imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:11:16:4b:75:ab:24:51:36:34:5c:cb:36:15:f0:b4 was issued on by GlobalSign nv-sa.

With 127 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:11:16:4b:75:ab:24:51:36:34:5c:cb:36:15:f0:b4
Serial Number (int): 1417949233920120816700448565269754036
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:4f:27:27:67:81:4c:ef:cd:aa:0b:4d:d6:98:cb:8c:20:25:44:1d
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 60:59:b9:e0:67:11:cc:e2:07:73:11:80:e1:2d:fe:c9:27:c7:66:cd
Fingerprint (sha256): f9:34:5f:2b:f1:51:1e:c9:07:a1:5b:fe:1a:8a:a6:95:5f:ff:95:5b:ea:9e:b3:7a:14:33:e6:3a:19:8b:b7:bc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

127

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doctors.silvercross.org
providers.overlakehospital.org
anamosa.unitypoint.org
doctors.wellingtonregional.com
doctors.bradentoncardiology.com
miami-neurociencia-medicos.baptisthealth.net
providers.nortonchildrens.com
doctors.inlandvalleymedcenter.com
*.mlkch.org
doctors.aikenregional.com
doctorsqa.bcbsm.com
medicos.nuvancehealth.org
doctors.stdom.com
providers.chnola.org
providers.hshs.org
api.kyruus.com
doctors.stonybrookmedicine.edu
*.int2.healthsparq.com
dubuque.unitypoint.org
*.nuvancehealth.org
doctors.palmdaleregional.com
dev.doctors.apps.baptisthealth.net
doctors.southtexashealthsystemheart.com
providers.mhealthfairview.org
madison.unitypoint.org
siouxcity.unitypoint.org
doctors.southtexashealthsystemchildrens.com
doctors.valleyhospital.net
doctors.desertspringshospital.com
login.doctorsqa.bcbsm.com
providers.eastalabamahealth.org
*.kyruus.com
providers.atlanticare.org
doctors.manateememorial.com
waterloo.unitypoint.org
providers.gundersenhealth.org
providers.ngpg.org
*.northernlighthealth.org
cedarrapids.unitypoint.org
*.healthsparq.com
*.uat2.healthsparq.com
doctors.nwtpg.com
doctors.centennialhillshospital.com
doctors.manateehealthcaresystem.com
findadoctor.kansashealthsystem.com
doctors.summerlinhospital.com
doctors.valleyhealthphysicians.com
providers.nahealth.com
*.prdqa2.healthsparq.com
directory.trihealthpho.com
doctors.lakewoodranchmedicalgroup.com
imperva.com
doctors.texomacare.com
doctors.gwhospital.com
providers.inspirahealthnetwork.org
providers.munsonhealthcare.org
doctors.sthsclinics.com
orthoatlanta.piedmont.org
doctors.nwths.com
doctors.fortduncanmedicalcenter.com
doctors.ololrmc.com
doctors.childrensmn.org
doctors.laredophysiciansgroup.com
fortdodge.unitypoint.org
grinnell.unitypoint.org
providerdirectory.uabmedicine.org
*.baptisthealth.net
findadoc.umchealthsystem.com
*.einstein.edu
doctors.hendersonhospital.com
doctors.temeculavalleyhospital.com
*.broadwayhealth.org
doctors.virtua.org
doctors.aikenphysicians.com
doctors.southtexashealthsystemedinburg.com
doctors.swhealthcaresystem.com
providers.bestcare.org
desmoines.unitypoint.org
doctors.valleyhealthsystemlv.com
providers.billingsclinic.org
care.bellin.org
peoria.unitypoint.org
quadcities.unitypoint.org
*.dev2.healthsparq.com
*.northbay.org
doctors.stmarysphysicianassociates.com
doctors.texomamedicalcenter.net
doctors.stfran.com
providers.baptisthealth.com
providers.hf.org
preview-api.kyruus.com
miami-cancer-doctors.baptisthealth.net
doctors.oloah.org
doctors.nnmg.com
*.prd2.healthsparq.com
doctors.nnmc.com
doctors.saintlukeskc.org
providers.nortonhealthcare.com
doctors.springvalleyhospital.com
*.atlantichealth.org
*.nghs.com
*.lourdesrmc.com
*.provider-match.com
doctors.coronaregional.com
doctors.fallbrookhealthcarephysicians.com
*.adventisthealth.org
doctors.manateephysicianalliance.com
*.customer.kyruus.com
doctors.southtexashealthsystemmcallen.com
doctors.lakewoodranchmedicalcenter.com
providers.ksbhospital.com
doctors.msaweightloss.com
doctors.hackensackmeridianhealth.org
doctors.ranchospringsmedcenter.com
broadwayhealth.org
doctors.texomacareweightloss.com
providers.emoryhealthcare.org
doctors.massgeneralbrigham.org
doctors.surgicalweightcontrolcenter.com
providers.ecmc.edu
*.ololchildrens.org
doctors.unitypoint.org
doctors.doctorshosplaredo.com
providers.priviahealth.com
doctors.southtexashealthsystem.com
doctors.stmarysregional.com
providers.arh.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjidUSgvV9bSc1cJMBrQ
wHkNZp5COrpuXsKxw2K1Z67c8eXQqPpqe16FSInGOtMTMozwWDBj0pZnDhpp+IKz
GrN1zQKXPylzZwKC/ngJLef9QlohEbeTp5YaI2O3L5pcVLdRHQNUrxjHXOFpdwTW
iIMU0PgbEC8B+JzmEpQoZ2sIZvbeF74jbSg3ZdZjXbcRvbxtvbc9AiSii/6xPFuh
uc599oR/910mcLA+7viwIN/FAZsWoFVuACumObZUwCSqdyngGIviokCalDBLYr5U
jpJ+0XZIJ98lAjkM3860azCYT4oy920b2cvQAm9pOgoMNRHe4LTwA51fZbDhknYt
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1417949233920120816700448565269754036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 23:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 23:16:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22498335944082149104632612484838333359032974157594418326866529070914934028400800677942006354216063289482947292041850431769444492489757756404037421272636797930874209459601747127056127351978423598084266334109918253203452150214131212016416564731603065169083659533643629128894469264146761480851783772376492765081164966694823266353273565443523409777049929031614866476136458159883999023748199138347268947742489733368228190779969318079761540626907213431152848885002529503922262445145696971833566502589878691562001772014598291094710904543744509031310401232632993896703798978815898195686736195780528944494721794990725632765201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.silvercross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.overlakehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anamosa.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.wellingtonregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.bradentoncardiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami-neurociencia-medicos.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.nortonchildrens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.inlandvalleymedcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlkch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.aikenregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorsqa.bcbsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicos.nuvancehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.chnola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.hshs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stonybrookmedicine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubuque.