imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:17:a8:70:3a:5e:2d:5e:02:fc:f7:ff:bd:26:9f:e6 was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:17:a8:70:3a:5e:2d:5e:02:fc:f7:ff:bd:26:9f:e6
Serial Number (int): 1452067159962815823979822842152132582
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: bb:06:27:4a:43:43:f0:69:78:0a:a9:60:15:d2:32:90:a6:1a:ff:0e
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 03:9d:d7:88:da:7e:12:4c:fb:ed:e5:01:e5:c6:68:c5:9d:92:ec:e4
Fingerprint (sha256): fb:e1:7a:ae:ed:81:4f:e8:92:5a:5c:84:05:af:6f:c9:d3:76:ae:e7:b4:58:65:cf:22:89:28:c2:e5:58:16:6b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fahow.org
www.adl-usa.com
www.leeschapelbaptist.org
comocomprarbitcoin.org
www.greekescapes.com
getfundedafrica.com
www.disan.cl
symenv.com
tangowithcolette.com
www.sfapp.ug
www.selmanfamilydentistry.com
www.symenv.com
www.nevasayneva.com
onenessthecourse.com
alittletlc.org
shreenishkalankkalkidham.com
www.blackstudentfund.org
www.stcomputersolutions.com.au
www.comocomprarbitcoin.org
www.longspeakbsa.org
robyndykstra.com
www.photoencaustic.com
mattbrostrom.com
www.painfreeforlifepilates.com
www.getrestorativejustice.com
www.northernhs.org
vallismedica.com
oacp.org
edepacademy.org
www.vaughnbrown.com
www.getfundedafrica.com
brianmercerbooks.com
barnabychallengeretreats.com
modalicensing.com
jimthorpegunsammo.com
www.brianmercerbooks.com
edensent.com
smartbuildingsystem.sx
sfapp.ug
www.howpositiveareyou.com
theironjen.com
imperva.com
www.shreenishkalankkalkidham.com
www.peakpoolsandspas.com
www.modalicensing.com
www.myhrpost.com
everythingology.com
www.curiosityjump.com
www.porterci.com
truckersfinalmile.org
www.mattbrostrom.com
www.tallersl.org
inspirationalbasketball.com
northernhs.org
www.tangowithcolette.com
chesapeakesportpilot.com
www.barnabychallengeretreats.com
www.theological-geography.net
www.chesapeakesportpilot.com
www.woodburnerstwo.com
www.edepacademy.org
www.theironjen.com
animawave.com
www.messagetheory.com
selmanfamilydentistry.com
peakpoolsandspas.com
mydearwatsonhandyman.com
porterci.com
mybankruptcybridge.com
www.ohavshalomministries.org
getrestorativejustice.com
www.jimthorpegunsammo.com
ohavshalomministries.org
blackstudentfund.org
www.mydearwatsonhandyman.com
www.truckersfinalmile.org
www.fahow.org
www.vallismedica.com
www.edensent.com
tallersl.org
www.oacp.org
htshouston.com
longspeakbsa.org
www.carsautoinc.com
stcomputersolutions.com.au
www.alittletlc.org
www.inspirationalbasketball.com
disan.cl
www.smartbuildingsystem.sx
leeschapelbaptist.org
hindmarshlandcare.org.au
theological-geography.net
www.animawave.com
www.robyndykstra.com
www.two-usa.com
villonfamilyhospice.com
carsautoinc.com
myhrpost.com
greekescapes.com
www.villonfamilyhospice.com
painfreeforlifepilates.com
www.everythingology.com
nevasayneva.com
www.mybankruptcybridge.com
www.onenessthecourse.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLyDg4rbshK2Ex0RQkJb
/1C8FbDfnQ5QgoBwjmwmrLfpBEebDs3/uNnI7lj69iIvMLMa82ZG29dO1v69mt06
NLMpNMQnYO2BK6VGYH8ezz/7jVlGDE1/FCFUMUso9xbVUMSUL+Fh+BkDApXyMYnt
F3yQcE1RXfeOyuya2QWLPlqZqmV8/pSV7dB+skq1rDIz/ZG5dKbvmIGJ4X1OjeGY
Ile8npFdL/Mjt72kUcqUSbBwTdNLsIEh7BENMGT3H2N286l19CaDHUHtCDVsdGb0
SyDDxTsJr/eK0uZpx7ye18RqAyD5195rXoVLqa7/2jDI1948jmKqizkG3ZN3G+cl
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1452067159962815823979822842152132582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 18:15:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 18:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17261369058290151578583573942042593573616939874881144866329287214905585997525412275055476158457522487380315411242449920629022572783741563695761391750073760290881042720102810471774572360471637811790040891061800154086054154460846779056332424366292745462739600714902653376258246705323865571044779141250945902029012756228062964549581266649026415063395973755457971987202023682302013817989085543113152769426263820726498757642010152901428911868766703432950340922567245598958564739275622554775890281997911056744889561283584721066089969980358740959897296584992289583999831483185456259879697094817842776482573069249264975554047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adl-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leeschapelbaptist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comocomprarbitcoin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greekescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfundedafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disan.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symenv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangowithcolette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfapp.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selmanfamilydentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.symenv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevasayneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenessthecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alittletlc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreenishkalankkalkidham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackstudentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcomputersolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comocomprarbitcoin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longspeakbsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robyndykstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photoencaustic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattbrostrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.painfreeforlifepilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrestorativejustice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallismedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edepacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaughnbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getfundedafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianmercerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnabychallengeretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modalicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimthorpegunsammo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianmercerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edensent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbuildingsystem.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfapp.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howpositiveareyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theironjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shreenishkalankkalkidham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peakpoolsandspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modalicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhrpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiosityjump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porterci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckersfinalmile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mattbrostrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallersl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirationalbasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangowithcolette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesapeakesportpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barnabychallengeretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theological-geography.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesapeakesportpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodburnerstwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edepacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theironjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animawave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.messagetheory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selmanfamilydentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakpoolsandspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydearwatsonhandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porterci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybankruptcybridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohavshalomministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrestorativejustice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimthorpegunsammo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohavshalomministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstudentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydearwatsonhandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truckersfinalmile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fahow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallismedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edensent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallersl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htshouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longspeakbsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carsautoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcomputersolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alittletlc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirationalbasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disan.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartbuildingsystem.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeschapelbaptist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindmarshlandcare.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theological-geography.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animawave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robyndykstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villonfamilyhospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsautoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villonfamilyhospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painfreeforlifepilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everythingology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevasayneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybankruptcybridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onenessthecourse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb06274a4343f069780aa96015d23290a61aff0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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