imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:b8:c6:16:4b:0f:9b:39:9c:56:6b:b0:f7:15:58:e3 was issued on by GlobalSign nv-sa.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b8:c6:16:4b:0f:9b:39:9c:56:6b:b0:f7:15:58:e3
Serial Number (int): 2288628301106665154542453512727779555
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cc:7b:6f:5e:a6:8e:c0:d5:25:7d:41:dd:8c:e9:83:7e:38:d9:ee:28
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 5b:f1:ff:a1:c7:3c:20:12:67:07:30:d5:f9:5f:3d:c5:60:80:b4:77
Fingerprint (sha256): bd:8b:e8:14:bd:17:a3:2c:79:20:46:ef:3c:77:4a:1d:0c:8a:6d:10:62:97:04:b3:4e:c1:d1:b9:e6:b1:ed:82

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wolterskluwer.es
a3asesor-rrhh.com
*.a3erpnominacloud.com
test.capego.net
api.basecone.net
capego.net
a3innuva-doc.wolterskluwer.es
*.test-genya.it
*.wkinfo.it
staging-api.capego.wolterskluwercloud.se
identity.basecone.net
dev.capego.net
*.genya.it
a3asesornom.com
uat.basecone.info
dev-api.capego.wolterskluwercloud.se
api.basecone.info
dev-status-gbs.cloud-dev.wolterskluwer.eu
*.basecone.com
imperva.com
api.capego.wolterskluwercloud.se
lic1.sw.acclipse.com
osra.com
staging.basecone.net
a3erpnominacloud.com
identity.basecone.info
webdesk.it
identity.basecone.com
*.a3equipo.com
app.codelabhq.com
public-apigateway.basecone.info
public-apigateway.basecone.net
www.capego.net
*.webdesk.it
*.a3asesor-rrhh.com
a3equipo.com
api.basecone.com
wkinfo.it
*.a3asesornom.com
*.osra.com
*.accountantspace-uat.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJpjCCCI6gAwIBAgIQAbjGFksPmzmcVmuw9xVY4zANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEx
MDIwOTQ5NTdaFw0yNDA0MzAwOTQ5NTdaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqKhEtCbE2ELA2nNtuC7
d700iZ/DKrxzrHcdYyM1OzzcfNeRyFB+07eDU48SskuDZrMdAjVQlVUVdWLlKsuw
NDpe9BygmYtoqiQs1STUmlypZp+kd7LXJlYZGRiVFk03vrnwSA5fp6tPzC8K3AQv
DVkwDnJ4xHWhuAHDCJsUY4/HpwoqfYvdzIv0dfJzo8E2//DgJhb8jQIovgWb9kU2
N0A8R1dNmhd84u3d/1Pj1Vf3DAsg+bUSzwGxvLK1zQaSY4ZdWWaCcdagawJ39TdI
+NAvbmvImHBZ3GHG/avHm25XiOwyahhve7joZtjPsdXOCYTcXeG+h1mRd6JW+p2B
9wIDAQABo4IGrDCCBqgwggNhBgNVHREEggNYMIIDVIISKi53b2x0ZXJza2x1d2Vy
LmVzghFhM2FzZXNvci1ycmhoLmNvbYIWKi5hM2VycG5vbWluYWNsb3VkLmNvbYIP
dGVzdC5jYXBlZ28ubmV0ghBhcGkuYmFzZWNvbmUubmV0ggpjYXBlZ28ubmV0gh1h
M2lubnV2YS1kb2Mud29sdGVyc2tsdXdlci5lc4IPKi50ZXN0LWdlbnlhLml0ggsq
LndraW5mby5pdIIoc3RhZ2luZy1hcGkuY2FwZWdvLndvbHRlcnNrbHV3ZXJjbG91
ZC5zZYIVaWRlbnRpdHkuYmFzZWNvbmUubmV0gg5kZXYuY2FwZWdvLm5ldIIKKi5n
ZW55YS5pdIIPYTNhc2Vzb3Jub20uY29tghF1YXQuYmFzZWNvbmUuaW5mb4IkZGV2
LWFwaS5jYXBlZ28ud29sdGVyc2tsdXdlcmNsb3VkLnNlghFhcGkuYmFzZWNvbmUu
aW5mb4IpZGV2LXN0YXR1cy1nYnMuY2xvdWQtZGV2LndvbHRlcnNrbHV3ZXIuZXWC
DiouYmFzZWNvbmUuY29tggtpbXBlcnZhLmNvbYIgYXBpLmNhcGVnby53b2x0ZXJz
a2x1d2VyY2xvdWQuc2WCFGxpYzEuc3cuYWNjbGlwc2UuY29tgghvc3JhLmNvbYIU
c3RhZ2luZy5iYXNlY29uZS5uZXSCFGEzZXJwbm9taW5hY2xvdWQuY29tghZpZGVu
dGl0eS5iYXNlY29uZS5pbmZvggp3ZWJkZXNrLml0ghVpZGVudGl0eS5iYXNlY29u
ZS5jb22CDiouYTNlcXVpcG8uY29tghFhcHAuY29kZWxhYmhxLmNvbYIfcHVibGlj
LWFwaWdhdGV3YXkuYmFzZWNvbmUuaW5mb4IecHVibGljLWFwaWdhdGV3YXkuYmFz
ZWNvbmUubmV0gg53d3cuY2FwZWdvLm5ldIIMKi53ZWJkZXNrLml0ghMqLmEzYXNl
c29yLXJyaGguY29tggxhM2VxdWlwby5jb22CEGFwaS5iYXNlY29uZS5jb22CCXdr
aW5mby5pdIIRKi5hM2FzZXNvcm5vbS5jb22CCioub3NyYS5jb22CGyouYWNjb3Vu
dGFudHNwYWNlLXVhdC5jby51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTMe29epo7A1SV9Qd2M6YN+ONnu
KDBXBgNVHSAEUDBOMAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUH
AgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1Ud
EwEB/wQCMAAwgZ4GCCsGAQUFBwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8v
b2NzcC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0MEoG
CCsGAQUFBzAChj5odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n
c2F0bGFzcjNkdnRsc2NhMjAyM3E0LmNydDAfBgNVHSMEGDAWgBSqEXGPlcRYmIux
bg87UGgkvLgZvDBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNp
Z24uY29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIzcTQuY3JsMIIBfgYKKwYBBAHW
eQIEAgSCAW4EggFqAWgAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7
qwAAAYuPcJ0PAAAEAwBHMEUCID8biYkjtNOiJSx4I10DI1BkpnZG0Hkd5AF2wq4E
e2Q+AiEA/jeC8gYx4BANkSEl7tkRlPprSq0NDqidpkXfAiQ+rCEAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuPcJ2tAAAEAwBHMEUCIEwh3T45
NAlSYQj4KE49qR8gEq3v6s/vAP7hL76qfN6MAiEApC1nQdxZySTijbAzC9LkNj0F
