imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:95:c2:65:7e:f2:4d:1c:cf:92:d3:37:4a:80:80:d9 was issued on by GlobalSign nv-sa.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:95:c2:65:7e:f2:4d:1c:cf:92:d3:37:4a:80:80:d9
Serial Number (int): 2106823056502162993836677221050253529
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0f:43:b2:f9:bc:99:2b:4c:03:a9:7c:ed:36:d3:fa:1a:35:27:1c:e5
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 11:1b:11:00:77:3c:42:77:f2:b7:8d:14:71:85:0d:90:a5:18:6b:71
Fingerprint (sha256): ed:4c:00:ac:e4:25:c0:65:e6:66:78:e4:67:67:8d:98:4d:82:b2:8a:0f:bd:01:1a:4f:c2:4e:fe:4c:d6:dc:8d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate imperva.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sixtyhotels.com
test50.sabre.co.il
*.thejewelny.com
booking.yonik.co.il
*.tapatiosprings.com
demo-oda.avro.cert.aws.sabre.com
be-p2.synxis.com
*.theleela.com
test18.sabre.co.il
*.e9.cert.sabre.com
*.tsts.cert.sabre.com
*.avri.as.cert.asc.sabre.com
airconnectivity-gui.int.sabre.com
*.nomadetulum.com
*.parkterracehotel.com
*.pacificairlines.com.vn
20q4resint-waf.radixxuat.com
*.prod.sabre.com
*.thehotelzags.com
*.tsts.sabre.com
be-cms-api.sabrehospitality.com
checkin.superairjet.com
reservations.bucuti.com
weblaprod.avri.as.prod.asc.sabre.com
caw-1s1.cert.sabre.com
*.amm.kz.as.cert.asc.sabre.com
*.cert.sabre.com
demo-ls.avro.cert.aws.sabre.com
*.naplesgrande.com
be-integcert.synxis.com
*.cheeca.com
airconnectivity-gui.cert.sabre.com
gol-dcci.prod.sabre.com
*.amm.pg.as.cert.asc.sabre.com
digitalexperience-b2c.voegol.com.br
*.stayaka.com
*.avri.as.prod.asc.sabre.com
*.thecrawfordhotel.com
*.sabre.com
b6-ro-c1.avro.cert.aws.sabre.com
checkin-cert.superairjet.com
digitalexperience-dc.voegol.com.br
suntours.sabre.co.il
*.thewilliamvale.com
pciproxy-uat.sabrepacific.net.au
*.huttonhotel.com
*.amm.nk.as.cert.asc.sabre.com
sabre360.sabre.co.il
imperva.com
webguru.lognet-systems.com
*.crp.as.cert.asc.sabre.com
*.synxis.com
airconnectivity-gui.sabre.com
gol-dcci.cert.sabre.com
*.bostonharborhotel.com
*.thedarcyhotel.com
dcci-cert.superairjet.com
shan.ophirtours.co.il
*.rittenhousehotel.com
*.avfo.as.dev.asc.sabre.com
*.avfo.as.prod.asc.sabre.com
b6-ro.avro.cert.aws.sabre.com
*.tranquilitybay.com
test.sabre.co.il
g3-ro-c1.avro.cert.aws.sabre.com
*.theoxfordhotel.com
be-euat-p2.synxis.com
reservations.margaritavilleresortlakeoftheozarks.com
praesum.sabretn.net.au
*.crestahotels.com
*.downtowngrand.com
*.villaflorence.com
*.hotelcommonwealth.com
asdc5.dev.aws.sabrenow.com
*.avix.ix-mn.prod.asc.sabre.com
vuelos.aerolineas.com.ar
*.amm.pg.as.prod.asc.sabre.com
*.sabrehospitality.com
digitalexperience-hom-dc.voegol.com.br
be-cms-euat-p2.synxis.com
digitalexperience-stage-b2c.voegol.com.br
book.standardhotels.com
*.amm.am.as.cert.asc.sabre.com
*.brasada.com
*.seymourhotels.com
*.therallyhotel.com
*.avix.ix-ws.prod.asc.sabre.com
b2-ro.avro.cert.aws.sabre.com
demo-odm.avro.cert.aws.sabre.com
*.thelondonwesthollywood.com
digitalexperience-hom-b2c.voegol.com.br
hotelphg.com
*.crp.as.prod.asc.sabre.com
checkin-stage.superairjet.com
*.cert.int.sabre.com
bookings.hotelcommonwealth.com
*.themavenhotel.com
be-cms-api-p2.synxis.com
*.amm.jt.as.cert.asc.sabre.com
*.angadartshotel.com
*.amm.ai.as.prod.asc.sabre.com
*.marbellaclub.com
weblacert.avri.as.cert.asc.sabre.com
webetdev.avix.ix-et.prod.asc.sabre.com
ladm360.sabre.co.il
*.clubquartershotels.com
*.devint.int.sabre.com
*.thedraytonhotel.com
*.catbirdhotel.com
*.thebocaraton.com
*.hotelphg.com
*.portolahotel.com
*.puenteromano.com
*.gisborough-hall.com
*.betulum.com
reservations.hotel-icon.com
reserve.sanderling-resort.com
b2-ro-c1.avro.cert.aws.sabre.com
praesum.sabrepacific.net.au
g3-ro.avro.cert.aws.sabre.com
ey.avfo.as.dev.asc.sabre.com
*.amararesort.com
dcci.superairjet.com
*.vietnamairlines.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvFE0XkBz9uw2FeqUKPn
knHmEW6gdT/vM8xiknxOayLpF7YSCz96A4djyHNe5V+8L9PsmtFBGl4fwQesD7Jz
25+Pq3pyrDjjPe1NJcNadOhnVhDftFbZbWx+QygG/OU5WSV/k37boIyrRfZNxIwH
91aBCNFBn0/hLDNYlBvys9b7eGwRoP1yKOiPi8hTJs2fGqszM61JaEVUiQRPd5j3
l/o1Sb8e/gcXpuvHj7fQhUlheCw9qI0tJ8EJc/HpC+crQEwvPha6hH0ZZigmmoMa
mANR7BDOdZw1+me9wiVw3IF5m0PXmBAtE3c6AjjcvLMmzMcR6l+tWldiEcpdXKuR
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2106823056502162993836677221050253529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-24 06:23:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 21:18:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18549766615052400738795834795995501202041094488737296241996628831533305888506216638654273882978462942571478001751437599822545940865372815973503039493253010382451294630802892357262635501998539496901673417578993588626184678180563861472476701250017748809461189453145262353278828167009426831036376191418389623496314552076827714750273576936872906386053866031815103516453337701580899700644984543277006721350142695826908362104364191949225958117314106619915935287316185842696454150892337036153763996831639590978029229819143794978012505244002428279030309513897370600145612754863012256157130616490969424124100526827890451124697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test50.