imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:60:ad:51:62:27:c1:79:3f:47:58:7a:67:96:7a:a9 was issued on by GlobalSign nv-sa.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:60:ad:51:62:27:c1:79:3f:47:58:7a:67:96:7a:a9
Serial Number (int): 1831203798924447442441147123125090985
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 61:e0:18:90:96:c2:64:ef:0f:b6:08:ed:04:00:3f:3e:cc:cc:01:cb
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 25:56:a0:77:f3:0c:f8:51:dd:a0:07:fc:f5:19:86:08:91:4d:d0:f1
Fingerprint (sha256): c3:13:b5:0a:2a:10:fe:58:d2:3c:27:6b:fd:f8:e0:55:2f:c3:8d:58:4f:73:60:dc:1f:21:50:ce:ae:bc:f4:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ppd.carrefour.com
pass.fr
*.aem.carrefour.be
*.carrefour-banque.fr
bionic.fr.carrefour.com
*.mp.carrefour.com
okmarket.com
*.agilefabric.fr.carrefour.com
changepassword.carrefour.com
*.carrefour.com
*.carrefourproperty.com
www.quitoque.fr
*.carla.carrefour.com
carrefour.be
greenweez.com
*.daas.carrefour.com
carrefour-banque.fr
as-mim.ppd.carrefour.com
www.crf.carrefour.com
*.occasion.carrefour.fr
*.daas-cbq.carrefour.com
*.grupocarrefour.com.br
prep.apitms-transporteurs.carrefour.com
*.greenweez.com
*.voyages.carrefour.fr
*.training.carrefour.com
carrefour.it
carrefourproperty.com
dev.carrefourassistant.carrefour.com
*.voyages.carrefour.be
*.aloa-assurances.fr
fondation-carrefour.org
*.uat.carrefour-banque.fr
*.cartepass.fr
*.carrefour.pl
*.fondation-carrefour.org
basephoto-cdn.carrefour.com
ouramobile.carrefour.com
*.reizen.carrefour.be
myaccount.carrefour.com
*.refectory.fr
*.mp-dev.carrefour.com
ext-serviceclients.carla.carrefour.com
aloa-assurances.fr
lostpassword.carrefour.com
*.carrefourproperty.fr
voyages.carrefour.fr
*.carrefour-cashback.fr
*.carrefour.it
ppd-sts.carrefour.fr
preprod.shopping.carrefour.fr
*.supeco.fr
refectory.fr
*.be.carrefour.eu
*.growth.carrefour.com
*.promocash.com
ee-mim.ppd.carrefour.com
carrefourproperty.es
*.soc.carrefour.com
sig-pic.carrefour.com
www-prep.carrefour.fr
*.fr.carrefour.com
fr-mim.ppd.carrefour.com
carrefourproperty.it
prep.carrefourassistant.carrefour.com
imperva.com
*.croquetteland.com
*.carrefourproperty.it
ff-mim.ppd.carrefour.com
tbqstore.ppd.carrefour.com
*.carrefourproperty.es
*.carrefour.fr
dejbox.fr
*.carrefour.be
financialwebsupplier.ppd.carrefour.com
carrefourproperty.fr
grupocarrefour.com.br
*.assistivegrocery.carrefour.com
supeco.fr
carrefour.pl
*.dejbox.fr
api.plus.carrefour.fr
*.carrefour.ro
*.pass.fr
*.okmarket.com
quitoque.fr
www.adhesionfid.carrefour.fr

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN4zCCDMugAwIBAgIQAWCtUWInwXk/R1h6Z5Z6qTANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMTAeFw0yMzAz
MTQxNjEwNDBaFw0yMzA5MTAxNjEwNDBaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkJIOBL+3rJO3+cuThq
IHGzTzRDAA0fsY8gg0ToouVgeXKaEovm5OuOOMV5hmDuStis0qeo3+qTtQesagbE
5fNTtVGgTs+D9DB7FzfnqqBd3WdcvOHiGmKbIqJjq2K/SMV85qY1ZCNdmSrzpsbj
fNgfTz9uhTYIcJQcIMYpZ/hhrhHGfsJwkJJzjWLoASyU4SIFgRPG4BoJiB7zw5kh
