imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q2

About this certificate

This digital certificate with serial number 01:9f:43:ed:69:98:0c:19:e2:3d:b4:62:02:50:eb:69 was issued on by GlobalSign nv-sa.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:9f:43:ed:69:98:0c:19:e2:3d:b4:62:02:50:eb:69
Serial Number (int): 2156180927489653910098006800707152745
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 84:3e:1a:66:2b:15:b9:5f:8a:bc:bb:c3:2f:5a:1f:10:01:19:5e:1d
AuthorityKeyId: af:0d:02:d0:c3:1b:9e:58:f8:ef:37:62:2d:e7:03:5d:9e:41:4a:8a

Fingerprint (sha1): 54:e8:a9:86:ae:43:00:7d:db:6c:d5:3a:33:f0:f2:a4:97:f8:22:d9
Fingerprint (sha256): cc:dd:e5:c2:1c:cc:50:19:ff:a4:3c:6d:91:bb:76:ae:e3:2c:01:5c:4f:c6:e9:83:f4:6f:60:ae:ca:77:d7:c8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl

Check the revocation status for certificate imperva.com

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grupovidrierorosita.com.mx
terrancesimien.com
www.pivotalpointinvesting.com
www.wcpa.co.il
wcpa.co.il
samanthazylstra.com
jacquelinegoodwin.com
www.njdreamcenter.org
agiacuc.com
www.rokhardbody.com
fibrosolved.com
dumptrucksforhire.ca
www.craignhooper.com
ropc.org
www.fashionbykukanaana.com
www.cathiefilian.com
www.ladypinata.com
goreach.org
glaringerror.com
www.wpplattestsl2.com
needseo.com
amigopallets.com
chitexsolutions.com
www.goreach.org
finapayment.com
www.seasons-and-salt.com
www.integrativeeating.com
www.tammyhomegardner.com
genxv.com
www.meganshawphoto.com
fumcmorrilton.org
www.ropc.org
www.chiro-trust.org
www.drlinrx.com
www.agiacuc.com
www.needseo.com
www.corporatekravmaga.com
lewiscountyfrn.org
www.mommyreporter.com
testapr978jkckjh.com
ecostargroup.com
imperva.com
lauramaephotos.com
integrativeeating.com
meganshawphoto.com
nhp.training
www.incenta.net
gworkshopdesign.com
chiro-trust.org
ladypinata.com
warlandmilsim.com
www.rasoc.org
www.warlandmilsim.com
www.finapayment.com
www.fibrosolved.com
www.ecostargroup.com
www.jacquelinegoodwin.com
maritimeinsuranceinternational.com
www.nancytimpanarohogan.com
incenta.net
www.lauramaephotos.com
www.maritimeinsuranceinternational.com
www.grupovidrierorosita.com.mx
gracecore.com
www.consultorams.cl
baixarbluray.xyz
www.fumcmorrilton.org
www.terrancesimien.com
thegroupads.com
antreinasearrings.com
neallawpc.com
thrivekansas.com
mommyreporter.com
www.chitexsolutions.com
www.linkedintojobs.com
pivotalpointinvesting.com
www.neallawpc.com
www.kimcesaretti.com
www.american-journalism.org
www.grayhairedmama.com
drlinrx.com
njdreamcenter.org
rokhardbody.com
rasoc.org
www.amigopallets.com
www.carlholmesedi.org
www.gracecore.com
www.lewiscountyfrn.org
8mediagroup.com
tammyhomegardner.com
www.antreinasearrings.com
www.8mediagroup.com
american-journalism.org
www.thegroupads.com
wpplattestsl2.com
www.baixarbluray.xyz
grayhairedmama.com
www.gworkshopdesign.com
kimcesaretti.com
www.nhp.training
www.projecthospitality.org
cathiefilian.com
www.thrivekansas.com
www.genxv.com
www.glaringerror.com
carlholmesedi.org
linkedintojobs.com
*.dumptrucksforhire.ca
fashionbykukanaana.com
consultorams.cl
seasons-and-salt.com
www.samanthazylstra.com
www.testapr978jkckjh.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAudNdJ91ED38kiegR2T
RNgJgG9tAletQUX/Wns/LlJMaeSJAtwNyTJJHtbr8OF9jLwBADxQ3vIKb/7VQ4lR
0/Dqf5KKj6fu7lA3zhwKa2xgcLmNYu/7o+g1B1E4TTMEIeot11BvQr2CIIJfYG1t
BZtCCUwFZlGP6I0p/e5wct8Kxyn6tPCPEQ4mzc/OSKovdxrnLH7++KYeDe89DwJG
4swOzEdnQF8LUMmLKnq0GfJYP6aOCb2phROx0/Rpxovbo8uP6MExmm6A8tjv7Kdq
vWvh6qzOhvyBl/6KnICC75DTuC+a1nbjEke4Ll3BcaLfrd9uPI/dYysM250A5Rjh
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2156180927489653910098006800707152745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 17:14:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 17:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17174136602785646893577670769755853683987922703150222626055052760222760149011969589393078583546276781073369580215943481180364170334751666363733182168926232159306662845890374352882438981721601999602080893504838543805968364459030876829752055668864832813157751084086642469905185295370084321824008789814681718991337133403071421804235200664313008629174606819899720180806341223815319878809424458912399772166624366232316391614373133447864574685343622434873773777284783962227384651865734881191557253914103768201963015457733038501618396404367732876170328111912578815088063390204260554062046505593488332852180857783614061470203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2353 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupovidrierorosita.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrancesimien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pivotalpointinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcpa.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcpa.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanthazylstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquelinegoodwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njdreamcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiacuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokhardbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibrosolved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptrucksforhire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craignhooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ropc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionbykukanaana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathiefilian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladypinata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaringerror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpplattestsl2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigopallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chitexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finapayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seasons-and-salt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integrativeeating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tammyhomegardner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genxv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meganshawphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fumcmorrilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ropc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiro-trust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drlinrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agiacuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatekravmaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewiscountyfrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mommyreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapr978jkckjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecostargroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauramaephotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrativeeating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meganshawphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhp.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incenta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gworkshopdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiro-trust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladypinata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warlandmilsim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rasoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warlandmilsim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finapayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrosolved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecostargroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacquelinegoodwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimeinsuranceinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nancytimpanarohogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incenta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauramaephotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimeinsuranceinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupovidrierorosita.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultorams.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baixarbluray.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fumcmorrilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrancesimien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegroupads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antreinasearrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neallawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrivekansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mommyreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chitexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkedintojobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivotalpointinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neallawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimcesaretti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.american-journalism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grayhairedmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drlinrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njdreamcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rokhardbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amigopallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlholmesedi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gracecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lewiscountyfrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8mediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammyhomegardner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antreinasearrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8mediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'american-journalism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegroupads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpplattestsl2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baixarbluray.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grayhairedmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gworkshopdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimcesaretti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhp.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projecthospitality.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathiefilian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrivekansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genxv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glaringerror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlholmesedi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedintojobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumptrucksforhire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionbykukanaana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultorams.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasons-and-salt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samanthazylstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testapr978jkckjh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							843e1a662b15b95f8abcbbc32f5a1f1001195e1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af0d02d0c31b9e58f8ef37622de7035d9e414a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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