determiningglobalsign

SociétécoopérativeàresponsabilitélimitéeCoperatievevennootschapmetbeperkteaansprakelijkheidRPMBruxelles–RPRBrussel–T.
V.
A.
–B.
T.
W.
BE0446.
334.
711–IBANN°BE71210090590069*agissantaunomd'unesociété/handelendinnaamvaneenvennootschapAmemberfirmofErnst&YoungGlobalLimitedErnst&YoungRéviseursd'EntreprisesBedrijfsrevisorenDeKleetlaan2B–1831DiegemTel:+32(0)27749111Fax:+32(0)27749090ey.
comINDEPENDENTASSURANCEREPORTTothemanagementofGlobalSignNV/SA("GlobalSign"):ScopeWehavebeenengaged,inareasonableassuranceengagement,toreportonGlobalSignmanagement'sassertionthatforitsCertificationAuthority(CA)operationsatBelgium,Japan,Singapore,UnitedKingdom,throughouttheperiodApril1,2018toMarch31,2019foritsCAsasenumeratedinAppendixB,GlobalSignhas:DiscloseditsSSLcertificatelifecyclemanagementbusinesspracticesintheapplicableversionsoftheCertificatePracticeStatementsandCertificatePolicies,asstipulatedinAppendixA,includingitscommitmenttoprovideSSLcertificatesinconformitywiththeCA/BrowserForumGuidelinesontheGlobalSign'swebsite,andprovidedsuchservicesinaccordancewithitsdisclosedpracticesMaintainedeffectivecontrolstoprovidereasonableassurancethat:TheintegrityofkeysandSSLcertificatesitmanagesisestablishedandprotectedthroughouttheirlifecycles;andSSLsubscriberinformationisproperlyauthenticated(fortheregistrationactivitiesperformedbyGlobalSign)Maintainedeffectivecontrolstoprovidereasonableassurancethat:LogicalandphysicalaccesstoCAsystemsanddataisrestrictedtoauthorizedindividuals;andThecontinuityofkeyandcertificatemanagementoperationsismaintained;andCAsystemsdevelopment,maintenance,andoperationsareproperlyauthorizedandperformedtomaintainCAsystemsintegrityMaintainedeffectivecontrolstoprovidereasonableassurancethatitmettheNetworkandCertificateSystemSecurityRequirementsassetforthbytheCA/BrowserForuminaccordancewiththeWebTrustPrinciplesandCriteriaforCertificationAuthorities-SSLBaselinewithNetworkSecurity,Version2.
3.
Certificationauthority'sresponsibilitiesGlobalSign'smanagementisresponsibleforitsassertion,includingthefairnessofitspresentation,andtheprovisionofitsdescribedservicesinaccordancewiththeWebTrustPrinciplesandCriteriaforCertificationAuthorities-SSLBaselinewithNetworkSecurity,Version2.
3.
OurindependenceandqualitycontrolWehavecompliedwiththeindependenceandotherethicalrequirementsoftheCodeofEthicsforProfessionalAccountantsissuedbytheInternationalEthicsStandardsBoardforAccountants,whichisfoundedonfundamentalprinciplesofintegrity,objectivity,professionalcompetenceandduecare,confidentialityandprofessionalbehaviour.
AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedThefirmappliesInternationalStandardonQualityControl1,andaccordinglymaintainsacomprehensivesystemofqualitycontrolincludingdocumentedpoliciesandproceduresregardingcompliancewithethicalrequirements,professionalstandardsandapplicablelegalandregulatoryrequirements.
Auditor'sresponsibilitiesOurresponsibilityistoexpressanopiniononmanagement'sassertionbasedonourprocedures.
WeconductedourproceduresinaccordancewithInternationalStandardonAssuranceEngagements3000,AssuranceEngagementsOtherthanAuditsorReviewsofHistoricalFinancialInformation,issuedbytheInternationalAuditingandAssuranceStandardsBoard.
Thisstandardrequiresthatweplanandperformourprocedurestoobtainreasonableassuranceaboutwhether,inallmaterialrespects,management'sassertionisfairlystated,and,accordingly,included:1.
ObtaininganunderstandingofGlobalSign'sSSLcertificatelifecyclemanagementbusinesspractices,includingitsrelevantcontrolsovertheissuance,renewal,andrevocationofSSLcertificates,andobtaininganunderstandingofGlobalSign'snetworkandcertificatesystemsecuritytomeettherequirementssetforthbytheCA/BrowserForum;2.
SelectivelytestingtransactionsexecutedinaccordancewithdisclosedSSLcertificatelifecyclemanagementpractices3.
Testingandevaluatingtheoperatingeffectivenessofthecontrols;and4.
Performingsuchotherproceduresasweconsiderednecessaryinthecircumstances.
Webelievethattheevidencewehaveobtainedissufficientandappropriatetoprovideabasisforouropinion.
GlobalSign'smanagementhasdisclosedtoustheattachedcomments(AppendixC)thathavebeenpostedpubliclyintheonlineforumsoftheBugzillasite,aswellastheonlineforumsofindividualinternetbrowsersthatcomprisetheCA/BrowserForum.
Wehaveconsideredthenatureofthesecommentsindeterminingthenature,timingandextentofourprocedures.
RelativeeffectivenessofcontrolsTherelativeeffectivenessandsignificanceofspecificcontrolsatGlobalSignandtheireffectonassessmentsofcontrolriskforsubscribersandrelyingpartiesaredependentontheirinteractionwiththecontrols,andotherfactorspresentatindividualsubscriberandrelyingpartylocations.
Wehaveperformednoprocedurestoevaluatetheeffectivenessofcontrolsatindividualsubscriberandrelyingpartylocations.
InherentlimitationsBecauseofthenatureandinherentlimitationsofcontrols,GlobalSign'sabilitytomeettheaforementionedcriteriamaybeaffected.
Forexample,controlsmaynotprevent,ordetectandcorrect,error,fraud,unauthorizedaccesstosystemsandinformation,orfailuretocomplywithinternalandexternalpoliciesorrequirements.
Also,theprojectionofanyconclusionsbasedonourfindingstofutureperiodsissubjecttotheriskthatchangesmayalterthevalidityofsuchconclusions.
OpinionInouropinion,throughouttheperiodApril1,2018toMarch31,2019,GlobalSignmanagement'sassertion,asreferredtoabove,isfairlystated,inallmaterialrespects,inaccordancewiththeWebTrustPrinciplesandCriteriaforCertificationAuthorities-SSLBaselinewithNetworkSecurity,AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedVersion2.
3.
ThisreportdoesnotincludeanyrepresentationastothequalityofGlobalSign'sservicesbeyondthosecoveredbytheWebTrustPrinciplesandCriteriaforCertificationAuthorities-SSLBaselinewithNetworkSecurity,Version2.
3,northesuitabilityofanyofGlobalSign'sservicesforanycustomer'sintendedpurpose.
UseoftheWebTrustsealGlobalSign'suseoftheWebTrustforCertificationAuthorities–SSLBaselinewithNetworkSecuritySealconstitutesasymbolicrepresentationofthecontentsofthisreportanditisnotintended,norshoulditbeconstrued,toupdatethisreportorprovideanyadditionalassurance.
Ernst&YoungBedrijfsrevisorencvbaDiegem,BelgiumChristelWeymeersch,PartnerNovember25,2019AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedAppendixA–CertificationPracticeStatementsandCertificatePoliciesinScopeCertificationPracticeStatementBeginEffectiveDateEndEffectiveDateVersion8.
614-Dec-1702-Apr-18Version8.
703-Apr-1814-Jun-18Version8.
815-Jun-1810-Oct-18Version8.
911-Oct-1811-Mar-19Version912-Mar-1930-May-19CertificatePolicyBeginEffectiveDateEndEffectiveDateVersion5.
614-Dec-1702-Apr-18Version5.
703-Apr-1814-Jun-18Version5.
815-Jun-1810-Oct-18Version5.