8BaN3A3POXukmwvFOpne6y/HHMJuUw0bzswAjKIGXxf4geIST+4tbkfsLWi2FVHE
+CGH/yBo2S8/biWtwubfvPlNVCqGmyM5VgRgskJEVYhAwLsjdKyumpQmZL5gU1C4
JQIDAQABo4IK6TCCCuUwggefBgNVHREEggeWMIIHkoITKi5wcGQuY2FycmVmb3Vy
LmNvbYIHcGFzcy5mcoISKi5hZW0uY2FycmVmb3VyLmJlghUqLmNhcnJlZm91ci1i
YW5xdWUuZnKCF2Jpb25pYy5mci5jYXJyZWZvdXIuY29tghIqLm1wLmNhcnJlZm91
ci5jb22CDG9rbWFya2V0LmNvbYIeKi5hZ2lsZWZhYnJpYy5mci5jYXJyZWZvdXIu
Y29tghxjaGFuZ2VwYXNzd29yZC5jYXJyZWZvdXIuY29tgg8qLmNhcnJlZm91ci5j
b22CFyouY2FycmVmb3VycHJvcGVydHkuY29tgg93d3cucXVpdG9xdWUuZnKCFSou
Y2FybGEuY2FycmVmb3VyLmNvbYIMY2FycmVmb3VyLmJlgg1ncmVlbndlZXouY29t
ghQqLmRhYXMuY2FycmVmb3VyLmNvbYITY2FycmVmb3VyLWJhbnF1ZS5mcoIYYXMt
bWltLnBwZC5jYXJyZWZvdXIuY29tghV3d3cuY3JmLmNhcnJlZm91ci5jb22CFyou
b2NjYXNpb24uY2FycmVmb3VyLmZyghgqLmRhYXMtY2JxLmNhcnJlZm91ci5jb22C
FyouZ3J1cG9jYXJyZWZvdXIuY29tLmJygidwcmVwLmFwaXRtcy10cmFuc3BvcnRl
dXJzLmNhcnJlZm91ci5jb22CDyouZ3JlZW53ZWV6LmNvbYIWKi52b3lhZ2VzLmNh
cnJlZm91ci5mcoIYKi50cmFpbmluZy5jYXJyZWZvdXIuY29tggxjYXJyZWZvdXIu
aXSCFWNhcnJlZm91cnByb3BlcnR5LmNvbYIkZGV2LmNhcnJlZm91cmFzc2lzdGFu
dC5jYXJyZWZvdXIuY29tghYqLnZveWFnZXMuY2FycmVmb3VyLmJlghQqLmFsb2Et
YXNzdXJhbmNlcy5mcoIXZm9uZGF0aW9uLWNhcnJlZm91ci5vcmeCGSoudWF0LmNh
cnJlZm91ci1iYW5xdWUuZnKCDiouY2FydGVwYXNzLmZygg4qLmNhcnJlZm91ci5w
bIIZKi5mb25kYXRpb24tY2FycmVmb3VyLm9yZ4IbYmFzZXBob3RvLWNkbi5jYXJy
ZWZvdXIuY29tghhvdXJhbW9iaWxlLmNhcnJlZm91ci5jb22CFSoucmVpemVuLmNh
cnJlZm91ci5iZYIXbXlhY2NvdW50LmNhcnJlZm91ci5jb22CDioucmVmZWN0b3J5
LmZyghYqLm1wLWRldi5jYXJyZWZvdXIuY29tgiZleHQtc2VydmljZWNsaWVudHMu
Y2FybGEuY2FycmVmb3VyLmNvbYISYWxvYS1hc3N1cmFuY2VzLmZyghpsb3N0cGFz
c3dvcmQuY2FycmVmb3VyLmNvbYIWKi5jYXJyZWZvdXJwcm9wZXJ0eS5mcoIUdm95
YWdlcy5jYXJyZWZvdXIuZnKCFyouY2FycmVmb3VyLWNhc2hiYWNrLmZygg4qLmNh
cnJlZm91ci5pdIIUcHBkLXN0cy5jYXJyZWZvdXIuZnKCHXByZXByb2Quc2hvcHBp
bmcuY2FycmVmb3VyLmZyggsqLnN1cGVjby5mcoIMcmVmZWN0b3J5LmZyghEqLmJl
LmNhcnJlZm91ci5ldYIWKi5ncm93dGguY2FycmVmb3VyLmNvbYIPKi5wcm9tb2Nh
c2guY29tghhlZS1taW0ucHBkLmNhcnJlZm91ci5jb22CFGNhcnJlZm91cnByb3Bl
cnR5LmVzghMqLnNvYy5jYXJyZWZvdXIuY29tghVzaWctcGljLmNhcnJlZm91ci5j
b22CFXd3dy1wcmVwLmNhcnJlZm91ci5mcoISKi5mci5jYXJyZWZvdXIuY29tghhm
ci1taW0ucHBkLmNhcnJlZm91ci5jb22CFGNhcnJlZm91cnByb3BlcnR5Lml0giVw
cmVwLmNhcnJlZm91cmFzc2lzdGFudC5jYXJyZWZvdXIuY29tggtpbXBlcnZhLmNv
bYITKi5jcm9xdWV0dGVsYW5kLmNvbYIWKi5jYXJyZWZvdXJwcm9wZXJ0eS5pdIIY
ZmYtbWltLnBwZC5jYXJyZWZvdXIuY29tghp0YnFzdG9yZS5wcGQuY2FycmVmb3Vy
LmNvbYIWKi5jYXJyZWZvdXJwcm9wZXJ0eS5lc4IOKi5jYXJyZWZvdXIuZnKCCWRl
amJveC5mcoIOKi5jYXJyZWZvdXIuYmWCJmZpbmFuY2lhbHdlYnN1cHBsaWVyLnBw
ZC5jYXJyZWZvdXIuY29tghRjYXJyZWZvdXJwcm9wZXJ0eS5mcoIVZ3J1cG9jYXJy
ZWZvdXIuY29tLmJygiAqLmFzc2lzdGl2ZWdyb2NlcnkuY2FycmVmb3VyLmNvbYIJ
c3VwZWNvLmZyggxjYXJyZWZvdXIucGyCCyouZGVqYm94LmZyghVhcGkucGx1cy5j
YXJyZWZvdXIuZnKCDiouY2FycmVmb3VyLnJvggkqLnBhc3MuZnKCDioub2ttYXJr
ZXQuY29tggtxdWl0b3F1ZS5mcoIcd3d3LmFkaGVzaW9uZmlkLmNhcnJlZm91ci5m
cjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MB0GA1UdDgQWBBRh4BiQlsJk7w+2CO0EAD8+zMwByzBXBgNVHSAEUDBOMAgGBmeB
DAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmds
