:f3:00:55:9a:55:3e:a3:9c:43:ed:70:a3:da:83:e2:b6:dc:65:a9:c4:e2:fe:23:36:20:21

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dacprinsenhof.be
vetomichelet.fr
*.anovet.fr
*.cvestuairerimouski.com
*.veterinaryemergclinic.ca
border-vets.co.uk
tieraerzte-freising.de
vetoaulnay.fr
cvestuairerimouski.com
animalclinic.fr
clinique-veterinaire-des-hutins.com
prideveterinarycentre.co.uk
*.aloravets.org.uk
vetocolomby.fr
tierarztpraxis-gettorf.de
*.mckvets.com
*.astragale.vet
*.southdevonvets.co.uk
*.vetocolomby.fr
tieraerzte-burg.de
*.tierarztpraxis-gettorf.de
blaircourtvets.co.uk
hvcruzdepiedra.com
headonforestvets.com
*.ivcevidensia.com
vetoanimalclinic.fr
*.tieraerzte-burg.de
*.vetoluydebearn.fr
*.animalclinic.fr
astragale.vet
cochraneanimalclinic.com
evidensia.lv
*.vetoaulnay.fr
*.veterinaireentredeuxlacs.fr
*.dierenkliniekdeband.nl
*.independentvetcare.co.uk
prideveterinaryreferrals.com
imperva.com
southwindsoranimalhospital.ca
*.gvac.ca
*.blaircourtvets.co.uk
dapdetoren.be
*.border-vets.co.uk
*.cvestuairemontjoli.com
*.prideveterinaryreferrals.com
apyvet.com
ajaxanimalhospital.com
veterinaireentredeuxlacs.fr
*.havenvet.co.uk
blaircourtequinevets.co.uk
veterinaryemergclinic.ca
*.evidensia.lv
*.dapdetoren.be
*.wmfarmvets.co.uk
grimsbyanimalhospital.com
kingstonequinevets.co.uk
*.blaircourtequinevets.co.uk
vetodeslecheres.fr
*.tierklinik-perchtoldsdorf.at
*.kingstonequinevets.co.uk
*.tierarzt-rosenheim.de
gvac.ca
dierenkliniekavonturia.nl
*.ajaxanimalhospital.com
dierenkliniekdeband.nl
tierarzt-rosenheim.de
*.prideveterinarycentre.co.uk
*.vetodeslecheres.fr
*.dierenkliniekavonturia.nl
*.hvcruzdepiedra.com
anovet.fr
mckvets.com
southdevonvets.co.uk
wmfarmvets.co.uk
*.cochraneanimalclinic.com
havenvet.co.uk
*.hospitalveterinariosur.com
hospitalveterinariosur.com
vetoluydebearn.fr
*.vetoforum.fr
cvestuairemontjoli.com
dacprinsenhof.be
veterinaire-plaines-du-loup.ch
*.veterinaire-plaines-du-loup.ch
*.vetoanimalclinic.fr
*.tieraerztezentrum-lohmar.de
aloravets.org.uk
tierklinik-perchtoldsdorf.at
vetoforum.fr
*.vetomichelet.fr
*.grimsbyanimalhospital.com
*.headonforestvets.com
*.apyvet.com
*.clinique-veterinaire-des-hutins.com
tieraerztezentrum-lohmar.de
*.tieraerzte-freising.de
*.southwindsoranimalhospital.ca

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AjlCAeNiKw9Uy0g5Ek
dpOleaCP45EwDcG7/qfHgZsGL+KvubY1Eh3OPZfzuBkzryNi5Kp552RZ5yjphcze
GI3zPO/8MVpdasRXdHYRqc4sfUB7uPZ6tPzuApEkmZlkG8/7bkNSbSuFdX2s2Jp0
H3/8tFrJkRn9uItN13kVIjXOrIatKTf8dzoFr94SrEBbJjyEQiB1Rjo1OSK9GxgW
kgm+jrjJuipZzxvofL7fXk+Gb5F65x4DKH6hF/RBnDUwI2yJFKypHqldBtWo3qr2
TeDLixXAP2kKmF2FuRLvw6zCKoR0iiEp4TA7hiaMUiWWp3+d1Gzh4Nqg097MAIA3
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2594201424615460966440927686488053034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 12:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 12:43:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22178560736806409532115153787600659627326901380240689455509205791818465695129576546208321512262668286546498751578176148536204453926075078700775938068118298769932899623635446932857678378527247073240667367230625955200648487634207221166840991866163044605173577614636975303392228146692017483051301557383061977957187407837047622230688228368066093197274263016976979422868232019466759103578118311866182001487419867949538189792110889574925273371095508129557468379986595142564931557967030544656479897384280874128970543996864097210713547616823149489780957149092907646910581010374768780171219703046874717571263626426589296736113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dacprinsenhof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anovet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvestuairerimouski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterinaryemergclinic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'border-vets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoaulnay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvestuairerimouski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalclinic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinique-veterinaire-des-hutins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prideveterinarycentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetocolomby.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierarztpraxis-gettorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astragale.vet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southdevonvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetocolomby.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerzte-burg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierarztpraxis-gettorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaircourtvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvcruzdepiedra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headonforestvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivcevidensia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoanimalclinic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerzte-burg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalclinic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astragale.vet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoaulnay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterinaireentredeuxlacs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dierenkliniekdeband.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentvetcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prideveterinaryreferrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaircourtvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.border-vets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prideveterinaryreferrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinaireentredeuxlacs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havenvet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaircourtequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinaryemergclinic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimsbyanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaircourtequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dierenkliniekavonturia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dierenkliniekdeband.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prideveterinarycentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dierenkliniekavonturia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvcruzdepiedra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anovet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southdevonvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havenvet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospitalveterinariosur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalveterinariosur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoforum.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacprinsenhof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinaire-plaines-du-loup.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterinaire-plaines-du-loup.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoanimalclinic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoforum.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grimsbyanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.headonforestvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinique-veterinaire-des-hutins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dba2087987c5007417d456948bbbc8a6724435c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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