imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:29:48:27:f8:8f:82:c9:6a:9d:df:9a:3f:75:6b:65 was issued on by GlobalSign nv-sa.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:29:48:27:f8:8f:82:c9:6a:9d:df:9a:3f:75:6b:65
Serial Number (int): 1543575667300421233272591038257916773
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 51:9f:bb:eb:39:39:a0:f4:5c:ce:23:55:1f:fb:8a:c1:6e:f9:12:b6
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): ce:ae:67:1f:25:5a:eb:87:7e:5d:77:dd:b8:1c:0e:81:fe:bf:79:3e
Fingerprint (sha256): b9:f9:ac:0f:95:a1:b1:30:4f:ea:9c:ca:62:a7:e6:65:fa:ea:e2:1c:7b:a8:23:bd:f2:62:1d:bb:54:34:3c:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsep.in
detailedassessment.com
v2.mindspark.in
*.blog.ei.study
student.detailedassessment.com
www.aqad.in
www.assettalentsearch.com
assetdynamic.com
ei-india.com
www.assetonline.in
*.assetexam.in
mindspark.study
assetexam.in
www.lsep.in
www.ei-usa.com
assettalentsearch.com
www.mindspark.in
www.detailedassessment.com
teacher.detailedassessment.com
assetonline.in
imperva.com
*.mindspark.study
*.ei.study
learn.mindspark.in
*.mindspark.in
ei-usa.com
mindspark.in
ei.study
test.detailedassessment.com
*.ei-india.com
aqad.in
solappcms.lsep.in
www.assetdynamic.com
shiksha.mindspark.in
aqadcbse.mindspark.in
v.mindspark.in

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dfI4dTuwYqlUDuvF0oX
k+fWJ7IBZ7O4VF4RKv0YYJHJDtRlrzPyluuOysHFImIeh29nzNUfXPMBvoNEzWKT
GXMOURG4sRO6h5AiHdtCcRvTG5KFF592Yl+Natjp7QQkS1agThIirHyCHC1PTkGY
OfgCnRaKBTxsZqBWZZcmDV4sa7tttAL8LTMMlNiIFb2Jks9LsDSE2vPBRRE3Zvp6
LINuBqG2d+AZg4itAFvmvlutMAkO9dp/fBAytkWJenJtfGyGHJFjrV/ruNhmNgJZ
msOFgR9qnDrNvYxCP/GCRw+QDdfPedk9qKbcZAUMTl0hkk1Y3sW3YbrYojWRDIj5
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1543575667300421233272591038257916773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 14:17:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 14:17:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26490213137322152521822912775593596045418010777686414005534293999306770644179068253827867885966051219714691483734623902547139022915208807919972203725568477578966551204185364166578442585050886777285324775344183647633750917099719579956745896471792509809528675219086509979367921808960478580733752701004931573916380110900862878075361978365677547331493362817685198029159016096186409889011464428561659932446295127792722643245150945661053515496842752771766003498432829289985297724057998377075190406733153539135671611392549455609098449867822265851476066266567476617351683833314867629506066131430132314072925262175463876917571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assetexam.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindspark.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetexam.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindspark.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ei-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solappcms.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiksha.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqadcbse.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mindspark.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							519fbbeb3939a0f45cce23551ffb8ac16ef912b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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