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuvancehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.palmdaleregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.doctors.apps.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystemheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.mhealthfairview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madison.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxcity.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystemchildrens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.valleyhospital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.desertspringshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.doctorsqa.bcbsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.eastalabamahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.manateememorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterloo.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.gundersenhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ngpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northernlighthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarrapids.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.nwtpg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.centennialhillshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.manateehealthcaresystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findadoctor.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.summerlinhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.valleyhealthphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.nahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prdqa2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.trihealthpho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.lakewoodranchmedicalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.texomacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.gwhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.inspirahealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.munsonhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.sthsclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthoatlanta.piedmont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.nwths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.fortduncanmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.childrensmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.laredophysiciansgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortdodge.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinnell.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providerdirectory.uabmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findadoc.umchealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.einstein.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.hendersonhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.temeculavalleyhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadwayhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.virtua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.aikenphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystemedinburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.swhealthcaresystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.bestcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmoines.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.valleyhealthsystemlv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.billingsclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.bellin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoria.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadcities.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stmarysphysicianassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.texomamedicalcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.hf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-api.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami-cancer-doctors.baptisthealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.oloah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.nnmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd2.healthsparq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.nnmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.saintlukeskc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.nortonhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.springvalleyhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nghs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provider-match.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.coronaregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.fallbrookhealthcarephysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventisthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.manateephysicianalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystemmcallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.lakewoodranchmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ksbhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.msaweightloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.hackensackmeridianhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.ranchospringsmedcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwayhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.texomacareweightloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.emoryhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.massgeneralbrigham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.surgicalweightcontrolcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ecmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ololchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.unitypoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.doctorshosplaredo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.stmarysregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.arh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de4f272767814cefcdaa0b4dd698cb8c2025441d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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