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thejewelny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.yonik.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapatiosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oda.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test18.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomadetulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkterracehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificairlines.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20q4resint-waf.radixxuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehotelzags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsts.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bucuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblaprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-1s1.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.kz.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-ls.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesgrande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-integcert.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrawfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntours.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewilliamvale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pciproxy-uat.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huttonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.nk.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabre360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webguru.lognet-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airconnectivity-gui.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gol-dcci.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonharborhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedarcyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci-cert.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shan.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittenhousehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avfo.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tranquilitybay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoxfordhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.margaritavilleresortlakeoftheozarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabretn.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crestahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtowngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villaflorence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdc5.dev.aws.sabrenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-mn.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuelos.aerolineas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.pg.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-dc.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-euat-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-stage-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.standardhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.am.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seymourhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therallyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avix.ix-ws.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-odm.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelondonwesthollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalexperience-hom-b2c.voegol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crp.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.hotelcommonwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themavenhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-cms-api-p2.synxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.jt.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angadartshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.ai.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblacert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetdev.avix.ix-et.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladm360.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubquartershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedraytonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portolahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puenteromano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisborough-hall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betulum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotel-icon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sanderling-resort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praesum.sabrepacific.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.avfo.as.dev.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amararesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcci.superairjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamairlines.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f43b2f9bc992b4c03a97ced36d3fa1a35271ce5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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