DV SSL/TLS Certificate for imperva.com

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign Atlas R3 DV TLS CA 2025 Q2)

About the imperva.com DV SSL/TLS Certificate

This certificate with serial number 01:a8:c9:3f:79:1c:9f:a5:cc:c7:d0:54:69:ee:a2:72 for imperva.com was issued on by GlobalSign nv-sa.

With 65 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for imperva.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 01:a8:c9:3f:79:1c:9f:a5:cc:c7:d0:54:69:ee:a2:72
Serial Number (int): 2205615661205629324976915367697752690
Serial Number Length: 121 bits, 16 octets

Subject Key Identifier: d1:2c:5e:46:31:4e:0a:d3:83:ce:03:9d:7f:50:62:3e:88:43:1e:9d
Authority Key Identifier: 9c:fb:55:11:10:40:a2:3f:45:79:dd:5c:2e:82:63:93:40:16:47:ca

Fingerprint (SHA-1): ec:ad:f7:28:c5:a3:5a:60:e1:2d:3e:30:01:85:1b:33:ea:ae:24:3f
Fingerprint (SHA-256): eb:32:1d:9c:9b:3d:a2:88:44:62:2b:97:84:c0:e3:2e:fa:c0:4c:3d:a1:75:38:dd:be:91:42:a1:17:d4:93:f8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2025q2.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2025q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2025q2.crl

Check the revocation status for certificate imperva.com
65
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for imperva.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.bgecollectsure.com
www.myingpension.com
*.southwestern.ie
*.web.tflcc.co.uk
elicollectsure.com
employers.uss.co.uk
*.rothesaypension.com
*.ccsirw.com
myesps.co.uk
*.pensions-directory.co.uk
*.elicollectsure.com
rothesaypension.com
*.ccscollectsure.com
*.dev.securitywatchdog.org.uk
hartlinkonline.co.uk
horizonpensionscheme.com
stu.capita-eb.co.uk
qa.uss.co.uk
*.horizonpensionscheme.com
picmemberzone.com
*.capita.co.in
*.af4colp.co.uk
www.mandspensionscheme.com
*.retaininternational.com
pearson-pensions-portal.com
www.teacherspensions.co.uk
*.rspensions.co.uk
www.hartlinkonline.co.uk
www.picmemberzone.com
completetrace.co.uk
*.capitacustomersolutions.ie
api.uss.co.uk
www.completetrace.co.uk
mypfizerpension.co.uk
*.myesps.co.uk
myingpension.pensions-directory.co.uk
bgecollectsure.com
*.qa.capitapensionsolutions.co.uk
verificationonline.co.uk
whsmithptpensions.co.uk
www.capita-eb.co.uk
myingpension.com
everythingeverywherepension.co.uk
*.mypennet.co.uk
ccscollectsure.com
*.capita.co.uk
qapi.uss.co.uk
capita-eb.co.uk
imperva.com
*.whsmithpbpensions.co.uk
www.mypfizerpension.co.uk
qa.hartlinkonline.co.uk
www.verificationonline.co.uk
chs.capita-eb.co.uk
whsmithpbpensions.co.uk
boe.knowledgepool.com
www.everythingeverywherepension.co.uk
*.picmemberzone.com
*.knowledgepool.com
www.pearson-pensions-portal.com
*.whsmithptpensions.co.uk
mandspensionscheme.com
*.dsa.capita.com
rspensions.co.uk
teacherspensions.co.uk

X.509 Certificate

The complete raw X.509 certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbP+HFMNEd/Vkk85jKd
eALOP9EJhBvsGwJvuo6oKCln/HRy/y3DOH5RwKs9N4smsmSBMF+3QuS9naA+LaRR
PNAhd2eVnvZTBAwX2pfneHc+2CXTYgkY3qC+UQSHVAnM7u9Br8U+gH+0TrDL48ru
BsXHN/4H4EiuWttn1RP5Oj9QwKdalc/4QpLzkvmqgZJTyqxJL4VRM8aGCS0rYmq6
YxiI4rKg1/ziJejEOtwAUIVxJyAHxuuCykA9oJnZ3TBRwLWt/DgsWX1qLX5x+3iK
OtbL6a6rENqtPLq34dYSuAw1AtmwaTtZayKhpJbsGtpUOgfiFh4yTJ2kuuWtXiQn
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2205615661205629324976915367697752690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2025 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 11:04:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-19 11:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20745890796825850093304793102634825260925633723227573580018317071572642487042501362514683014999287399787379653031360135511519111212161567403999528147750103040095303316815271831769239098432849315758746122163539274025251633172008308653412614566605475060423121254159105105134795036026047652774777262485848523580908741546251492199612488320008876133301255462592385249893412961627286305312800727989625416981007951864248765383580240723166994323614860106259528229697900048589285265421384018442342634421350717726693860156714403238381978381329231822176665174129250728011064675657930289531515313903811340508409421137428810573803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1498 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgecollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myingpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwestern.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.tflcc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elicollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employers.uss.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rothesaypension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccsirw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myesps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensions-directory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elicollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rothesaypension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccscollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.securitywatchdog.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizonpensionscheme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stu.capita-eb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.uss.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horizonpensionscheme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picmemberzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.af4colp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandspensionscheme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaininternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearson-pensions-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teacherspensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rspensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartlinkonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picmemberzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completetrace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacustomersolutions.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uss.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completetrace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypfizerpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myesps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myingpension.pensions-directory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgecollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.capitapensionsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verificationonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whsmithptpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capita-eb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myingpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingeverywherepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypennet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccscollectsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapi.uss.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-eb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whsmithpbpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypfizerpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.hartlinkonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verificationonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.capita-eb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whsmithpbpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boe.knowledgepool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everythingeverywherepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picmemberzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowledgepool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson-pensions-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whsmithptpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandspensionscheme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsa.capita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rspensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherspensions.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d12c5e46314e0ad383ce039d7f50623e88431e9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2025q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2025q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9cfb55111040a23f4579dd5c2e826393401647ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2025q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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