b2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4GCCsGAQUF
BwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNv
bS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3ExMEoGCCsGAQUFBzAChj5odHRwOi8v
c2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRsc2NhMjAy
M3ExLmNydDAfBgNVHSMEGDAWgBRK7qJHY0M7PnjztGGDcoh6neS9tzBIBgNVHR8E
QTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNy
M2R2dGxzY2EyMDIzcTEuY3JsMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdwCt
9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYbg4226AAAEAwBIMEYC
IQCC/k3auLCkrVS12w/znjn1TsMqEmrCfRZ7+Bfnmk7BKAIhAN3F8e4F+aUDwRwX
4F3bdT4AWC0QEwP4Ej4RTY7wROQyAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS
K8E6V6NS61IAAAGG4ONuEwAABAMARjBEAiAtjwL8xvYyZK5nh32QNxIYKE5BsMFZ
fODwe4ctJ6qLgwIgNDDWpjAHAfcthfD9KH/0D9OmvnwaYGn1k0aibdcLaOIAdQDo
PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYbg424nAAAEAwBGMEQC
IEqKQvXGdOY0m6Oorj+5n7BKsWkXRzQNk3eKqm7qeG4bAiBAKT1NMbXixIyLDq1/
j7HPWTMzKgQ012j8K0Isp3I1XDANBgkqhkiG9w0BAQsFAAOCAQEAVb18rZ+uqWd+
A4x33MAkGIQrvzM5MyD26nOWmLHm8YeO+mY+gzi3xYtmv36vTnDu0cVBZsX6sCMt
p/w4e8NKvujp+6itwRaVLJDzrz3W+3wspsKTcXr7q1xwcSTz22i91GvzIBUpv0o2
ITtYJW6YVdlLAzMp5AyvkdEW8lqtBtg3/oJGH2BKL1nzml3y4vbiGOBrkn2SsK3O
E3Dpev4Ztr6HiyUzg1P4aJtDVszWYV6T/I/NYoNjABj47ALJenT/ua1AkLEVPJrh
Q7z+C4FnolffeyhTJkAIdCebhBYeJFfpC/fruNv4+5A4l6t6liZjDDA6alD02MAi
xN+28LuOaA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkJIOBL+3rJO3+cuThq
IHGzTzRDAA0fsY8gg0ToouVgeXKaEovm5OuOOMV5hmDuStis0qeo3+qTtQesagbE
5fNTtVGgTs+D9DB7FzfnqqBd3WdcvOHiGmKbIqJjq2K/SMV85qY1ZCNdmSrzpsbj
fNgfTz9uhTYIcJQcIMYpZ/hhrhHGfsJwkJJzjWLoASyU4SIFgRPG4BoJiB7zw5kh
8BaN3A3POXukmwvFOpne6y/HHMJuUw0bzswAjKIGXxf4geIST+4tbkfsLWi2FVHE
+CGH/yBo2S8/biWtwubfvPlNVCqGmyM5VgRgskJEVYhAwLsjdKyumpQmZL5gU1C4
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1831203798924447442441147123125090985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 16:10:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 16:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25544042722420724588342275717743604012296213127843188299554286616687464923524367261150559341278211041814470541790449701914553313236165374758466287231429815459816489488738555603585193836340881289533865142106329536110107882071360515191415780542142590267662713110998837876091727491919876381670863127596862667568242436692679262464873266850496237762696517360620879599743490985292013768498765446554987330374925257270433567258391315034367369891438372084612799214786046879824588434202971347576308808993002074754396820387580600746795973894768100968928780255143218138955940953033889468800678629969182377794346730606777726973989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aem.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionic.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilefabric.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changepassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crf.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occasion.