imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:31:18:1b:79:87:ed:28:0c:af:19:3a:54:0b:ad:d6 was issued on by GlobalSign nv-sa.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:31:18:1b:79:87:ed:28:0c:af:19:3a:54:0b:ad:d6
Serial Number (int): 1584139496456009065599999436399554006
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 68:81:52:85:d7:89:62:c5:ca:34:01:29:10:1f:46:d2:1f:cb:93:5b
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 4e:14:94:18:0b:31:7c:53:a6:59:2a:b9:76:7f:37:8f:cc:bc:8f:17
Fingerprint (sha256): f6:ab:95:fb:04:81:67:50:5e:34:1d:52:21:e1:ce:5e:2f:a6:3b:1a:ff:d2:4a:0a:39:b4:f8:5f:c6:51:db:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsep.in
detailedassessment.com
v2.mindspark.in
student.detailedassessment.com
www.aqad.in
www.assettalentsearch.com
o.mindspark.in
assetdynamic.com
www.assetonline.in
ov.mindspark.in
www.lsep.in
assettalentsearch.com
www.ei-usa.com
www.mindspark.in
www.detailedassessment.com
teacher.detailedassessment.com
assetonline.in
imperva.com
*.ei.study
learn.mindspark.in
*.mindspark.in
ei-usa.com
ei.study
mindspark.in
test.detailedassessment.com
aqad.in
solappcms.lsep.in
www.assetdynamic.com
shiksha.mindspark.in
aqadcbse.mindspark.in
v.mindspark.in

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+1o4WWBzB+aSjPqVp0a
HhKkkLM1b+4M7BIC/C7e7o1h04eLrF0cQZ9RKdAWQQgSMO2xPz1sfsUhI83uOHiN
VXBu2vg9zuyGnz6fNUwIX79P5D8oJxKbaQ/E77AYJQSD2v0bIN+HMe8NnaXxNcR4
5GZzaICcQy4YCu1fOrRuhe25f4sibQKlXlNQjSf26nI/NwJ5YNoqMEx31416bDJD
Kot5J1dkR/O2l2BR+ioc6RqzoRUcjiSBzeKih5cHBPD5wBIRNDisk+1SRMW9M8Wu
N4pdtrE6nmkrWK4q1+ILfxtsDHdDJJtQm1Xb0K4AfOZpJVqhTFibqTdT7O+XGZ+N
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1584139496456009065599999436399554006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 15:53:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 15:53:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18169148691228225927598219142941675980692012721114308768710340301144276852183576699228933707789865876188428140969284833577999903085895238516625673735449762608659344357228085975730631429572396047185855245439033437937039433625207810405302671197401576499250596086556044550708935497647854851917410167341405384663126735030703156576257098292078558637665655919450118425036605777177351904732230827607591559225565170188528700486020151751854799107717280713796852561094136077078338678269628057457117270357667066931237068126242135933366287208069286856574859915213943796286281567675204019857415985521283866916513138122569386265913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ov.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assettalentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.detailedassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solappcms.lsep.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetdynamic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiksha.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqadcbse.mindspark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mindspark.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68815285d78962c5ca340129101f46d21fcb935b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000184a00bcbd1000004030047304502210098cb0e0343d6ca7bc7de837eed7655c23c593cc4b8a4ef70a39336d203a618cb0220365a5e26d75c1e667e49c7f1d01e6a6c3119bd5f0af53aebbd1b30dd41c9ecf9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184a00bcbd20000040300473045022100abe20c5fd7e71cfe239d84e067cdf0b0ede5c66ee57db77717827b3c9732198402205948c8819af3efede903d30535422def7413013f88e41062b67d67db44789e790076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184a00bcc3b0000040300473045022100b4168e20d60d73c1836c305923802d7b270e2d4bddb0e5acd92861a1aeef756d02203fd3c66bcb84248ed9d79e0fdc027a90d00f06367572d638a096da760264d482
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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