imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:ca:e0:4b:59:f0:5a:43:78:b2:81:8e:25:12:a0:17 was issued on by GlobalSign nv-sa.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ca:e0:4b:59:f0:5a:43:78:b2:81:8e:25:12:a0:17
Serial Number (int): 2382621190907091926286940621824499735
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: db:a2:08:79:87:c5:00:74:17:d4:56:94:8b:bb:c8:a6:72:44:35:c2
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): f5:b5:9a:1c:49:91:66:6b:01:08:41:a6:7c:b7:2a:ef:52:b7:36:97
Fingerprint (sha256): ba:a3:95:c9:f9:78:9a:55:7e:cc:3b:5c:61:d4:5a:dc:46:28:d1:e1:77:d3:6a:fd:74:c8:eb:2e:57:95:46:59

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vetoluydebearn.fr
cochraneanimalclinic.com
vetomichelet.fr
wmfarmvets.co.uk
*.wmfarmvets.co.uk
*.cochraneanimalclinic.com
kingstonequinevets.co.uk
tieraerzte-freising.de
vetoluydebearn.fr
vetodeslecheres.fr
cvestuairemontjoli.com
evidensia.lv
*.tierklinik-perchtoldsdorf.at
*.kingstonequinevets.co.uk
*.aloravets.org.uk
*.tierarzt-rosenheim.de
*.tieraerztezentrum-lohmar.de
aloravets.org.uk
gvac.ca
*.ajaxanimalhospital.com
*.independentvetcare.co.uk
imperva.com
southwindsoranimalhospital.ca
tierklinik-perchtoldsdorf.at
*.gvac.ca
*.vetomichelet.fr
dapdetoren.be
tierarzt-rosenheim.de
*.cvestuairemontjoli.com
ajaxanimalhospital.com
*.vetodeslecheres.fr
tieraerztezentrum-lohmar.de
*.evidensia.lv
*.tieraerzte-freising.de
*.dapdetoren.be
*.ivcevidensia.com
*.southwindsoranimalhospital.ca

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJjTCCCHWgAwIBAgIQAcrgS1nwWkN4soGOJRKgFzANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMjAeFw0yMzA1
MDMxNjEwMjFaFw0yMzEwMzAxNjEwMjFaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AjlCAeNiKw9Uy0g5Ek
dpOleaCP45EwDcG7/qfHgZsGL+KvubY1Eh3OPZfzuBkzryNi5Kp552RZ5yjphcze
GI3zPO/8MVpdasRXdHYRqc4sfUB7uPZ6tPzuApEkmZlkG8/7bkNSbSuFdX2s2Jp0
H3/8tFrJkRn9uItN13kVIjXOrIatKTf8dzoFr94SrEBbJjyEQiB1Rjo1OSK9GxgW
kgm+jrjJuipZzxvofL7fXk+Gb5F65x4DKH6hF/RBnDUwI2yJFKypHqldBtWo3qr2
TeDLixXAP2kKmF2FuRLvw6zCKoR0iiEp4TA7hiaMUiWWp3+d1Gzh4Nqg097MAIA3
cQIDAQABo4IGkzCCBo8wggNKBgNVHREEggNBMIIDPYITKi52ZXRvbHV5ZGViZWFy
bi5mcoIYY29jaHJhbmVhbmltYWxjbGluaWMuY29tgg92ZXRvbWljaGVsZXQuZnKC
EHdtZmFybXZldHMuY28udWuCEioud21mYXJtdmV0cy5jby51a4IaKi5jb2NocmFu
ZWFuaW1hbGNsaW5pYy5jb22CGGtpbmdzdG9uZXF1aW5ldmV0cy5jby51a4IWdGll
cmFlcnp0ZS1mcmVpc2luZy5kZYIRdmV0b2x1eWRlYmVhcm4uZnKCEnZldG9kZXNs
ZWNoZXJlcy5mcoIWY3Zlc3R1YWlyZW1vbnRqb2xpLmNvbYIMZXZpZGVuc2lhLmx2
gh4qLnRpZXJrbGluaWstcGVyY2h0b2xkc2RvcmYuYXSCGioua2luZ3N0b25lcXVp
bmV2ZXRzLmNvLnVrghIqLmFsb3JhdmV0cy5vcmcudWuCFyoudGllcmFyenQtcm9z
ZW5oZWltLmRlgh0qLnRpZXJhZXJ6dGV6ZW50cnVtLWxvaG1hci5kZYIQYWxvcmF2
ZXRzLm9yZy51a4IHZ3ZhYy5jYYIYKi5hamF4YW5pbWFsaG9zcGl0YWwuY29tghoq
LmluZGVwZW5kZW50dmV0Y2FyZS5jby51a4ILaW1wZXJ2YS5jb22CHXNvdXRod2lu
ZHNvcmFuaW1hbGhvc3BpdGFsLmNhghx0aWVya2xpbmlrLXBlcmNodG9sZHNkb3Jm
LmF0ggkqLmd2YWMuY2GCESoudmV0b21pY2hlbGV0LmZygg1kYXBkZXRvcmVuLmJl
ghV0aWVyYXJ6dC1yb3NlbmhlaW0uZGWCGCouY3Zlc3R1YWlyZW1vbnRqb2xpLmNv
bYIWYWpheGFuaW1hbGhvc3BpdGFsLmNvbYIUKi52ZXRvZGVzbGVjaGVyZXMuZnKC
G3RpZXJhZXJ6dGV6ZW50cnVtLWxvaG1hci5kZYIOKi5ldmlkZW5zaWEubHaCGCou
dGllcmFlcnp0ZS1mcmVpc2luZy5kZYIPKi5kYXBkZXRvcmVuLmJlghIqLml2Y2V2
aWRlbnNpYS5jb22CHyouc291dGh3aW5kc29yYW5pbWFsaG9zcGl0YWwuY2EwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQU26IIeYfFAHQX1FaUi7vIpnJENcIwVwYDVR0gBFAwTjAIBgZngQwBAgEw
QgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSB
kTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2Ev
Z3NhdGxhc3IzZHZ0bHNjYTIwMjNxMjBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMi5j
cnQwHwYDVR0jBBgwFoAUxqJhE0UVzJCPusGsvMw7DQ7Q3gYwSAYDVR0fBEEwPzA9
oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRs
c2NhMjAyM3EyLmNybDCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUArfe++nz/
EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGH4mEUEAAABAMARjBEAiAZutbH
1URlgfPTfTOclEs5DIZAxa4Fc3cBwhzfhQ2FQAIgV0S47eJ3DLK5aNFuM2FnF4oJ
MOP8IIAc/yQPJlfAca8AdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9