911-Oct-1811-Mar-19Version612-Mar-1930-May-19AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedAppendixB–In-ScopeCAsRootCAsSHA256HashC=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCAEB:D4:10:40:E4:BB:3E:C7:42:C9:E3:81:D3:1E:F2:A4:1A:48:B6:68:5C:96:E7:CE:F3:C1:DF:6C:D4:33:1C:99OU=GlobalSignRootCA-R3O=GlobalSignCN=GlobalSignCB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3BOU=GlobalSignECCRootCA-R5O=GlobalSignCN=GlobalSign17:9F:BC:14:8A:3D:D0:0F:D2:4E:A1:34:58:CC:43:BF:A7:F5:9C:81:82:D7:83:A5:13:F6:EB:EC:10:0C:89:24OU=GlobalSignRootCA-R6O=GlobalSignCN=GlobalSign2C:AB:EA:FE:37:D0:6C:A2:2A:BA:73:91:C0:03:3D:25:98:29:52:C4:53:64:73:49:76:3A:3A:B5:AD:6C:CF:69C=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCA-R7E9:5B:31:25:40:5E:0D:46:04:2D:55:AC:62:15:45:07:C6:78:EB:C3:60:76:57:85:FB:20:4A:F3:49:BF:E8:80C=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCA-R8AE:48:51:FF:42:03:9B:AD:E0:58:27:91:51:D8:26:83:04:1D:25:98:E2:40:68:3C:C5:6D:76:FB:8C:F5:3D:42C=BEO=GlobalSignnv-saCN=GlobalSignRootE46CB:B9:C4:4D:84:B8:04:3E:10:50:EA:31:A6:9F:51:49:55:D7:BF:D2:E2:C6:B4:93:01:01:9A:D6:1D:9F:50:58C=BEO=GlobalSignnv-saCN=GlobalSignRootR464F:A3:12:6D:8D:3A:11:D1:C4:85:5A:4F:80:7C:BA:D6:CF:91:9D:3A:5A:88:B0:3B:EA:2C:63:72:D9:3C:40:C9OtherCAsSHA256HashCN=AlphaSSLCA-G2O=AlphaSSL1D:CA:65:B8:6A:57:33:6B:A5:AF:B7:21:4A:36:F7:D6:ED:E6:98:EB:4F:03:38:7C:B3:AD:6B:BD:3A:93:BA:B6CN=AlphaSSLCA-SHA256-G2O=AlphaSSL93:3E:4A:2D:8D:B1:FF:9F:F0:E5:08:EA:7F:16:37:E0:74:F6:60:FE:6F:36:5A:22:33:DF:C2:B5:2C:88:9D:98CN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BEEE:79:36:43:19:94:74:ED:60:EF:DC:8C:CD:E4:D3:74:45:92:16:83:59:3A:A7:51:BB:F8:EE:49:1A:39:1E:97CN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BE8C:24:10:F7:6B:14:9C:A0:62:B4:20:AB:61:1B:6B:F0:A0:6E:6E:79:9A:29:58:7E:4D:4E:C1:6D:05:37:B7:EACN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BE5A:81:7E:AD:A4:AD:78:73:4E:BB:2C:F6:74:35:2D:97:F4:35:22:90:C4:0E:AF:10:E7:64:B1:EA:C0:75:B0:E6CN=AlphaSSLCA-SHA256-G3O=GlobalSignnv-saC=BE4C:01:3B:88:54:68:9C:B6:62:6C:C0:87:B4:D4:FC:CA:45:10:4E:2D:73:BF:AD:F3:3A:69:79:ED:12:4B:78:37CN=ATTWi-FiServicesRootCertificateAuthorityG3OU=ATTWi-FiServicesO=ATTServicesIncST=TexasC=US12:F3:C6:42:3F:95:C7:FF:C9:A9:70:67:FD:2D:95:3E:70:60:9A:44:29:9C:A7:D4:58:C5:73:C6:3A:59:2E:66CN=ATTWi-FiServicesRootCertificateAuthorityG3OU=ATTWi-FiServicesO=ATTServicesIncST=TexasC=US27:13:C7:A3:21:05:C5:E7:40:18:46:5D:14:D5:1A:95:9C:8A:EF:C2:11:5E:1C:00:7A:6A:6B:4C:88:31:3B:C6CN=Beame.
ioCA1O=Beame.
ioLtdL=TelAviv-JaffaST=TelAvivC=IL43:26:39:13:B4:83:EB:6F:0B:02:05:40:F8:F7:BE:0A:1D:7C:9C:E7:65:2F:E0:FB:47:43:D7:21:33:93:55:1CCN=Beame.
ioCA2O=Beame.
ioLtdCF:6E:6B:82:C9:97:CB:5C:C1:A5:50:66:AF:5F:60:CA:AC:77:59:4E:B1:06:FB:4D:49:8B:C5:0E:CD:EB:8A:3AAmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedL=TelAviv-JaffaST=TelAvivC=ILCN=CloudflareECCDVCAO=Cloudflare\,Inc.
L=SanFranciscoST=CAC=US0F:45:17:48:7F:D0:A8:BA:31:94:A6:12:24:50:A7:B3:2C:98:7F:FF:16:F2:D4:AF:54:E6:ED:B6:FE:D6:8E:08CN=CloudflareRSADVCAO=Cloudflare\,Inc.
L=SanFranciscoST=CAC=USD4:39:F8:8E:8F:2F:80:A3:06:F9:10:DC:DE:54:8D:71:BB:FD:99:A8:5F:C7:03:4E:FB:61:0E:37:49:55:09:32CN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEA0:13:3B:E5:B1:4E:02:31:0A:2D:4B:EA:B6:01:09:4F:11:94:EE:8B:D6:FD:29:DD:FE:7B:93:47:46:7C:2E:ECCN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEF1:64:AD:5E:4C:E9:EF:C0:A1:44:CA:90:2E:A2:ED:46:C4:64:D2:D5:08:CA:91:9A:23:09:5C:DF:30:D4:DC:68CN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEBF:5E:DF:BE:EB:85:99:9C:51:69:CB:F3:F4:DB:63:B6:79:AD:2E:1E:22:72:FC:37:95:F9:F9:92:1E:6D:04:87CN=DPDHLTLSCTCAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE91:53:e4:42:0d:dc:7e:b4:e6:e8:64:aa:03:77:da:df:40:82:ec:d3:50:52:11:36:38:e0:5d:3c:29:6b:c0:06CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE27:6F:32:C1:EB:6C:5F:85:5A:79:04:FD:03:64:B2:15:0E:87:99:7F:C8:D0:31:3D:EF:7E:53:AE:09:99:DC:1DCN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE5A:40:55:35:C1:12:A0:A8:1A:F0:D2:AC:CA:3C:3F:9B:C1:A6:77:58:6C:DB:C6:33:CB:4F:5F:77:8E:1A:35:50CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE23:A7:47:04:D7:7A:03:CF:D3:FF:19:E6:2C:50:08:48:21:4E:6C:60:FD:2A:AE:F7:DC:E7:A8:F9:EE:9F:92:32CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DEBE:44:1E:EA:2B:79:50:00:C1:C1:33:AD:C3:2B:CE:6F:8D:3D:20:1D:A7:13:F4:53:3A:E0:F6:A2:AC:96:28:8ECN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE1C:94:2A:22:A0:16:A1:E5:55:9D:AE:77:EC:5C:E8:67:1F:98:AE:0B:A4:AC:2D:C2:59:41:8E:8E:1E:9F:94:ADCN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE25:BA:CC:40:A5:39:2B:82:AA:DE:A0:49:03:90:5A:46:71:21:F2:82:20:E6:F2:F7:E0:FE:98:2A:AF:C1:4F:A6CN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BE4B:73:34:E1:D8:99:98:22:BA:FA:8F:F6:88:81:25:38:9B:18:A4:E5:AB:26:FF:A6:24:C7:F6:8F:DC:81:F0:CBAmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedCN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BEE1:55:EB:F9:63:34:E7:9A:E2:E2:87:D5:5C:FC:91:85:DE:24:93:5A:65:3F:13:C5:BA:05:AF:F8:18:77:1B:C6CN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BEC2:E4:23:6D:B1:B7:57:B5:1B:77:92:13:88:EF:A8:23:E6:A6:00:FD:4B:DA:30:B6:3A:B7:78:86:F2:56:18:B7CN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BEE0:C2:EB:D1:F6:BA:D4:FE:AA:E3:1A:31:07:E6:9A:BE:E9:02:DB:38:B9:DF:BE:33:F0:57:0B:DA:34:94:C2:0ACN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BEE8:7E:A2:BE:D6:C6:20:3B:2C:55:B0:0F:E4:9D:28:76:FB:A6:47:02:10:5A:EB:74:8B:86:5A:91:8B:5C:7D:27CN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BEBA:0E:2B:6B:F2:C9:8E:D2:C3:B1:C1:C0:8A:1B:BD:CA:F9:27:0A:C5:28:A3:19:43:01:DD:2A:0B:6B:67:B9:B3CN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BE4E:15:3A:58:88:77:68:8F:1A:0C:10:3A:08:4C:2E:DB:3A:D1:D8:C4:80:CF:03:D8:AB:6F:ED:47:D9:20:43:70CN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BE37:D0:80:A5:E9:A5:26:66:3E:56:EE:20:DE:4B:D9:F7:95:2D:AC:C3:41:49:14:39:08:01:67:AD:5D:D1:8C:ACCN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BEBF:DF:4C:F3:F1:43:AD:0D:B9:12:D8:AB:3A:7C:12:F6:17:B9:EA:60:CE:8B:1F:4E:44:F7:42:70:FB:21:B1:9