imperva.com
Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1
About this certificate
This digital certificate with serial number 01:3f:3a:ea:6c:1a:b3:1f:43:0a:7c:9b:12:5c:e1:0c was issued on by GlobalSign nv-sa.
With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=imperva.com
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 01:3f:3a:ea:6c:1a:b3:1f:43:0a:7c:9b:12:5c:e1:0cSerial Number (int): 1657537650476309160536372446966374668
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 21:d8:85:4c:ff:74:56:6b:12:4f:b1:de:51:8f:64:83:c5:70:7c:44
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5
Fingerprint (sha1): 01:d6:fb:9c:9f:ba:f3:61:8e:71:c2:c8:16:ec:82:82:24:6b:0f:7e
Fingerprint (sha256): a6:d4:b4:e7:9e:d4:33:d9:9d:5e:f4:c5:c3:dd:5a:33:15:d1:6f:d9:f9:02:3a:cb:67:56:68:aa:68:46:1f:9c
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl
Check the revocation status for certificate imperva.com
30
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imperva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
auto.tbibank.bg
dap.tbibank.bg
mymoid.payments.4finance.com
*.4finance.com
client.vivus.bg
client.vivus.dk
www.vivus.dk
worldpay.payments.4finance.com
client.vivus.lt
www.zaplonasplatky.cz
client.vivuszaem.bg
kuiq.es
universalpay.payments.4finance.com
dibs.payments.4finance.com
client.vivus.pl
vivusonline.es
imperva.com
*.smscredit.lt
www.kuiq.es
client.zaplo.pl
trustlypay.payments.4finance.com
www.vivusonline.es
express.tbibank.bg
vivus.dk
zaplonasplatky.cz
smscredit.lt
client.vivusonline.es
videochat.goodcredit.am
client.smscredit.lt
*.payments.4finance.com
dap.tbibank.bg
mymoid.payments.4finance.com
*.4finance.com
client.vivus.bg
client.vivus.dk
www.vivus.dk
worldpay.payments.4finance.com
client.vivus.lt
www.zaplonasplatky.cz
client.vivuszaem.bg
kuiq.es
universalpay.payments.4finance.com
dibs.payments.4finance.com
client.vivus.pl
vivusonline.es
imperva.com
*.smscredit.lt
www.kuiq.es
client.zaplo.pl
trustlypay.payments.4finance.com
www.vivusonline.es
express.tbibank.bg
vivus.dk
zaplonasplatky.cz
smscredit.lt
client.vivusonline.es
videochat.goodcredit.am
client.smscredit.lt
*.payments.4finance.com
Other certificates including the domain name imperva.com
(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
Certificate
The complete raw certificate details for imperva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIQAT866mwasx9DCnybElzhDDANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMiBRMTAeFw0yMjAx MTkwODI0MjZaFw0yMjA3MjAyMzE5MDJaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJG+W6rBMAOQYOwLUCMq +fKQQYjd3FoAV9SrMHeuaPdUav5gGl6o57wfe+zlNGoe73ObZTlmd9qmy8EjqTSD M6BwX1WgLJUOJ0/RgT32wP3XUuSSpuZAtAyLWbUEkQbtM3d+eJi7fUyohrbGP2VZ k5zfgmo4EDde/gK60ICsmQU3y28ANNmqz73fb4vLOprv3f7Y17qxTByevKvYEs0e PYkMHqODhHlKGiZaXsZDZIq1vshBLmmn9yGftYaQRO6wwJOQlCABJoXMwpGIj7lG FQs1JYYVrtC9k1R8ptN1YUWM772rFJOQ8MvNl2G9XYqYPI89iHUJAB+9ZFWEsihh QwIDAQABo4IEPzCCBDswggJhBgNVHREEggJYMIICVIIPYXV0by50YmliYW5rLmJn gg5kYXAudGJpYmFuay5iZ4IcbXltb2lkLnBheW1lbnRzLjRmaW5hbmNlLmNvbYIO Ki40ZmluYW5jZS5jb22CD2NsaWVudC52aXZ1cy5iZ4IPY2xpZW50LnZpdnVzLmRr ggx3d3cudml2dXMuZGuCHndvcmxkcGF5LnBheW1lbnRzLjRmaW5hbmNlLmNvbYIP Y2xpZW50LnZpdnVzLmx0ghV3d3cuemFwbG9uYXNwbGF0a3kuY3qCE2NsaWVudC52 aXZ1c3phZW0uYmeCB2t1aXEuZXOCInVuaXZlcnNhbHBheS5wYXltZW50cy40Zmlu YW5jZS5jb22CGmRpYnMucGF5bWVudHMuNGZpbmFuY2UuY29tgg9jbGllbnQudml2 dXMucGyCDnZpdnVzb25saW5lLmVzggtpbXBlcnZhLmNvbYIOKi5zbXNjcmVkaXQu bHSCC3d3dy5rdWlxLmVzgg9jbGllbnQuemFwbG8ucGyCIHRydXN0bHlwYXkucGF5 bWVudHMuNGZpbmFuY2UuY29tghJ3d3cudml2dXNvbmxpbmUuZXOCEmV4cHJlc3Mu dGJpYmFuay5iZ4IIdml2dXMuZGuCEXphcGxvbmFzcGxhdGt5LmN6ggxzbXNjcmVk aXQubHSCFWNsaWVudC52aXZ1c29ubGluZS5lc4IXdmlkZW9jaGF0Lmdvb2RjcmVk aXQuYW2CE2NsaWVudC5zbXNjcmVkaXQubHSCFyoucGF5bWVudHMuNGZpbmFuY2Uu Y29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwHQYDVR0OBBYEFCHYhUz/dFZrEk+x3lGPZIPFcHxEMFcGA1UdIARQME4wCAYG Z4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cu Z2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIwADCBngYIKwYB BQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24u Y29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIycTEwSgYIKwYBBQUHMAKGPmh0dHA6 Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2Ey MDIycTEuY3J0MB8GA1UdIwQYMBaAFJwqZ9C0gzFbgMspllV1CTc4uDylMEgGA1Ud HwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxh c3IzZHZ0bHNjYTIwMjJxMS5jcmwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAHQhR4ZLs9O79q09mHRb0pZuGuuGg+xQzmdjxgvCXKUOhR83 wBlXGDDi0MEeRKkj+X7jvxQ3Ble//AFC783sq5N/GSN1jXIJpYBT8pSJJzmD1+x5 Th39oqmDx2wOFHrzwpDLKn6/mmsxD5OSvbOB91u39DEInoYQUtek/m69dvgewaBA 7TPq5TY3Z6hZSm67TJzcSJF3H89+7w32TR1Jv/rKKlbnyCelO+JGWDGPh86KyQQu raf5uZpEqle6LvVHxYx70aCo3CBI+IoAK7PdvSdzo/sDGrEXdZRAhBsCKBrMurSI vzbHeFmGipCcZAFY79NacNRjIf2SBYdPuNy64Oc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJG+W6rBMAOQYOwLUCMq +fKQQYjd3FoAV9SrMHeuaPdUav5gGl6o57wfe+zlNGoe73ObZTlmd9qmy8EjqTSD M6BwX1WgLJUOJ0/RgT32wP3XUuSSpuZAtAyLWbUEkQbtM3d+eJi7fUyohrbGP2VZ k5zfgmo4EDde/gK60ICsmQU3y28ANNmqz73fb4vLOprv3f7Y17qxTByevKvYEs0e PYkMHqODhHlKGiZaXsZDZIq1vshBLmmn9yGftYaQRO6wwJOQlCABJoXMwpGIj7lG FQs1JYYVrtC9k1R8ptN1YUWM772rFJOQ8MvNl2G9XYqYPI89iHUJAB+9ZFWEsihh QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1657537650476309160536372446966374668 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 08:24:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 23:19:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17240278316341174126562352455608549674535256993718261870417348203790530602472581008165111191695552162286143357041383872598049456364407228496988522705139417695575079323439486046564061634677873745470770128894539374808558802565868268840977099544452300759365164888237461219017554008434150176748192889760548545781785921863006255316439709343472791605999386307484112041123300641960092641409184410905438856391890927861500135162455879443112425697152167108972927390169646261806905053191105907228446181143200860289617495658138552283594943652563334967074812643982724681544418933163930609764731216045331057737579381899511709851971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.tbibank.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dap.tbibank.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymoid.payments.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivus.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivus.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivus.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpay.payments.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivus.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaplonasplatky.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivuszaem.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuiq.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpay.payments.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dibs.payments.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivus.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusonline.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smscredit.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuiq.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.zaplo.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustlypay.payments.4finance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivusonline.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express.tbibank.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivus.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaplonasplatky.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smscredit.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.vivusonline.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videochat.goodcredit.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.smscredit.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payments.4finance.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21d8854cff74566b124fb1de518f6483c5707c44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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