bgAAAYfiYRQ7AAAEAwBGMEQCIGmL65qFEyi9X827nc/C5KdGSvothkWQYLFo5a+x
sl46AiBvYTMskqgj/zec77kFZAj8kbSVyJ0BVIPgfgVwnA4hoAB2ALNzdwfhhFD4
Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABh+JhFS4AAAQDAEcwRQIgPIadaw2W
sbpSFxptnvqJA11Qe7w4Mk8wuoZA2qU1argCIQDHCB1EtFpwYROVjRo5CYYY+yyP
/OC3WTIWMSZ3ymYIAjANBgkqhkiG9w0BAQsFAAOCAQEAl0ZQGO1I/YeP51U66InJ
ifjrxS8Q/RO0g88qMzH5yAPwCZ0JRG85mZSvdPn+6PGuuZb08oSaMac2GuGdeNNM
xJFXpQoqGGdnTNnwDk7Q4FqGDu+aRiysFDwVSsQgHnGsBAX/IcRnDuVsb24if7Bd
MMrCgsJEUh05DUJ5V2KP4PNMzC43R8K5MHbCFv+/FmSt3siLtCywW057PhmSKeSy
/Hksiue3vYwsOOKUDRPmxQiAsqD6EQbHFPBFB/0//i6TjpxWMO3M+0kbn3fCYVP7
qnl+dAR0mE10UTOwwvn7VQJQl4aG/U/ekFEmw9xmksnBfMCJP/mBWhSwJDc6ZiOB
SQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AjlCAeNiKw9Uy0g5Ek
dpOleaCP45EwDcG7/qfHgZsGL+KvubY1Eh3OPZfzuBkzryNi5Kp552RZ5yjphcze
GI3zPO/8MVpdasRXdHYRqc4sfUB7uPZ6tPzuApEkmZlkG8/7bkNSbSuFdX2s2Jp0
H3/8tFrJkRn9uItN13kVIjXOrIatKTf8dzoFr94SrEBbJjyEQiB1Rjo1OSK9GxgW
kgm+jrjJuipZzxvofL7fXk+Gb5F65x4DKH6hF/RBnDUwI2yJFKypHqldBtWo3qr2
TeDLixXAP2kKmF2FuRLvw6zCKoR0iiEp4TA7hiaMUiWWp3+d1Gzh4Nqg097MAIA3
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2382621190907091926286940621824499735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 16:10:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 16:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22178560736806409532115153787600659627326901380240689455509205791818465695129576546208321512262668286546498751578176148536204453926075078700775938068118298769932899623635446932857678378527247073240667367230625955200648487634207221166840991866163044605173577614636975303392228146692017483051301557383061977957187407837047622230688228368066093197274263016976979422868232019466759103578118311866182001487419867949538189792110889574925273371095508129557468379986595142564931557967030544656479897384280874128970543996864097210713547616823149489780957149092907646910581010374768780171219703046874717571263626426589296736113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (833 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmfarmvets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochraneanimalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetoluydebearn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingstonequinevets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloravets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentvetcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierklinik-perchtoldsdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetomichelet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierarzt-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvestuairemontjoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetodeslecheres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieraerztezentrum-lohmar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evidensia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieraerzte-freising.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dapdetoren.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivcevidensia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwindsoranimalhospital.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dba2087987c5007417d456948bbbc8a6724435c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187e26114100000040300463044022019bad6c7d5446581f3d37d339c944b390c8640c5ae05737701c21cdf850d854002205744b8ede2770cb2b968d16e336167178a0930e3fc20801cff240f2657c071af007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187e261143b00000403004630440220698beb9a851328bd5fcdbb9dcfc2e4a7464afa2d86459060b168e5afb1b25e3a02206f61332c92a823ff379cefb9056408fc91b495c89d015483e07e05709c0e21a0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000187e261152e000004030047304502203c869d6b0d96b1ba52171a6d9efa89035d507bbc38324f30ba8640daa5356ab8022100c7081d44b45a706113958d1a39098618fb2c8ffce0b7593216312677ca660802
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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