BCN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BE66:9E:77:27:A9:2B:E7:2D:97:18:E1:69:22:DC:1B:C1:49:2B:1A:F3:3F:A4:79:3E:68:D8:77:8F:19:A2:EB:E0CN=GlobalSignDomainValidationCA-SHA256-G3O=GlobalSignnv-saC=BE09:BC:1B:13:7C:03:12:39:EF:78:86:73:E9:4E:B1:7F:5F:3E:CA:B0:7D:3A:DB:FB:48:5E:75:AB:FA:AF:3B:9ACN=GlobalSignECAdministrationCA2O=GlobalSignnv-saC=BEC8:83:B3:EC:C6:AC:0D:EE:75:CD:D5:85:E7:3A:20:92:87:BC:0C:9F:9D:79:D4:88:86:0F:63:E2:EA:8A:7D:2CCN=GlobalSignECCCloudSSLCA-SHA384-G3O=GlobalSignnv-saC=BEB0:CD:6A:E7:B9:E2:0E:C5:F8:30:FE:E0:1F:66:6D:5D:90:E6:E2:29:D0:6B:C4:6A:30:AC:CE:DF:EC:88:96:48CN=GlobalSignECCEVSSLCA2018O=GlobalSignnv-saC=BE8f:19:ff:e0:2f:c7:95:ed:70:76:5d:14:36:ad:df:77:2f:e0:f0:77:3d:a4:36:ed:bd:b4:2a:2e:30:e2:e8:28CN=GlobalSignECCEVSSLCA2019O=GlobalSignnv-saC=BE0d:31:76:c5:8f:32:1a:a3:4c:57:c8:df:7c:17:d1:f4:e7:6c:79:7e:c1:16:c9:f1:d6:97:74:8e:d1:fc:e7:d9CN=GlobalSignECCOVSSLCA2018O=GlobalSignnv-saC=BE87:c7:15:53:44:5e:b3:c3:3c:3e:07:10:71:1b:99:e9:c7:77:3f:04:d9:1a:c3:8a:9f:4c:08:2e:e2:41:01:eaCN=GlobalSignECC384EVSSLCA-G3O=GlobalSignnv-saC=BE15:54:91:87:49:03:14:F5:17:76:41:F0:BE:B3:26:34:AA:12:30:EB:2C:F2:C2:8A:D9:C7:39:14:FB:18:AB:A0CN=GlobalSignECC384SSLCA-G3O=GlobalSignnv-saC=BEDC:6C:44:AC:8A:3C:D5:C3:45:12:73:F4:43:15:26:B2:EF:66:60:62:EE:76:32:58:A9:28:F6:0B:D0:8E:39:FECN=GlobalSignExtendedValidationCA-SHA256-G2O=GlobalSignnv-saC=BE24:F9:1C:07:05:A0:A5:33:86:41:B3:65:FB:0D:9D:97:09:B5:62:97:CF:F1:85:7E:73:C0:2C:16:36:D4:86:AACN=GlobalSignExtendedValidationCA-SHA256-G2O=GlobalSignnv-saC=BE5B:B2:38:2D:20:E0:9A:E5:6B:4F:3A:51:57:83:8F:7B:AE:49:E4:2E:3C:E5:34:84:D6:6E:EB:2C:07:47:EF:4ACN=GlobalSignExtendedValidationCA-SHA256-G3O=GlobalSignnv-saAE:D5:DD:9A:53:39:68:5D:FB:02:9F:6D:89:A1:43:35:A9:65:12:C3:CA:CC:52:B2:99:4A:F8:B6:B3:7F:A4:D2AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedC=BECN=GlobalSignHVECCDVSSLCA2018O=GlobalSignnv-saC=BE4b:0d:13:92:d3:91:57:35:32:07:a6:4c:cb:14:68:3d:de:9d:2c:ed:1f:b5:8b:16:e0:38:be:57:07:c2:78:13CN=GlobalSignHVRSADVSSLCA2018O=GlobalSignnv-saC=BE54:c3:7a:8e:85:3f:d1:d6:37:8d:37:8b:93:93:07:ec:32:1a:31:cc:1a:5a:89:e7:18:06:33:bc:13:f1:87:62CN=GlobalSignOrganizationValidatedCA-SHA256-G4O=GlobalSignnv-saC=BE1E:17:41:A1:2E:B8:DA:2B:D7:6E:A9:6C:04:F5:20:35:98:39:71:0F:62:0E:80:95:2F:48:DD:02:40:A1:2C:D8CN=GlobalSignOrganizationValidatedECCCA-SHA256-G4O=GlobalSignnv-saC=BE65:EE:C0:CC:6C:97:0C:C1:CD:73:65:91:15:DC:8D:90:4E:6F:12:E6:DC:8F:D4:DD:A3:9D:54:CB:30:22:47:80CN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BEA6:64:22:C4:E4:49:D4:65:CB:02:3A:7F:C7:63:3D:E8:ED:18:16:98:5C:A4:10:93:FC:96:B3:66:3E:D7:A4:3BCN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BEA6:23:3E:CB:77:05:3F:72:93:7E:89:43:72:A6:01:ED:3A:BE:A9:0C:C3:B5:D8:95:12:72:0B:F3:FF:CB:DC:9DCN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BE08:2B:24:30:47:BF:00:F5:84:40:1F:53:8B:50:4B:AE:9E:C0:60:E0:07:FF:F2:8B:15:9C:08:41:70:68:65:4ECN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE1C:97:37:E9:68:AD:9D:FF:8D:8D:7F:CF:99:6A:14:4B:B9:78:51:A1:90:11:A0:19:0C:94:3C:AE:8D:43:CF:E0CN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE74:EF:33:5E:5E:18:78:83:07:FB:9D:89:CB:70:4B:EC:11:2A:BD:23:48:7D:BF:F4:1C:4D:ED:50:70:F2:41:D9CN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE0B:33:92:12:D7:CF:F1:7A:2C:59:E3:56:69:B5:8E:77:35:01:33:75:0A:78:DA:94:04:77:0E:DD:47:0D:EF:76CN=GlobalSignOrganizationValidationCA-SHA256-G3O=GlobalSignnv-saC=BE69:9D:54:B7:48:2A:5D:32:93:31:EA:04:15:CC:2E:DC:D6:0F:DA:01:D1:9E:71:D0:54:19:6B:CE:06:77:73:5CCN=GlobalSignR6AdminCA-SHA256-G3O=GlobalSignnv-saC=BEC5:B6:79:10:69:58:15:2F:83:FB:58:86:DD:C4:1F:07:85:19:3E:F6:7C:69:75:BE:3E:50:9F:17:F2:9B:7A:86CN=GlobalSignR7AdminCA-SHA256-G3O=GlobalSignnv-saC=BED3:02:FF:37:31:D2:8C:59:A0:2D:58:85:C5:BA:32:4B:DC:31:BB:D0:9A:31:CC:91:6C:F1:B7:4A:C2:77:C0:7BCN=GlobalSignR8AdminCA-SHA256-G3O=GlobalSignnv-saC=BEEA:8C:20:1C:1F:8E:EF:58:06:7B:29:7E:6C:87:D2:62:2A:C3:94:65:27:92:4B:B6:DE:6A:3D:70:0B:E8:13:44CN=GlobalSignRootCAOU=RootCAO=GlobalSignnv-saC=BE6A:DD:36:8D:A3:54:58:A0:9E:DF:88:0D:05:70:E8:63:AD:C8:50:7D:49:40:6B:4D:97:E4:4E:53:BC:93:08:C9CN=GlobalSignRSADVSSLCA2018O=GlobalSignnv-saC=BE9e:89:8e:d0:3f:a4:69:69:69:0d:ad:73:c7:29:66:75:04:5f:f9:b5:a0:10:0a:39:9b:eb:84:35:a9:8f:51:85CN=GlobalSignRSAOVSSLCA2018O=GlobalSignnv-saC=BEb6:76:ff:a3:17:9e:88:12:09:3a:1b:5e:af:ee:87:6a:e7:a6:aa:f2:31:07:8d:ad:1b:fb:21:cd:28:93:76:4aCN=GlobalSignO=GlobalSignOU=GlobalSignECCRootCA-R53f:31:9b:2a:fe:d4:a0:f7:51:27:be:59:92:55:50:d0:42:8e:68:76:3a:09:e2:73:eb:6a:9f:f8:d1:8d:bb:5bCN=GlobalSignO=GlobalSignOU=GlobalSignRootCA-R344:5e:ec:78:bc:61:21:50:44:a0:37:96:56:aa:2d:5d:b5:e4:2f:76:cb:70:b8:d1:4c:20:77:aa:94:3d:4e:bbCN=GlobalSignO=GlobalSignC9:4F:ED:DA:4E:86:08:90:85:80:BC:7F:87:B4:34:E0:3B:B2:62:E4:2F:64:C6:38:20:A8:F5:0F:B1:7C:1C:ECAmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedOU=GlobalSignRootCA-R3CN=GlobalSignO=GlobalSignOU=GlobalSignRootCA-R6dd:a8:da:73:61:87:d7:6f:4f:0e:d5:a5:f6:67:b5:4d:99:a9:8a:e0:60:91:d0:e3:a0:17:14:e9:22:16:95:adCN=GlobalSignOU=GlobalSignRootCA-R3O=GlobalSign25:10:E2:48:90:3F:01:B6:3F:93:98:17:9E:55:06:97:9F:0E:F5:07:E4:17:4B:65:7A:F6:F7:70:A4:17:EC:94CN=GlobalSignOU=GlobalSignRootCA-R6O=GlobalSign75:BF:B5:22:CC:4B:58:DA:22:EE:48:85:17:C5:F2:EF:F9:25:76:D2:0F:59:5F:9A:CE:48:3A:03:6F:C1:BB:6BCN=ICPEduO=RedeNacionaldeEnsinoePesquisa-RNPOU=GerenciadeServicos(GSer)L=RiodeJaneiroST=RiodeJaneiroC=BREA:CB:A6:C9:65:98:B4:A4:1F:D5:3D:69:AB:9E:D9:FB:BB:13:81:15:4C:45:34:56:72:0C:17:4F:FE:57:6D:1DCN=LibertyUniversityExternalIssuingCA01O=LibertyUniversityL=LynchburgST=VAC=USCA:00:5A:A7:5E:33:59:4B:D1:DE:DC:58:4E:1E:74:E5:19:8E:BB:1D:E8:89:29:ED:4F:3E:2E:9F:FC:E3:87:3BCN=LibertyUniversityExternalIssuingCA01O=LibertyUniversityL=LynchburgST=VAC=US1F:91:21:2C:6B:FC:33:3C:6E:B5:2A:68:55:25:E1:E5:B9:E3:AC:1E:F7:A5:A8:66:49:F5:F9:5C:72:1D:88:98CN=NSW-DEC-ISS-CA1O=NSWDepartmentofEducationandCommunitiesL=SydneyST=NSWC=AUC7:68:21:31:79:F8:07:1B:FA:B3:94:15:B3:C0:91:12:97:C2:34:6E:41:1E:20:0A:B6:79:12:94:8E:4C:99:D7CN=ProdriveTechnologiesB.
V.
OVSSLIssuingCAO=ProdriveTechnologiesB.
V.
