imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:d0:e6:d9:e8:0b:7d:36:05:34:ab:de:6a:b1:b9:60 was issued on by GlobalSign nv-sa.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d0:e6:d9:e8:0b:7d:36:05:34:ab:de:6a:b1:b9:60
Serial Number (int): 2413907960894677254074385155369318752
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b0:e7:3e:f7:eb:d3:d9:af:35:d3:62:db:3e:ca:bf:e8:bf:e5:ef:59
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): 97:58:25:01:0c:e0:48:de:43:78:6f:7a:e8:19:43:bb:52:e5:57:bf
Fingerprint (sha256): a8:3c:1d:09:9e:47:44:01:32:01:96:9f:db:42:9d:40:f4:e1:c8:b8:0a:e3:c0:a5:e1:63:90:cf:b9:b2:cd:0a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
bancodeserviciosfinancieros.com.ar
*.daas-cbq.carrefour.com
simplyyoubox.lu
*.grupocarrefour.com.br
carrefourproperty.com.br
*.greenweez.com
*.voyages.carrefour.fr
carrefour.it
*.voyages.carrefour.be
*.aloa-assurances.fr
*.simplyyoubox.lu
livraison-express.preprod-php7.wynd.eu
*.uat.carrefour-banque.fr
*.cartepass.fr
www.carrefourproperty.com.br
*.carrefour.pl
hier.greenweez.com
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
*.simplyyoubox.be
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
www.carrefour-banque.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
fr-mim.ppd.carrefour.com
imperva.com
*.croquetteland.com
simplyyoubox.be
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
*.carrefour.net
*.carrefour.fr
dejbox.fr
*.carrefour.be
*.carrefourbelgium.be
financialwebsupplier.ppd.carrefour.com
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
croquetteland.com
supeco.fr
carrefour.pl
*.bancodeserviciosfinancieros.com.ar
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Q+yDhfqnPuE08UjJem
QEtFJL74t1YKalqQ/91yPWNJfiD4Gk8C1PaJP7H2zRsiLBbe5hSsOV1XpfBd6jHB
TideCDX/1r6UuupUcPSzBsuy1PWsbBHNbJZOLOhum1k84RjkidxW2iL5j8Lbuxqv
P0ezQbBEFkPESuPv97j2l3NKqG6rxDqiR7u0V2jn+wwaLEbyrJTbZEZExvYoD7Vf
oMmyqvMchBYzaEUs9oxIy6w4CM9sw+h3RpX3vuClveUWPQeyCd8erR+CNy0NdD4U
PYiHcYLB7XpfaGaYXi384wAM/K7rrPahUTaOq5EP0/GKvha4cpeSL2cfRppEpC2Y
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2413907960894677254074385155369318752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-17 09:43:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 00:38:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27261677385765546421787036105848687884910766110720279561871023738163589559509267055291579988989120229254868472800273858537940206457446815719351887239001675583289229078712261234511808009773305278719867226868713136634068706012468474158934974540765080436486590596172018815257601577084006743630179081391291708563655911198232437656167652279666621904454131786648222330312548618753229768330170737759503798875491702135088307856142449192379192797529914824821475896568263079840616002914402383648869567563984523222592773334189180033167710565374798904788921066973651403742680380872311373383367024348559411258047148036662743636043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1825 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyyoubox.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyyoubox.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livraison-express.preprod-php7.wynd.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrefourproperty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hier.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyyoubox.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyyoubox.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancodeserviciosfinancieros.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0e73ef7ebd3d9af35d362db3ecabfe8bfe5ef59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f42003aab69423d4ff6ed0cc98caa3d63e95097c5f8e873d532cff9fd224a29d2f913e4c2977595c69343af5b1079cdac42d66f8dc16d196239375968b592eb1187ca90d2a2792835c46de961d58e445275159555c163918474f8112d4b4fc037c8d229231e63579dc7d2c65f692d3f7d57894a55511d38708c4ff213c2847bc604b3eb09b9e3a381da43f5707e53780d8fd88a08d739633051410391a26992547bed35f8f6636f3893a4a10585d67e1fdd4d216872a73d0a2a921d23839d8422c91b6f4f5ff2c029f801e4d79791c58b28209b9cfe39403c0184e9ec5e26f21a13bd0f791514222586439ee84b41d4f462887f94c8e9f9b9d6d130411a23cd