6ytjOXCcj4YrF2oMCz0AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAYuPcJ+tAAAEAwBHMEUCID5TUkyd53y+vQSDRNKm7so1Fpxul1s2PYtaJvUb
0+A8AiEA7uD13wsiaVmtq0KzcRoSu+YAi0EvZ8VVmLo1HQeJo0wwDQYJKoZIhvcN
AQELBQADggEBAB623w763cw3JT0FJszgllidvWIAXOK/Xq2gcJRCovEHlb7kSqDg
zc3fQPjF6iAgD1yxjGfH0Ln/pEcOmJnm6Jh3oMcpJGCw/TM/tBwOd8jp7plePbJU
IbmMFAF4+lvvVtsixM9z79L6ViIabNrAcEYfEeySSzb9C3G0BW6QmjxqpqEM1GD5
03eIDzWtjZ2huNkijHZADtXOiBwrpugN03hV6Y9auiIJ2T9hVE5inung4pCf6vfO
LCfsppnFbHjV4bwGGazMAE5FW3jYP7Mx1ckAyTF/68V4jqoPCI5Xh5n7gJt+WT8M
WwPNsrT9bvQdcnQU6zYEZD2LCNrzVKGl2fE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqKhEtCbE2ELA2nNtuC7
d700iZ/DKrxzrHcdYyM1OzzcfNeRyFB+07eDU48SskuDZrMdAjVQlVUVdWLlKsuw
NDpe9BygmYtoqiQs1STUmlypZp+kd7LXJlYZGRiVFk03vrnwSA5fp6tPzC8K3AQv
DVkwDnJ4xHWhuAHDCJsUY4/HpwoqfYvdzIv0dfJzo8E2//DgJhb8jQIovgWb9kU2
N0A8R1dNmhd84u3d/1Pj1Vf3DAsg+bUSzwGxvLK1zQaSY4ZdWWaCcdagawJ39TdI
+NAvbmvImHBZ3GHG/avHm25XiOwyahhve7joZtjPsdXOCYTcXeG+h1mRd6JW+p2B
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2288628301106665154542453512727779555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 09:49:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 09:49:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16491175089749734378145987774650941111857202627686248751390934130282007225406956333416723800579362825764033468866411381585964277190834302345248489230015976414526474488568861741950462511213549651775646844994068630554293609826687805764113509017856863951605392475694034898624868810888036090205696312553785206905227943545854401816291624435684382506493429399662412958124718576042847539720392959065677097990777723213329822843317080073499970083252647584857731191836197127517352455471740065173252371749804718288747448236601644459047177435298395240680804380314532753895636710454788279557435254376014680335316657560127327273463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (856 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3asesor-rrhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3erpnominacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.capego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.basecone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3innuva-doc.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-genya.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wkinfo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.capego.wolterskluwercloud.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.basecone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.capego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genya.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3asesornom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.basecone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.capego.wolterskluwercloud.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.basecone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-status-gbs.cloud-dev.wolterskluwer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basecone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.capego.wolterskluwercloud.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lic1.sw.acclipse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.basecone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3erpnominacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.basecone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdesk.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.basecone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3equipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.codelabhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-apigateway.basecone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-apigateway.basecone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webdesk.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3asesor-rrhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3equipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.basecone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkinfo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3asesornom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountantspace-uat.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc7b6f5ea68ec0d5257d41dd8ce9837e38d9ee28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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