imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:c1:21:f2:57:24:bf:ff:e6:b7:c2:a5:e3:8e:57:c7 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c1:21:f2:57:24:bf:ff:e6:b7:c2:a5:e3:8e:57:c7
Serial Number (int): 2332029809184010438809965843469719495
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d8:9e:54:3d:2d:9e:ce:11:7a:3c:71:59:1c:68:ac:42:a9:4e:b8:02
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): e6:1f:1c:24:75:b1:ad:3b:7e:98:b6:d4:cd:2b:7f:24:bf:71:ef:75
Fingerprint (sha256): a8:db:33:90:0f:81:25:2d:07:84:04:ef:ed:4d:ca:74:67:7d:b7:29:19:08:8c:d2:73:b8:e5:83:d9:1a:26:fb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reservations.villarspalace.ch
accounts-gcp.int.sabre.com
apigw.israir.co.il
reservations.innsofaurora.com
opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com
webouprod.avri.as.prod.asc.sabre.com
www.1p01.usc1.int.planning-optimization.sabre.com
airjapan-ext-api-cert-ase1.ezycommerce.sabre.com
manta-api-ase1.ezycommerce.sabre.com
opscomm.e9.prod.sabre.com
am.reaccom-manager.cert.sabre.com
reservations.grandbeachhotel.com
aerok-api-cert-ase1.ezycommerce.sabre.com
travelbank-ngp.int.sabre.com
reservations.carlton.co.il
u0-ro.avro.cert.aws.sabre.com
aerok-ext-api-ase1.ezycommerce.sabre.com
asreporting-us-central.cert.sabre.com
sud.res.radixxcert.com
reservations.vibehotels.com
bedrooms.sohohouse.com
webarcert.avri.as.cert.asc.sabre.com
reserve.cambridgebeaches.com
bon.res.radixxhost.com
apigw.caspitours.co.il
gettours.co.il
reservations.hotelemeline.com
caw-f9.cert.sabre.com
caw-f9.prod.sabre.com
ey.reaccom-manager.cert.sabre.com
reservation.marinobeach.com
sud.dcs.radixxcert.com
airjapan-api-cert-ase1.ezycommerce.sabre.com
va.reaccom-manager.cert.sabre.com
bon.app.radixxhost.com
redapp-examples-webservice.cert.sabre.com
aerok-api-ase1.ezycommerce.sabre.com
cps.stc.sabre.com
caw-nk.cert.sabre.com
reservations.sociallivingcollection.com
fccs.sabre.com
cert.documents-svc.sabre.com
documents.sabre.com
travelextras-ngp.int.sabre.com
6s.reaccom-manager.cert.sabre.com
opsmobile.amm.sv.as.cert.asc.sabre.com
imperva.com
ws.reaccom-manager.cert.sabre.com
reservations.villarslodge.ch
sudanair-ext-api-ase1.ezycommerce.sabre.com
opsmobile.mq.as.cert.asc.sabre.com
mld.appota.radixxhost.com
az.reaccom-manager.cert.sabre.com
cert.cps.stc.sabre.com
bon.appota.radixxhost.com
www.gettours.co.il
www.vc01.usc1.int.planning-optimization.sabre.com
mld.res.radixxhost.com
mld.dcs.radixxhost.com
lvrlakebuenavista.mynuvola.com
opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com
reservations.hoteldanieli.com
elbit.sabre.co.il
apigw.ophirtours.co.il
reservations.tfehotels.com
apigw.nehoratours.co.il
beta.reztrack.com
reservations.villarsvictoria.ch
reservation.lamaisonfavart.com
reservations.harvestinn.com
crouter-ngp.int.sabre.com
opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com
reservations.showboathotelac.com
weboucert.avri.as.cert.asc.sabre.com
su.reaccom-manager.cert.sabre.com
u0-ro-c1.avro.cert.aws.sabre.com
b6.reaccom-manager.cert.sabre.com
reservations.lodgeatbodegabay.com
reservations.theinterlude.com.au
admin-cert-ew3.ezycommerce.sabre.com
redapp-examples-webservice.int.sabre.com
reservations.hotelderek.com
webtest.x0.ix.cert.sabre.com
la.reaccom-manager.cert.sabre.com
bon.dcs.radixxhost.com
webarprod.avri.as.prod.asc.sabre.com
mondriancondesa.mynuvola.com
skyexpress-api-cert.ezypayment.sabre.com
skyexpress-ext-api-ew3.ezycommerce.sabre.com
mld.app.radixxhost.com
wcp-int.getthere.net
airjapan-api-ase1.ezycommerce.sabre.com
hotels.cert.havail.sabre.com
prd.eticket.radixxhost.com
admin-ew3.ezycommerce.sabre.com
reservations.soneva.com
aerok-ext-api-cert-ase1.ezycommerce.sabre.com
book.bunkhousehotels.com
airjapan-ext-api-ase1.ezycommerce.sabre.com
sud.appota.radixxcert.com
sud.app.radixxcert.com
demo.avfo.as.cert.asc.sabre.com
as.reaccom-manager.cert.sabre.com
sudanair-api-cert.ezypayment.sabre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bANYwqMl8Eh2fxoAtO6
8OQodYuGwsUzIaHocvpFhkGJqyKjrdPh8/zDJhhoYb8WSoW2ACurZy9oZUDs8PLD
EjulMDM2OxSJVQRpWrhDjvlPlml0XI8M7Dk4EIRt/Y1bK9Ai70aFd34rLUc7wdXh
qZoLQuKMn7K3MD67UVR84ggiaIHArp+BYFYBabYOJaT0Nqv59FzObSh3T25N4/BA
wBq0mZRJB+ozXZkEcL1Bdmc1c2DkNSve2Md0ICt8ZPKTxIbKhrgY20y9lEAinfKS
c6WPogmsesntjjyhnuYZDLTpkeRjSLz7LMndXgbyaDanQC5EfJEpUKkKnKAs3Ueu
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2332029809184010438809965843469719495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 04:08:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-30 04:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985480018555399402613011829797998182046304481983034071235585588160164633350614069837951484927545898544918962017332048382054229892099594825636010161752873272250182296045766457682031330444075296829974969701630305766777832116078868653717887853562010450751754672978957454778958121197399438506214643136831422771806825940380825531847556490088082039721605528558641887537561098289100211790238277853425666920314702756429399367132059123055517660776993608063993757296679577687740436525405068525480613258240777147255609668397232343895440077263236626777567218069093278015298719615324948142129691956053947271019103960908178107991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarspalace.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-gcp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.israir.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.innsofaurora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webouprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1p01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opscomm.e9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.grandbeachhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelbank-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.carlton.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asreporting-us-central.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.res.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.vibehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedrooms.sohohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarcert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.cambridgebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.caspitours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelemeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.marinobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.dcs.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-nk.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.sociallivingcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccs.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.documents-svc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelextras-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6s.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarslodge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.mq.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vc01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvrlakebuenavista.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hoteldanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbit.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tfehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.nehoratours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.reztrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarsvictoria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.lamaisonfavart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.harvestinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouter-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.showboathotelac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboucert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.lodgeatbodegabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.theinterlude.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelderek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.x0.ix.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondriancondesa.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.cert.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.eticket.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.soneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.bunkhousehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.appota.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.app.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.avfo.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d89e543d2d9ece117a3c71591c68ac42a94eb802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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