imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:ae:c8:bd:c8:a2:d4:fd:f9:2f:61:1b:3f:2a:ba:16 was issued on by GlobalSign nv-sa.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ae:c8:bd:c8:a2:d4:fd:f9:2f:61:1b:3f:2a:ba:16
Serial Number (int): 2236759167307275184035587745190165014
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2c:7e:71:ec:a9:ba:91:06:2c:b4:3c:f0:e5:66:12:d3:c5:65:79:4b
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 57:e8:db:bf:50:64:3f:bd:75:6f:50:ce:90:18:dd:7c:b5:6f:a2:7f
Fingerprint (sha256): ae:c5:27:9c:a4:29:60:d6:48:a5:3c:f7:2f:f1:4c:c2:ce:fc:ee:2d:fe:6f:9b:9d:91:99:86:71:9c:1c:ac:49

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kghformulary.nhs.uk
www.covid19-cas.nhs.uk
*.norfolkcommunityhealthandcare.nhs.uk
*.continuityofcarer-tools.nhs.uk
*.nwangliaft.nhs.uk
continuityofcarer-tools.nhs.uk
*.dhc.nhs.uk
*.yhcr.nhs.uk
*.nwas.nhs.uk
woundcarelite.kentcht.nhs.uk
www.cypmh-model.nhs.uk
*.slam-services.org
healthgis.nhs.uk
*.ncic.nhs.uk
cypmh-model.nhs.uk
thewaltoncentre.nhs.uk
*.scwcsu.nhs.uk
*.lnwh.nhs.uk
frimleyhealthcareercentre.org.uk
*.rwt.nhs.uk
*.yorkhospitals.nhs.uk
*.imperial.nhs.uk
lpft.nhs.uk
*.frimleyparkhospital.co.uk
*.rwh-tr.nhs.uk
www.shropscommunityhealth.nhs.uk
ncic.nhs.uk
*.oxleas.nhs.uk
*.secureboundary.nhs.uk
kghformulary.nhs.uk
*.nhsla.com
*.slam.nhs.uk
frimleyparkhospital.co.uk
*.bthft.nhs.uk
*.thewaltoncentre.nhs.uk
*.healthgis.nhs.uk
*.lpft.nhs.uk
*.resolution.nhs.uk
*.yas.nhs.uk
*.kentcht.nhs.uk
*.betterliveshealthyfuturesbw.nhs.uk
*.tbyw.yhcr.nhs.uk
*.lthtr.nhs.uk
imperva.com
*.england.nhs.uk
*.ice-ni.nnuh.nhs.uk
webcentre-sch.smartmedia.net
*.thh.nhs.uk
covid19-cas.nhs.uk
*.frimleyhealthcareercentre.org.uk
betterliveshealthyfuturesbw.nhs.uk
norfolkcommunityhealthandcare.nhs.uk
*.cypmh-model.nhs.uk
lnwh.nhs.uk
*.shropcom.nhs.uk
yastransfers.yas.nhs.uk
scwcsu.nhs.uk
thh.nhs.uk
*.uclh.nhs.uk
shropscommunityhealth.nhs.uk
training-sch.smartmedia.net

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohKdE+X0sjrkkW47VOIp
jqRWLjfzT0iBQ9G+1a6PNFiQ6chN8xfm6Ld+8oaQJ+xVHVBYO8ozm9RJUAm3GVTL
T751s919yBRVM8yDYa4S27dTQyqv+hcTrQXsvctGaPIYtTep+U7e2SKwQAhuJnHD
jFY1pN10e/4cc0Htv1zEVvPJ2rbH56nvyJg+Vnq034JHq/TzgO5Wj1iCHZN6BlAa
B7Inw9V2FjIw1YjLCJVS3h3RJ4x42RpicQOBJ2UZVs2ygsMWDRoRcSSex3imbiwl
7b9dld+I/dT5/HDnzHaCg5dCJ7GwG7RXv9bmp78q7BxvlaL3cvPO+z/sA1I5cqMY
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2236759167307275184035587745190165014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 11:37:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 11:37:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20459784105297447969531426605925821315780515248410991944724710836697489823133794265661813447741191401383821159831592037116741290151432943494946381723359600697513526651198669724866008791211618910166514523488783637097841045980595766642072707678463332006786948636220324242129643163540930067470628471272338130572676195808715464072908704085564047395312648071184184064782003430108701575966174697651197062622650709465961267892756824297241240055406070864944162274002083125287438290878160862625211521462440217797926039874688304704062029542050135200121291986291669236844820889575265018395337337245738090037067800967363537606829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kghformulary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwangliaft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yhcr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woundcarelite.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam-services.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewaltoncentre.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperial.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwh-tr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxleas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secureboundary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kghformulary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewaltoncentre.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resolution.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterliveshealthyfuturesbw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbyw.yhcr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lthtr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ice-ni.nnuh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcentre-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterliveshealthyfuturesbw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shropcom.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yastransfers.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c7e71eca9ba91062cb43cf0e56612d3c565794b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018602781f4f000004030047304502205bf769b5c594b073d37a453d530c6ffde60b287fa17bc7026bc4f0844d09afc402210090216854bbb0ec20f7ec5692711643771406723aabb138ca3c122a6549d6c1b4007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018602781fcc0000040300483046022100b47434b3a11374420570a4f0a260d73ea9ad4e153110dd869f6d47bc884b214b022100f3a6de568e22b98358ab7a14fdbd3666b534917b6f2759550658f7c8dedb01e8007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018602781f7a000004030046304402206858c24a9a503ce4094ada7377e8e1069ec98c28cfcfd91936abd8d78f198c99022027727fce211e16bcb067e41fff3b99ced142e9f6f7f93fc5371ba5415e0965e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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