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daas-cbq.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.apitms-transporteurs.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenweez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carrefourassistant.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyages.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.carrefour-banque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartepass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondation-carrefour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basephoto-cdn.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramobile.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizen.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-dev.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-serviceclients.carla.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloa-assurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpassword.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour-cashback.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-sts.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shopping.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refectory.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.carrefour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growth.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig-pic.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.carrefourassistant.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croquetteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-mim.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbqstore.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourproperty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialwebsupplier.ppd.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourproperty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocarrefour.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistivegrocery.carrefour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supeco.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejbox.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plus.carrefour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitoque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesionfid.carrefour.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61e0189096c264ef0fb608ed04003f3ecccc01cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055bd7cad9faea9677e038c77dcc02418842bbf33393320f6ea739698b1e6f1878efa663e8338b7c58b66bf7eaf4e70eed1c54166c5fab0232da7fc387bc34abee8e9fba8adc116952c90f3af3dd6fb7c2ca6c293717afbab5c707124f3db68bdd46bf3201529bf4a36213b58256e9855d94b033329e40caf91d116f25aad06d837fe82461f604a2f59f39a5df2e2f6e218e06b927d92b0adce1370e97afe19b6be878b25338353f8689b4356ccd6615e93fc8fcd6283630018f8ec02c97a74ffb9ad4090b1153c9ae143bcfe0b8167a257df7b285326400874279b84161e2457e90bf7ebb8dbf8fb903897ab7a9626630c303a6a50f4d8c022c4dfb6f0bb8e68