imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:a3:0b:96:d4:91:93:42:8f:8b:dc:ce:86:6f:c7:cc was issued on by GlobalSign nv-sa.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a3:0b:96:d4:91:93:42:8f:8b:dc:ce:86:6f:c7:cc
Serial Number (int): 2175807440242921826050550664726038476
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b4:3a:d9:c3:9a:18:d6:b4:f9:87:38:19:35:3d:39:3a:e0:4a:a7:4a
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): ca:d1:36:58:49:7e:a6:30:0c:f5:50:af:10:5a:7c:3d:c6:75:b0:6c
Fingerprint (sha256): e6:ef:f4:f0:3c:a8:2d:2f:4a:d0:18:ff:81:a8:9a:c4:f4:d4:3e:e2:54:af:be:22:1f:f0:66:ec:8d:93:58:7d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsep.in
detailedassessment.com
v2.mindspark.in
student.detailedassessment.com
www.aqad.in
www.assettalentsearch.com
o.mindspark.in
assetdynamic.com
www.assetonline.in
ov.mindspark.in
www.lsep.in
assettalentsearch.com
www.ei-usa.com
www.mindspark.in
www.detailedassessment.com
teacher.detailedassessment.com
assetonline.in
imperva.com
*.ei.study
learn.mindspark.in
*.mindspark.in
ei-usa.com
ei.study
mindspark.in
test.detailedassessment.com
aqad.in
solappcms.lsep.in
www.assetdynamic.com
shiksha.mindspark.in
aqadcbse.mindspark.in
v.mindspark.in

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0+FWBP1aVAw+TzfCm/
YfTWfRsfa6iSdqrRlKHJkTGatkH7BuLPqobjGauuXwjqWrvMeSgYUpqlljftuV6Q
6pT++86XqoQT7vR33iTs069Jk/ZHu7bsmoWF696+Loq3vlHKwm6rQyLFtYuSexPz
tNvsIB0aWjEfCAMqH0NfI8B7cI9WIEEmy9ODUJFloxPX/tm9gMoKM8/JCPlnod/R
kI6bJM2CT/YgzAWhZ+bKjTvGxHKf2XVeGrbwUU86Sk1flja8olDmhtPy+t5U6w5h
cv8DShlrsN4BWZbet58iFvJC0YBpGQvsgSJWqPP7/RSNfO0jJ3OAU00m7nX+RvCo
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2175807440242921826050550664726038476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-18 23:57:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 14:51:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19328880680741752645030524828726555925815870870052188140531023959703571601355745059861251785462355097325312732875874073184915130125229584163781318860250005934026253529001592297004362781684875295568789004892027948621625192593967633860928164212419945000380950542722402054019538715878557018729259637128924470393128224291836958328164022334774691740920287941364551189867058801355135876872583135206357479528184698019117636606591151284441415701349342512719684225507379803790260613371470399500974971879718261606914847333062660394852300296747140095583408100847637346047185051675190613291630892783453187595704523025039685101809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ov.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solappcms.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiksha.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqadcbse.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mindspark.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b43ad9c39a18d6b4f9873819353d393ae04aa74a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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