imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:49:71:e9:ff:2b:c1:d1:01:44:32:a5:6c:19:77:41 was issued on by GlobalSign nv-sa.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:49:71:e9:ff:2b:c1:d1:01:44:32:a5:6c:19:77:41
Serial Number (int): 1710576117876613339013479032122079041
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:c6:9c:cb:63:e0:e9:a3:59:32:72:1a:c5:76:8a:da:2d:a6:35:85
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): b6:7d:c7:aa:34:57:b1:7a:20:d1:25:76:69:6a:bb:03:b5:98:54:d2
Fingerprint (sha256): f0:11:28:1e:0e:19:ea:97:36:63:7a:0d:d1:f0:2e:ff:48:e3:3c:2e:6e:f7:1c:d4:c5:6b:85:c7:89:57:75:32

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kghformulary.nhs.uk
www.covid19-cas.nhs.uk
*.norfolkcommunityhealthandcare.nhs.uk
*.continuityofcarer-tools.nhs.uk
continuityofcarer-tools.nhs.uk
*.dhc.nhs.uk
*.yhcr.nhs.uk
*.nwas.nhs.uk
www.cypmh-model.nhs.uk
*.slam-services.org
healthgis.nhs.uk
*.ncic.nhs.uk
cypmh-model.nhs.uk
thewaltoncentre.nhs.uk
*.scwcsu.nhs.uk
*.lnwh.nhs.uk
frimleyhealthcareercentre.org.uk
*.rwt.nhs.uk
*.imperial.nhs.uk
lpft.nhs.uk
*.frimleyparkhospital.co.uk
*.rwh-tr.nhs.uk
www.shropscommunityhealth.nhs.uk
ncic.nhs.uk
*.oxleas.nhs.uk
kghformulary.nhs.uk
*.nhsla.com
*.slam.nhs.uk
frimleyparkhospital.co.uk
*.thewaltoncentre.nhs.uk
*.healthgis.nhs.uk
*.lpft.nhs.uk
*.resolution.nhs.uk
*.yas.nhs.uk
*.kentcht.nhs.uk
*.betterliveshealthyfuturesbw.nhs.uk
*.tbyw.yhcr.nhs.uk
*.lthtr.nhs.uk
imperva.com
*.england.nhs.uk
*.ice-ni.nnuh.nhs.uk
webcentre-sch.smartmedia.net
*.thh.nhs.uk
covid19-cas.nhs.uk
*.frimleyhealthcareercentre.org.uk
betterliveshealthyfuturesbw.nhs.uk
norfolkcommunityhealthandcare.nhs.uk
*.cypmh-model.nhs.uk
lnwh.nhs.uk
*.shropcom.nhs.uk
yastransfers.yas.nhs.uk
scwcsu.nhs.uk
thh.nhs.uk
*.uclh.nhs.uk
shropscommunityhealth.nhs.uk
training-sch.smartmedia.net

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6pqirZc7UK6OWukDfbn
QdXhzWAdXUpvoOyz7YrfftOipSa1K4tpHe4wxErVImtaOI2F7E7xdZ93HHWPHFlP
P28OAsFbga4wFzj3zR8DH7UmG3TNduxcAL8Fp/I31HjN/kdNYzSPK20KOgW2/vkC
x7cEzCCk3aS6lVgdDKifDv/lgBT5Org5wAVuffBqayTk/059Pos1qlRc0+gR47E3
GZ1LeVytwtKhi/jHOjrpoZNZ2RHQ+iRkXDqZIuFSzpiG1dSQLBVnvXF31XBfkzXm
Ulp73XRaZ7MFMAJUuZYfE4te1iVqnHyjnZjWqCs5PzY2xsc/TL9w+Wi/HGf4dBcF
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1710576117876613339013479032122079041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 13:29:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 13:29:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16621253300499680326611795633523273938056497570124061705771779674900041475852344358816663082131850321990332933337666454207295201854295023133387548292514299325023100469634882816902115255711802843778293215147935405985455153364944926229638191759813432649955700832194787724188751494631909859064274783085892646497318392699309449980098153194994697476801793341948868254049916900565216796951864075489140229183982755457560377182905043201240789937876285678135039840473595671627610778967862735359796319556762186039189057987041001386833602540740288032541257642631268736800171036903662100838698679321705550554512581546349390398957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kghformulary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yhcr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam-services.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewaltoncentre.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperial.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwh-tr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxleas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kghformulary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewaltoncentre.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resolution.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterliveshealthyfuturesbw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbyw.yhcr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lthtr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ice-ni.nnuh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcentre-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterliveshealthyfuturesbw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shropcom.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yastransfers.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dec69ccb63e0e9a35932721ac5768ada2da63585
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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