OU=ITServicesL=SonST=Noord-BrabantC=NL39:8B:14:99:CE:00:A2:5F:61:CA:C3:D8:BE:E5:71:60:18:80:82:3E:F2:88:BE:97:72:A4:D1:33:98:42:25:95CN=SHECADVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN39:3b:8b:15:ca:bc:38:86:fb:2e:41:64:95:d6:3c:8b:ad:d8:dc:af:87:55:20:76:c8:a0:a9:63:7c:24:de:47CN=SHECAEVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN14:7c:44:7f:ee:b8:62:02:b5:03:31:4f:ca:f0:03:6b:ea:ae:f4:37:c3:9b:56:b3:58:ec:44:6a:9d:20:38:7fCN=SHECAOVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN77:ea:c4:76:45:3c:b7:32:25:7f:f1:66:a5:eb:d1:65:6c:b1:f6:73:b6:8e:28:df:41:77:41:33:97:9f:a2:a4CN=SignTrustDomainVerificationCA-SHA256-G2O=SignTrustOU=SignTrustDomainVerificationCA-SHA256-G2BE:CD:7B:1B:8C:68:07:A2:96:3B:3A:EE:9B:E6:0A:31:4E:BE:AF:3E:A4:C3:0A:F3:9B:7A:A6:C0:82:58:3C:E0CN=SolutiCA-DVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRA7:4F:FF:F5:28:47:19:05:38:50:73:AD:F3:99:70:19:B2:6F:4F:AF:24:BC:E9:10:2A:27:2E:7A:44:84:E4:BCAmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedCN=SolutiCA-EVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRBB:17:0B:39:78:4D:02:78:43:25:CE:A9:38:D9:23:14:C6:17:DD:E8:08:C8:67:E3:3E:2A:D1:61:D5:4B:3E:8ACN=SolutiCA-OVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRE6:E9:29:C8:45:6C:01:4E:8D:A7:33:AC:E4:E9:81:45:52:27:2B:81:17:60:50:A1:3E:A4:5A:82:32:00:B1:4BCN=SouthernCompanyExternalIssuingCA1O=SouthernCompanyServices\,Inc.
L=AtlantaST=GAC=USFB:95:3C:4F:C0:04:58:46:D0:24:91:C8:EC:CF:38:7B:A3:43:47:C1:7A:BB:0E:A6:D5:9F:6D:E4:D2:F1:EA:04CN=StatoilQualifiedCAO=StatoilASA-923609016C=NO,DC=statoil,DC=comB6:BA:9C:02:A7:05:61:C3:99:4C:E0:94:AD:56:A7:87:EE:DD:1A:61:A7:D4:AC:0C:D1:1B:64:B2:4E:F2:AE:13CN=TrustedRootCAG2O=GlobalSignnv-saOU=TrustedRootC=BE6E:32:A3:5B:59:9E:90:87:BB:1A:B3:5C:E7:30:22:EC:2E:26:AF:34:BE:38:89:19:41:9C:95:70:0C:D8:E7:FBCN=TrustedRootCASHA256G2O=GlobalSignnv-saOU=TrustedRootC=BE01:FD:73:EF:5E:70:F5:26:FC:9C:11:F6:5F:E2:EE:6F:71:25:B3:69:39:49:22:7F:FD:8E:45:9E:58:3C:45:8ACN=ValidCertificadoraDigitalAlphaSSLCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDAlphaSSLL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR38:51:35:ab:18:dd:19:0a:03:bc:c0:60:1a:ca:6f:83:ce:a3:66:64:27:91:eb:e0:a2:fd:b0:59:c2:f7:75:0aCN=ValidCertificadoraDigitalSSLDVCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDSSLDVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR62:b4:8f:51:e5:86:86:76:fd:79:b9:dd:9d:b9:8b:a9:28:49:4b:a7:34:40:3c:58:33:93:c4:2c:e0:0a:d4:48CN=ValidCertificadoraDigitalSSLEVCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDSSLEVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR27:fa:1b:e4:f4:b5:6a:14:2a:47:a5:6a:7e:94:b7:25:02:05:9b:40:22:e4:62:3e:74:8c:a1:ef:15:1c:f2:22CN=ValidCertificadoraDigitalSSLOVCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDSSLOVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR60:0e:97:60:1b:0b:bc:5f:05:6f:04:ee:f6:71:ef:58:0f:2a:85:83:c6:d2:d3:fa:d4:01:b9:d8:20:aa:88:36CN=VirginiaTechGlobalQualifiedServerCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalQualifiedServerCAL=BlacksburgST=VirginiaC=USD4:D0:31:41:EC:A4:19:0D:93:BC:EE:47:81:AF:6F:2F:DF:0F:65:34:A1:1B:ED:CC:F0:61:4F:4D:4B:17:57:53CN=VirginiaTechGlobalQualifiedServerCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalQualifiedServerCAL=BlacksburgST=VirginiaC=USB7:9E:63:78:23:6B:F5:B6:F0:C2:77:EC:C0:80:62:7E:F3:FE:28:71:28:1A:60:AC:42:7B:DB:6F:6A:E4:F7:94AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedCN=VirginiaTechGlobalSoftwareTokenUserCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalSoftwareTokenUserCAL=BlacksburgST=VirginiaC=US2F:B0:45:57:96:0B:E5:32:A3:14:C9:BC:35:22:1F:BE:DF:75:96:C3:4C:BC:67:3E:12:33:9E:FD:BE:DD:EB:F7ThefollowingCAshavenotissuedpubliclytrustedSSL/TLScertificatesintendedtoauthenticateserversontheinternet:OtherCAsSHA256HashCN=GlobalSignCAforAATL-SHA384–G4O=GlobalSignnv-saC=BEAC:0A:B9:63:BB:5F:3D:A0:5F:BC:86:87:F9:8C:2B:6E:A0:BB:49:9E:61:18:C1:A9:13:6B:1B:C7:C3:C7:1A:6BCN=GlobalSignTSACAforAATLO=GlobalSignnv-saC=BE4D:8E:B4:93:80:EC:72:AC:9F:DF:21:FE:1C:6D:B2:E9:49:0C:76:BE:AD:D1:F7:B5:28:C3:CC:D2:72:C8:FE:28CN=GlobalSignTimestampingCA-SHA384-G4O=GlobalSignnv-saC=BEF6:42:41:8E:4D:0C:63:DE:C7:85:C9:60:EF:A6:8B:A7:45:F3:88:51:74:4E:F8:1F:22:5C:B8:93:05:31:4D:50CN=GlobalSignPartnersTimestampingCA-SHA384-G4O=GlobalSignnv-saC=BE2A:01:55:31:A5:F3:A4:CE:58:9B:D8:53:C7:1D:D0:69:58:73:22:F5:74:D8:5C:9C:9B:9F:9D:F8:F8:6C:07:5ECN=GlobalSignPartnersTSACAforAATLO=GlobalSignnv-saC=BE7E:8F:91:41:19:BB:10:90:D6:20:49:08:E5:AE:1F:40:BE:24:C1:49:1C:D7:D5:CF:B6:A9:36:18:CB:C0:0F:D9CN=GlobalSignPersonalSignPartnersCA-G2O=GlobalSignnv-saC=BEB2:AB:B9:07:6E:F2:03:AD:CB:56:B0:AC:B4:0C:27:52:62:C6:CF:E9:B7:A1:2A:BE:A7:C8:FA:57:77:3B:0D:0ACN=GlobalSignTimestampingCA-G2O=GlobalSignnv-saC=BEC9:77:92:3C:77:1E:1A:66:C9:25:A2:B6:F5:01:73:2E:67:8D:C9:88:7A:FE:6B:FA:AC:03:9D:1D:9A:71:F0:ECCN=JCANSubRootCA0OU=JCANSubRootCA0O=JIPDECC=JP8F:A6:02:FF:F5:90:DF:58:3A:36:D5:09:C2:65:F6:C3:EA:8C:34:A9:D5:6C:FF:86:28:5F:BF:E9:93:6B:FC:55CN=GlobalSignPersonalSignPartnersCA-G2O=GlobalSignnv-saC=BE23:6B:8F:F6:CB:17:71:8D:9C:92:44:0B:D9:2C:69:2D:17:38:19:93:E5:79:11:83:43:C0:A5:5C:8D:BE:6C:1ACN=GlobalSignPersonalSignPartnersCA-SHA256-G2O=GlobalSignnv-saC=BE11:82:62:C2:08:8E:E1:52:8E:20:D8:36:D2:07:08:54:70:7C:0D:8F:8E:80:FB:E3:96:F9:EC:D4:B9:14:1B:5BCN=GlobalSignCAforAATL-SHA256-G2O=GlobalSignnv-saC=BEAA:89:C4:66:E9:D0:68:82:C0:DA:AF:72:BE:0F:0F:BC:FE:7C:1E:F2:AA:AD:19:06:40:C4:AD:44:F5:51:7F:34CN=GlobalSignPersonalSignPartnersCA-SHA256-G2O=GlobalSignnv-saC=BEC8:F1:D6:91:B4:15:2C:26:03:3C:97:7F:E7:79:78:D9:C8:21:43:D4:6B:24:3B:9C:9B:A7:22:8E:00:0E:15:BBCN=GlobalSignTimestampingCA-SHA256-G2O=GlobalSignnv-saC=BE9B:F9:49:67:77:D1:44:25:ED:00:86:C1:BB:2C:07:07:B6:2A:61:C1:94:C5:16:2E:4F:07:63:7A:FF:16:6B:76CN=GlobalSignCA2forAATLO=GlobalSignnv-saC=BEA1:38:20:A7:38:7B:DF:AD:20:44:63:EF:A9:21:64:16:63:9B:7E:73:C3:1D:C2:F4:99:F5:3F:CD:4D:4D:25:C4CN=GlobalSignCA3forAATLO=GlobalSignnv-saC=BEC0:19:63:05:90:70:CB:23:06:F4:B4:86:CC:F1:50:33:59:20:9E:98:49:9C:81:0C:2B:49:E2:6E:31:A4:BD:74CN=JCANPublicCA1-G3OU=JCANPublicCA1-G3O=JIPDEC91:E9:8D:09:47:C1:25:49:4E:AA:F2:A3:8D:08:7B:E0:78:1A:F2:0D:8A:14:EE:8C:39:FE:CD:C4:82:CF:5F:82AmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedC=JPCN=JCANPublicCA0-G3OU=JCANPublicCA0-G3O=JIPDECC=JP39:88:3A:FF:3D:0A:0A:40:1A:9B:84:C0:B8:30:B9:5A:FE:C8:2A:F3:71:D9:DC:5D:02:19:EA:8A:3D:B4:CF:81CN=GlobalSignTimestampingCAO=GlobalSignOU=TimestampingCAD0:CA:E6:94:7B:C7:7F:0B:49:5C:A8:08:D6:CD:E6:85:FC:D2:02:25:E1:E5:30:B6:35:B1:13:ED:40:72:8E:F3CN=SignTrustDomainVerificationCA-G2O=SignTrustOU=SignTrustDomainVerificationCA-G2DA:C1:A5:1E:6A:44:08:8E:77:02:0C:A9:70:4C:36:12:41:FE:2D:DC:42:F8:13:26:77:BA:5E:BB:BA:4D:0C:2CCN=GlobalSignCAforAATL-SHA256-G2O=GlobalSignnv-saC=BE3A:AE:B2:6C:FC:AD:B7:78:14:E3:45:12:61:62:32:A6:87:D1:86:A8:43:03:AA:0C:8D:BB:E4:92:CE:BD:94:A1CN=GlobalSignTimestampingCA-R3O=GlobalSignOU=TimestampingCA61:C1:06:70:83:AE:04:4E:F1:D6:49:CE:59:0B:BF:09:D9:D7:39:E0:25:DA:8D:19:5F:71:CF:AA:D6:EB:AE:69CN=SignTrustDomainVerificationCA-SHA256-G2O=SignTrustOU=SignTrustDomainVerificationCA-SHA256-G2BE:CD:7B:1B:8C:68:07:A2:96:3B:3A:EE:9B:E6:0A:31:4E:BE:AF:3E:A4:C3:0A:F3:9B:7A:A6:C0:82:58:3C:E0CN=GlobalSignCA2forAATLO=GlobalSignnv-saC=BE75:25:B1:84:0C:39:8E:29:5F:F3:AE:C5:A4:5B:D9:51:B6:15:E9:AA:26:B8:90:31:9C:3B:F5:CB:A9:5F:24:41CN=GlobalSignCA3forAATLO=GlobalSignnv-saC=BEAB:68:68:55:67:BF:68:81:9C:D1:63:93:3C:DE:F8:6B:CD:44:7A:EB:21:40:4B:97:D9:DA:7B:57:C8:44:91:79CN=JCANPublicCA0-G3OU=JCANPublicCA0-G3O=JIPDECC=JP59:B6:9B:0D:E7:3B:02:09:A7:CE:14:6D:BC:EA:01:B0:96:E9:25:13:47:7E:BE:60:40:9D:AC:E8:8B:6D:F7:D9CN=GlobalSignPersonalSign1CA-G3O=GlobalSignnv-saC=BE25:4B:E9:1C:1A:BC:B2:8D:B5:E4:D6:75:A2:9A:1E:78:84:60:B0:65:91:F1:BA:84:97:CB:D1:78:37:E2:7A:BECN=GlobalSignPersonalSign2CA-G3O=GlobalSignnv-saC=BE64:E7:16:01:F7:05:09:21:DE:E0:39:C0:34:93:61:5E:48:8F:12:FC:3F:CE:CB:AD:F4:38:AA:46:7E:E1:D4:1ACN=GlobalSignPersonalSign3CA-G3O=GlobalSignnv-saC=BEC2:28:D9:3D:BE:55:36:A1:20:AC:24:ED:93:44:67:BA:D7:29:2F:8B:7E:B2:02:63:4B:17:07:0A:89:C5:FE:9BCN=NAESBIssuingCA-SHA384-G3O=GMOGlobalSignInc.
L=PortsmouthST=NewHampshireC=US09:86:B5:A1:C7:31:4E:FB:04:FB:64:8B:9E:2B:57:CF:48:42:FD:1D:43:45:D2:8E:52:09:4C:90:A9:FE:CB:FECN=TouchtechIntermediateCAO=TouchtechPaymentsLimitedL=DublinC=IEEF:5C:B9:F6:B5:2E:79:FC:BC:71:93:70:50:D1:1B:9D:7E:51:36:54:13:9B:22:7D:0F:F2:51:B2:50:56:1FAmemberfirmofErnst&YoungGlobalLimitedAmemberfirmofErnst&YoungGlobalLimitedAppendixC#DisclosureRelevantWebTrustCriteriaPubliclyDisclosedLink1GlobalSigndisclosedthatacustomer(AT&T)runninganon-premise(technically-constrained)CAthatchainstoaGlobalSignroot,issuedcertificateswith63bitserialnumbers.
WebTrustPrinciplesandCriteriaforCertificationAuthorities–SSLBaselinewithNetworkSecurityVersion2.
3,Principle2(SSLServiceIntegrity)MozillaDevSecurityPolicyLink2GlobalSigndisclosedthatacustomer(VirginiaTech)runninganon-premise(technically-constrained)CAthatchainstoaGlobalSignroot,issuedcertificateswith63bitserialnumbers.
WebTrustPrinciplesandCriteriaforCertificationAuthorities–SSLBaselinewithNetworkSecurityVersion2.
3,Principle2(SSLServiceIntegrity)MozillaDevSecurityPolicyLink3GlobalSigndisclosedthatacustomer(AT&T)runninganon-premise(technically-constrained)CAthatchainstoaGlobalSignroot,issuedcertificateswithoutAIAextension.
WebTrustPrinciplesandCriteriaforCertificationAuthorities–SSLBaselinewithNetworkSecurityVersion2.
3,Principle2(SSLServiceIntegrity)MozillaDevSecurityPolicyLink4GlobalSigndisclosedthatitissuedcertificateswithSubjectPublicKeyInfolackingtheexplicitNULLparameter.
WebTrustPrinciplesandCriteriaforCertificationAuthorities–SSLBaselinewithNetworkSecurityVersion2.
3,Principle2(SSLServiceIntegrity)MozillaDevSecurityPolicyLinkGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comGlobalSign'sManagement'sAssertionGlobalSignNV/SA("GlobalSign")operatestheCertificationAuthority(CA)servicesknownastheRootandSubordinateCAsasdisclosedinAppendixBandprovidesSSLCAservices.
ThemanagementofGlobalSignisresponsibleforestablishingandmaintainingeffectivecontrolsoveritsSSLCAoperations,includingitsnetworkandcertificatesecuritysystemcontrols,itsSSLCAbusinesspracticesdisclosureonitswebsite,SSLkeylifecyclemanagementcontrols,andSSLcertificatelifecyclemanagementcontrols.
Thesecontrolscontainmonitoringmechanisms,andactionsaretakentocorrectdeficienciesidentified.
Thereareinherentlimitationsinanycontrols,includingthepossibilityofhumanerror,andthecircumventionoroverridingofcontrols.
Accordingly,eveneffectivecontrolscanonlyprovidereasonableassurancewithrespecttoGlobalSign'sCertificationAuthorityoperations.
Furthermore,becauseofchangesinconditions,theeffectivenessofcontrolsmayvaryovertime.
GlobalSignmanagementhasassesseditsdisclosuresofitscertificatepracticesandcontrolsoveritsSSLCAservices.
Basedonthatassessment,inprovidingitsSSLCertificationAuthority(CA)servicesatBelgium,Japan,Singapore,UnitedKingdom,throughouttheperiodApril1,2018toMarch31,2019,GlobalSignhas:DiscloseditsSSLcertificatelifecyclemanagementbusinesspracticesintheapplicableversionsoftheCertificatePracticeStatementsandCertificatePolicies,asstipulatedinAppendixA,includingitscommitmenttoprovideSSLcertificatesinconformitywiththeCA/BrowserForumGuidelines,andprovidedsuchservicesinaccordancewithitsdisclosedpractices.
Maintainedeffectivecontrolstoprovidereasonableassurancethat:oTheintegrityofkeysandSSLcertificatesitmanageswasestablishedandprotectedthroughouttheirlifecycles;andoSSLsubscriberinformationwasproperlyauthenticated(fortheregistrationactivitiesperformedbyGlobalSign)Maintainedeffectivecontrolstoprovidereasonableassurancethat:oLogicalandphysicalaccesstoCAsystemsanddatawasrestrictedtoauthorizedindividuals;andoThecontinuityofkeyandcertificatemanagementoperationswasmaintained;andoCAsystemsdevelopment,maintenance,andoperationswereproperlyauthorizedandperformedtomaintainCAsystemsintegrityMaintainedeffectivecontrolstoprovidereasonableassurancethatitmeetstheNetworkandCertificateSystemSecurityRequirementsassetforthbytheCA/BrowserForum.
InaccordancewiththeWebTrustPrinciplesandCriteriaforCertificationAuthorities-SSLBaselinewithNetworkSecurity,Version2.
3.
GlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comGlobalSignLeuven,BelgiumSignedby:Function:November25,2019ArvidVermoteCISOGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comAppendixA–CertificationPracticeStatementsandCertificatePoliciesinScopeCertificationPracticeStatementBeginEffectiveDateEndEffectiveDateVersion8.
614-Dec-1702-Apr-18Version8.
703-Apr-1814-Jun-18Version8.
815-Jun-1810-Oct-18Version8.
911-Oct-1811-Mar-19Version912-Mar-1930-May-19CertificatePolicyBeginEffectiveDateEndEffectiveDateVersion5.
614-Dec-1702-Apr-18Version5.
703-Apr-1814-Jun-18Version5.
815-Jun-1810-Oct-18Version5.
911-Oct-1811-Mar-19Version612-Mar-1930-May-19GlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comAppendixB–In-ScopeCAsRootCAsSHA256HashC=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCAEB:D4:10:40:E4:BB:3E:C7:42:C9:E3:81:D3:1E:F2:A4:1A:48:B6:68:5C:96:E7:CE:F3:C1:DF:6C:D4:33:1C:99OU=GlobalSignRootCA-R3O=GlobalSignCN=GlobalSignCB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3BOU=GlobalSignECCRootCA-R5O=GlobalSignCN=GlobalSign17:9F:BC:14:8A:3D:D0:0F:D2:4E:A1:34:58:CC:43:BF:A7:F5:9C:81:82:D7:83:A5:13:F6:EB:EC:10:0C:89:24OU=GlobalSignRootCA-R6O=GlobalSignCN=GlobalSign2C:AB:EA:FE:37:D0:6C:A2:2A:BA:73:91:C0:03:3D:25:98:29:52:C4:53:64:73:49:76:3A:3A:B5:AD:6C:CF:69C=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCA-R7E9:5B:31:25:40:5E:0D:46:04:2D:55:AC:62:15:45:07:C6:78:EB:C3:60:76:57:85:FB:20:4A:F3:49:BF:E8:80C=BEO=GlobalSignnv-saOU=RootCACN=GlobalSignRootCA-R8AE:48:51:FF:42:03:9B:AD:E0:58:27:91:51:D8:26:83:04:1D:25:98:E2:40:68:3C:C5:6D:76:FB:8C:F5:3D:42C=BEO=GlobalSignnv-saCN=GlobalSignRootE46CB:B9:C4:4D:84:B8:04:3E:10:50:EA:31:A6:9F:51:49:55:D7:BF:D2:E2:C6:B4:93:01:01:9A:D6:1D:9F:50:58C=BEO=GlobalSignnv-saCN=GlobalSignRootR464F:A3:12:6D:8D:3A:11:D1:C4:85:5A:4F:80:7C:BA:D6:CF:91:9D:3A:5A:88:B0:3B:EA:2C:63:72:D9:3C:40:C9OtherCAsSHA256HashCN=AlphaSSLCA-G2O=AlphaSSL1D:CA:65:B8:6A:57:33:6B:A5:AF:B7:21:4A:36:F7:D6:ED:E6:98:EB:4F:03:38:7C:B3:AD:6B:BD:3A:93:BA:B6CN=AlphaSSLCA-SHA256-G2O=AlphaSSL93:3E:4A:2D:8D:B1:FF:9F:F0:E5:08:EA:7F:16:37:E0:74:F6:60:FE:6F:36:5A:22:33:DF:C2:B5:2C:88:9D:98CN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BEEE:79:36:43:19:94:74:ED:60:EF:DC:8C:CD:E4:D3:74:45:92:16:83:59:3A:A7:51:BB:F8:EE:49:1A:39:1E:97CN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BE8C:24:10:F7:6B:14:9C:A0:62:B4:20:AB:61:1B:6B:F0:A0:6E:6E:79:9A:29:58:7E:4D:4E:C1:6D:05:37:B7:EACN=AlphaSSLCA-SHA256-G2O=GlobalSignnv-saC=BE5A:81:7E:AD:A4:AD:78:73:4E:BB:2C:F6:74:35:2D:97:F4:35:22:90:C4:0E:AF:10:E7:64:B1:EA:C0:75:B0:E6CN=AlphaSSLCA-SHA256-G3O=GlobalSignnv-saC=BE4C:01:3B:88:54:68:9C:B6:62:6C:C0:87:B4:D4:FC:CA:45:10:4E:2D:73:BF:AD:F3:3A:69:79:ED:12:4B:78:37CN=ATTWi-FiServicesRootCertificateAuthorityG3OU=ATTWi-FiServicesO=ATTServicesIncST=TexasC=US12:F3:C6:42:3F:95:C7:FF:C9:A9:70:67:FD:2D:95:3E:70:60:9A:44:29:9C:A7:D4:58:C5:73:C6:3A:59:2E:66CN=ATTWi-FiServicesRootCertificateAuthorityG3OU=ATTWi-FiServicesO=ATTServicesIncST=TexasC=US27:13:C7:A3:21:05:C5:E7:40:18:46:5D:14:D5:1A:95:9C:8A:EF:C2:11:5E:1C:00:7A:6A:6B:4C:88:31:3B:C6CN=Beame.
ioCA1O=Beame.
ioLtdL=TelAviv-JaffaST=TelAvivC=IL43:26:39:13:B4:83:EB:6F:0B:02:05:40:F8:F7:BE:0A:1D:7C:9C:E7:65:2F:E0:FB:47:43:D7:21:33:93:55:1CCN=Beame.
ioCA2O=Beame.
ioLtdL=TelAviv-JaffaST=TelAvivC=ILCF:6E:6B:82:C9:97:CB:5C:C1:A5:50:66:AF:5F:60:CA:AC:77:59:4E:B1:06:FB:4D:49:8B:C5:0E:CD:EB:8A:3AGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comCN=CloudflareECCDVCAO=Cloudflare\,Inc.
L=SanFranciscoST=CAC=US0F:45:17:48:7F:D0:A8:BA:31:94:A6:12:24:50:A7:B3:2C:98:7F:FF:16:F2:D4:AF:54:E6:ED:B6:FE:D6:8E:08CN=CloudflareRSADVCAO=Cloudflare\,Inc.
L=SanFranciscoST=CAC=USD4:39:F8:8E:8F:2F:80:A3:06:F9:10:DC:DE:54:8D:71:BB:FD:99:A8:5F:C7:03:4E:FB:61:0E:37:49:55:09:32CN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEA0:13:3B:E5:B1:4E:02:31:0A:2D:4B:EA:B6:01:09:4F:11:94:EE:8B:D6:FD:29:DD:FE:7B:93:47:46:7C:2E:ECCN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEF1:64:AD:5E:4C:E9:EF:C0:A1:44:CA:90:2E:A2:ED:46:C4:64:D2:D5:08:CA:91:9A:23:09:5C:DF:30:D4:DC:68CN=CrownPrinceCourtCAO=CrownPrinceCourtL=AbuDhabiST=AbuDhabiC=AEBF:5E:DF:BE:EB:85:99:9C:51:69:CB:F3:F4:DB:63:B6:79:AD:2E:1E:22:72:FC:37:95:F9:F9:92:1E:6D:04:87CN=DPDHLTLSCTCAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE91:53:e4:42:0d:dc:7e:b4:e6:e8:64:aa:03:77:da:df:40:82:ec:d3:50:52:11:36:38:e0:5d:3c:29:6b:c0:06CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE27:6F:32:C1:EB:6C:5F:85:5A:79:04:FD:03:64:B2:15:0E:87:99:7F:C8:D0:31:3D:EF:7E:53:AE:09:99:DC:1DCN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE5A:40:55:35:C1:12:A0:A8:1A:F0:D2:AC:CA:3C:3F:9B:C1:A6:77:58:6C:DB:C6:33:CB:4F:5F:77:8E:1A:35:50CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE23:A7:47:04:D7:7A:03:CF:D3:FF:19:E6:2C:50:08:48:21:4E:6C:60:FD:2A:AE:F7:DC:E7:A8:F9:EE:9F:92:32CN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DEBE:44:1E:EA:2B:79:50:00:C1:C1:33:AD:C3:2B:CE:6F:8D:3D:20:1D:A7:13:F4:53:3A:E0:F6:A2:AC:96:28:8ECN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE1C:94:2A:22:A0:16:A1:E5:55:9D:AE:77:EC:5C:E8:67:1F:98:AE:0B:A4:AC:2D:C2:59:41:8E:8E:1E:9F:94:ADCN=DPDHLTLSSHA2CAI3O=DeutschePostL=BonnST=Nordrhein-WestfalenC=DE25:BA:CC:40:A5:39:2B:82:AA:DE:A0:49:03:90:5A:46:71:21:F2:82:20:E6:F2:F7:E0:FE:98:2A:AF:C1:4F:A6CN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BE4B:73:34:E1:D8:99:98:22:BA:FA:8F:F6:88:81:25:38:9B:18:A4:E5:AB:26:FF:A6:24:C7:F6:8F:DC:81:F0:CBCN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BEE1:55:EB:F9:63:34:E7:9A:E2:E2:87:D5:5C:FC:91:85:DE:24:93:5A:65:3F:13:C5:BA:05:AF:F8:18:77:1B:C6CN=GlobalSignCloudSSLCA-SHA256-G3C2:E4:23:6D:B1:B7:57:B5:1B:77:92:13:88:EF:A8:23:E6:A6:00:FD:4B:DA:30:B6:3A:B7:78:86:F2:56:18:B7GlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comO=GlobalSignnv-saC=BECN=GlobalSignCloudSSLCA-SHA256-G3O=GlobalSignnv-saC=BEE0:C2:EB:D1:F6:BA:D4:FE:AA:E3:1A:31:07:E6:9A:BE:E9:02:DB:38:B9:DF:BE:33:F0:57:0B:DA:34:94:C2:0ACN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BEE8:7E:A2:BE:D6:C6:20:3B:2C:55:B0:0F:E4:9D:28:76:FB:A6:47:02:10:5A:EB:74:8B:86:5A:91:8B:5C:7D:27CN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BEBA:0E:2B:6B:F2:C9:8E:D2:C3:B1:C1:C0:8A:1B:BD:CA:F9:27:0A:C5:28:A3:19:43:01:DD:2A:0B:6B:67:B9:B3CN=GlobalSignDomainValidationCA-G2O=GlobalSignnv-saC=BE4E:15:3A:58:88:77:68:8F:1A:0C:10:3A:08:4C:2E:DB:3A:D1:D8:C4:80:CF:03:D8:AB:6F:ED:47:D9:20:43:70CN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BE37:D0:80:A5:E9:A5:26:66:3E:56:EE:20:DE:4B:D9:F7:95:2D:AC:C3:41:49:14:39:08:01:67:AD:5D:D1:8C:ACCN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BEBF:DF:4C:F3:F1:43:AD:0D:B9:12:D8:AB:3A:7C:12:F6:17:B9:EA:60:CE:8B:1F:4E:44:F7:42:70:FB:21:B1:9BCN=GlobalSignDomainValidationCA-SHA256-G2O=GlobalSignnv-saC=BE66:9E:77:27:A9:2B:E7:2D:97:18:E1:69:22:DC:1B:C1:49:2B:1A:F3:3F:A4:79:3E:68:D8:77:8F:19:A2:EB:E0CN=GlobalSignDomainValidationCA-SHA256-G3O=GlobalSignnv-saC=BE09:BC:1B:13:7C:03:12:39:EF:78:86:73:E9:4E:B1:7F:5F:3E:CA:B0:7D:3A:DB:FB:48:5E:75:AB:FA:AF:3B:9ACN=GlobalSignECAdministrationCA2O=GlobalSignnv-saC=BEC8:83:B3:EC:C6:AC:0D:EE:75:CD:D5:85:E7:3A:20:92:87:BC:0C:9F:9D:79:D4:88:86:0F:63:E2:EA:8A:7D:2CCN=GlobalSignECCCloudSSLCA-SHA384-G3O=GlobalSignnv-saC=BEB0:CD:6A:E7:B9:E2:0E:C5:F8:30:FE:E0:1F:66:6D:5D:90:E6:E2:29:D0:6B:C4:6A:30:AC:CE:DF:EC:88:96:48CN=GlobalSignECCEVSSLCA2018O=GlobalSignnv-saC=BE8f:19:ff:e0:2f:c7:95:ed:70:76:5d:14:36:ad:df:77:2f:e0:f0:77:3d:a4:36:ed:bd:b4:2a:2e:30:e2:e8:28CN=GlobalSignECCEVSSLCA2019O=GlobalSignnv-saC=BE0d:31:76:c5:8f:32:1a:a3:4c:57:c8:df:7c:17:d1:f4:e7:6c:79:7e:c1:16:c9:f1:d6:97:74:8e:d1:fc:e7:d9CN=GlobalSignECCOVSSLCA2018O=GlobalSignnv-saC=BE87:c7:15:53:44:5e:b3:c3:3c:3e:07:10:71:1b:99:e9:c7:77:3f:04:d9:1a:c3:8a:9f:4c:08:2e:e2:41:01:eaCN=GlobalSignECC384EVSSLCA-G3O=GlobalSignnv-saC=BE15:54:91:87:49:03:14:F5:17:76:41:F0:BE:B3:26:34:AA:12:30:EB:2C:F2:C2:8A:D9:C7:39:14:FB:18:AB:A0CN=GlobalSignECC384SSLCA-G3O=GlobalSignnv-saC=BEDC:6C:44:AC:8A:3C:D5:C3:45:12:73:F4:43:15:26:B2:EF:66:60:62:EE:76:32:58:A9:28:F6:0B:D0:8E:39:FECN=GlobalSignExtendedValidationCA-SHA256-G2O=GlobalSignnv-saC=BE24:F9:1C:07:05:A0:A5:33:86:41:B3:65:FB:0D:9D:97:09:B5:62:97:CF:F1:85:7E:73:C0:2C:16:36:D4:86:AACN=GlobalSignExtendedValidationCA-SHA256-G2O=GlobalSignnv-saC=BE5B:B2:38:2D:20:E0:9A:E5:6B:4F:3A:51:57:83:8F:7B:AE:49:E4:2E:3C:E5:34:84:D6:6E:EB:2C:07:47:EF:4AGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comCN=GlobalSignExtendedValidationCA-SHA256-G3O=GlobalSignnv-saC=BEAE:D5:DD:9A:53:39:68:5D:FB:02:9F:6D:89:A1:43:35:A9:65:12:C3:CA:CC:52:B2:99:4A:F8:B6:B3:7F:A4:D2CN=GlobalSignHVECCDVSSLCA2018O=GlobalSignnv-saC=BE4b:0d:13:92:d3:91:57:35:32:07:a6:4c:cb:14:68:3d:de:9d:2c:ed:1f:b5:8b:16:e0:38:be:57:07:c2:78:13CN=GlobalSignHVRSADVSSLCA2018O=GlobalSignnv-saC=BE54:c3:7a:8e:85:3f:d1:d6:37:8d:37:8b:93:93:07:ec:32:1a:31:cc:1a:5a:89:e7:18:06:33:bc:13:f1:87:62CN=GlobalSignOrganizationValidatedCA-SHA256-G4O=GlobalSignnv-saC=BE1E:17:41:A1:2E:B8:DA:2B:D7:6E:A9:6C:04:F5:20:35:98:39:71:0F:62:0E:80:95:2F:48:DD:02:40:A1:2C:D8CN=GlobalSignOrganizationValidatedECCCA-SHA256-G4O=GlobalSignnv-saC=BE65:EE:C0:CC:6C:97:0C:C1:CD:73:65:91:15:DC:8D:90:4E:6F:12:E6:DC:8F:D4:DD:A3:9D:54:CB:30:22:47:80CN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BEA6:64:22:C4:E4:49:D4:65:CB:02:3A:7F:C7:63:3D:E8:ED:18:16:98:5C:A4:10:93:FC:96:B3:66:3E:D7:A4:3BCN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BEA6:23:3E:CB:77:05:3F:72:93:7E:89:43:72:A6:01:ED:3A:BE:A9:0C:C3:B5:D8:95:12:72:0B:F3:FF:CB:DC:9DCN=GlobalSignOrganizationValidationCA-G2O=GlobalSignnv-saC=BE08:2B:24:30:47:BF:00:F5:84:40:1F:53:8B:50:4B:AE:9E:C0:60:E0:07:FF:F2:8B:15:9C:08:41:70:68:65:4ECN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE1C:97:37:E9:68:AD:9D:FF:8D:8D:7F:CF:99:6A:14:4B:B9:78:51:A1:90:11:A0:19:0C:94:3C:AE:8D:43:CF:E0CN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE74:EF:33:5E:5E:18:78:83:07:FB:9D:89:CB:70:4B:EC:11:2A:BD:23:48:7D:BF:F4:1C:4D:ED:50:70:F2:41:D9CN=GlobalSignOrganizationValidationCA-SHA256-G2O=GlobalSignnv-saC=BE0B:33:92:12:D7:CF:F1:7A:2C:59:E3:56:69:B5:8E:77:35:01:33:75:0A:78:DA:94:04:77:0E:DD:47:0D:EF:76CN=GlobalSignOrganizationValidationCA-SHA256-G3O=GlobalSignnv-saC=BE69:9D:54:B7:48:2A:5D:32:93:31:EA:04:15:CC:2E:DC:D6:0F:DA:01:D1:9E:71:D0:54:19:6B:CE:06:77:73:5CCN=GlobalSignR6AdminCA-SHA256-G3O=GlobalSignnv-saC=BEC5:B6:79:10:69:58:15:2F:83:FB:58:86:DD:C4:1F:07:85:19:3E:F6:7C:69:75:BE:3E:50:9F:17:F2:9B:7A:86CN=GlobalSignR7AdminCA-SHA256-G3O=GlobalSignnv-saC=BED3:02:FF:37:31:D2:8C:59:A0:2D:58:85:C5:BA:32:4B:DC:31:BB:D0:9A:31:CC:91:6C:F1:B7:4A:C2:77:C0:7BCN=GlobalSignR8AdminCA-SHA256-G3O=GlobalSignnv-saC=BEEA:8C:20:1C:1F:8E:EF:58:06:7B:29:7E:6C:87:D2:62:2A:C3:94:65:27:92:4B:B6:DE:6A:3D:70:0B:E8:13:44CN=GlobalSignRootCAOU=RootCAO=GlobalSignnv-saC=BE6A:DD:36:8D:A3:54:58:A0:9E:DF:88:0D:05:70:E8:63:AD:C8:50:7D:49:40:6B:4D:97:E4:4E:53:BC:93:08:C9CN=GlobalSignRSADVSSLCA2018O=GlobalSignnv-saC=BE9e:89:8e:d0:3f:a4:69:69:69:0d:ad:73:c7:29:66:75:04:5f:f9:b5:a0:10:0a:39:9b:eb:84:35:a9:8f:51:85CN=GlobalSignRSAOVSSLCA2018b6:76:ff:a3:17:9e:88:12:09:3a:1b:5e:af:ee:87:6a:e7:a6:aa:f2:31:07:8d:ad:1b:fb:21:cd:28:93:76:4aGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comO=GlobalSignnv-saC=BECN=GlobalSignO=GlobalSignOU=GlobalSignECCRootCA-R53f:31:9b:2a:fe:d4:a0:f7:51:27:be:59:92:55:50:d0:42:8e:68:76:3a:09:e2:73:eb:6a:9f:f8:d1:8d:bb:5bCN=GlobalSignO=GlobalSignOU=GlobalSignRootCA-R344:5e:ec:78:bc:61:21:50:44:a0:37:96:56:aa:2d:5d:b5:e4:2f:76:cb:70:b8:d1:4c:20:77:aa:94:3d:4e:bbCN=GlobalSignO=GlobalSignOU=GlobalSignRootCA-R3C9:4F:ED:DA:4E:86:08:90:85:80:BC:7F:87:B4:34:E0:3B:B2:62:E4:2F:64:C6:38:20:A8:F5:0F:B1:7C:1C:ECCN=GlobalSignO=GlobalSignOU=GlobalSignRootCA-R6dd:a8:da:73:61:87:d7:6f:4f:0e:d5:a5:f6:67:b5:4d:99:a9:8a:e0:60:91:d0:e3:a0:17:14:e9:22:16:95:adCN=GlobalSignOU=GlobalSignRootCA-R3O=GlobalSign25:10:E2:48:90:3F:01:B6:3F:93:98:17:9E:55:06:97:9F:0E:F5:07:E4:17:4B:65:7A:F6:F7:70:A4:17:EC:94CN=GlobalSignOU=GlobalSignRootCA-R6O=GlobalSign75:BF:B5:22:CC:4B:58:DA:22:EE:48:85:17:C5:F2:EF:F9:25:76:D2:0F:59:5F:9A:CE:48:3A:03:6F:C1:BB:6BCN=ICPEduO=RedeNacionaldeEnsinoePesquisa-RNPOU=GerenciadeServicos(GSer)L=RiodeJaneiroST=RiodeJaneiroC=BREA:CB:A6:C9:65:98:B4:A4:1F:D5:3D:69:AB:9E:D9:FB:BB:13:81:15:4C:45:34:56:72:0C:17:4F:FE:57:6D:1DCN=LibertyUniversityExternalIssuingCA01O=LibertyUniversityL=LynchburgST=VAC=USCA:00:5A:A7:5E:33:59:4B:D1:DE:DC:58:4E:1E:74:E5:19:8E:BB:1D:E8:89:29:ED:4F:3E:2E:9F:FC:E3:87:3BCN=LibertyUniversityExternalIssuingCA01O=LibertyUniversityL=LynchburgST=VAC=US1F:91:21:2C:6B:FC:33:3C:6E:B5:2A:68:55:25:E1:E5:B9:E3:AC:1E:F7:A5:A8:66:49:F5:F9:5C:72:1D:88:98CN=NSW-DEC-ISS-CA1O=NSWDepartmentofEducationandCommunitiesL=SydneyST=NSWC=AUC7:68:21:31:79:F8:07:1B:FA:B3:94:15:B3:C0:91:12:97:C2:34:6E:41:1E:20:0A:B6:79:12:94:8E:4C:99:D7CN=ProdriveTechnologiesB.
V.
OVSSLIssuingCAO=ProdriveTechnologiesB.
V.
OU=ITServicesL=SonST=Noord-BrabantC=NL39:8B:14:99:CE:00:A2:5F:61:CA:C3:D8:BE:E5:71:60:18:80:82:3E:F2:88:BE:97:72:A4:D1:33:98:42:25:95CN=SHECADVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN39:3b:8b:15:ca:bc:38:86:fb:2e:41:64:95:d6:3c:8b:ad:d8:dc:af:87:55:20:76:c8:a0:a9:63:7c:24:de:47CN=SHECAEVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN14:7c:44:7f:ee:b8:62:02:b5:03:31:4f:ca:f0:03:6b:ea:ae:f4:37:c3:9b:56:b3:58:ec:44:6a:9d:20:38:7fCN=SHECAOVSecureServerCAST=ShanghaiL=ShanghaiO=ShanghaiElectronicCertificateAuthorityCenterCo.
\,Ltd.
C=CN77:ea:c4:76:45:3c:b7:32:25:7f:f1:66:a5:eb:d1:65:6c:b1:f6:73:b6:8e:28:df:41:77:41:33:97:9f:a2:a4GlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comCN=SignTrustDomainVerificationCA-SHA256-G2O=SignTrustOU=SignTrustDomainVerificationCA-SHA256-G2BE:CD:7B:1B:8C:68:07:A2:96:3B:3A:EE:9B:E6:0A:31:4E:BE:AF:3E:A4:C3:0A:F3:9B:7A:A6:C0:82:58:3C:E0CN=SolutiCA-DVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRA7:4F:FF:F5:28:47:19:05:38:50:73:AD:F3:99:70:19:B2:6F:4F:AF:24:BC:E9:10:2A:27:2E:7A:44:84:E4:BCCN=SolutiCA-EVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRBB:17:0B:39:78:4D:02:78:43:25:CE:A9:38:D9:23:14:C6:17:DD:E8:08:C8:67:E3:3E:2A:D1:61:D5:4B:3E:8ACN=SolutiCA-OVO=SOLUTI-SOLUCOESEMNEGOCIOSINTELIGENTESS/AL=Goi\C3\A2niaST=Goi\C3\A1sC=BRE6:E9:29:C8:45:6C:01:4E:8D:A7:33:AC:E4:E9:81:45:52:27:2B:81:17:60:50:A1:3E:A4:5A:82:32:00:B1:4BCN=SouthernCompanyExternalIssuingCA1O=SouthernCompanyServices\,Inc.
L=AtlantaST=GAC=USFB:95:3C:4F:C0:04:58:46:D0:24:91:C8:EC:CF:38:7B:A3:43:47:C1:7A:BB:0E:A6:D5:9F:6D:E4:D2:F1:EA:04CN=StatoilQualifiedCAO=StatoilASA-923609016C=NODC=statoilDC=comB6:BA:9C:02:A7:05:61:C3:99:4C:E0:94:AD:56:A7:87:EE:DD:1A:61:A7:D4:AC:0C:D1:1B:64:B2:4E:F2:AE:13CN=TrustedRootCAG2O=GlobalSignnv-saOU=TrustedRootC=BE6E:32:A3:5B:59:9E:90:87:BB:1A:B3:5C:E7:30:22:EC:2E:26:AF:34:BE:38:89:19:41:9C:95:70:0C:D8:E7:FBCN=TrustedRootCASHA256G2O=GlobalSignnv-saOU=TrustedRootC=BE01:FD:73:EF:5E:70:F5:26:FC:9C:11:F6:5F:E2:EE:6F:71:25:B3:69:39:49:22:7F:FD:8E:45:9E:58:3C:45:8ACN=ValidCertificadoraDigitalAlphaSSLCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDAlphaSSLL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR38:51:35:ab:18:dd:19:0a:03:bc:c0:60:1a:ca:6f:83:ce:a3:66:64:27:91:eb:e0:a2:fd:b0:59:c2:f7:75:0aCN=ValidCertificadoraDigitalSSLDVCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDSSLDVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR62:b4:8f:51:e5:86:86:76:fd:79:b9:dd:9d:b9:8b:a9:28:49:4b:a7:34:40:3c:58:33:93:c4:2c:e0:0a:d4:48CN=ValidCertificadoraDigitalSSLEVCA2018O=VALIDCERTIFICADORADIGITALOU=VALIDSSLEVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BR27:fa:1b:e4:f4:b5:6a:14:2a:47:a5:6a:7e:94:b7:25:02:05:9b:40:22:e4:62:3e:74:8c:a1:ef:15:1c:f2:22CN=ValidCertificadoraDigitalSSLOVCA2018O=VALIDCERTIFICADORA60:0e:97:60:1b:0b:bc:5f:05:6f:04:ee:f6:71:ef:58:0f:2a:85:83:c6:d2:d3:fa:d4:01:b9:d8:20:aa:88:36GlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comDIGITALOU=VALIDSSLOVL=S\C3\83OPAULOST=S\C3\83OPAULOC=BRCN=VirginiaTechGlobalQualifiedServerCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalQualifiedServerCAL=BlacksburgST=VirginiaC=USD4:D0:31:41:EC:A4:19:0D:93:BC:EE:47:81:AF:6F:2F:DF:0F:65:34:A1:1B:ED:CC:F0:61:4F:4D:4B:17:57:53CN=VirginiaTechGlobalQualifiedServerCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalQualifiedServerCAL=BlacksburgST=VirginiaC=USB7:9E:63:78:23:6B:F5:B6:F0:C2:77:EC:C0:80:62:7E:F3:FE:28:71:28:1A:60:AC:42:7B:DB:6F:6A:E4:F7:94CN=VirginiaTechGlobalSoftwareTokenUserCAO=VirginiaPolytechnicInstituteandStateUniversityOU=GlobalSoftwareTokenUserCAL=BlacksburgST=VirginiaC=US2F:B0:45:57:96:0B:E5:32:A3:14:C9:BC:35:22:1F:BE:DF:75:96:C3:4C:BC:67:3E:12:33:9E:FD:BE:DD:EB:F7ThefollowingCAshavenotissuedpubliclytrustedSSL/TLScertificatesintendedtoauthenticateserversontheinternet:OtherCAsSHA256HashCN=GlobalSignCAforAATL-SHA384–G4O=GlobalSignnv-saC=BEAC:0A:B9:63:BB:5F:3D:A0:5F:BC:86:87:F9:8C:2B:6E:A0:BB:49:9E:61:18:C1:A9:13:6B:1B:C7:C3:C7:1A:6BCN=GlobalSignTSACAforAATLO=GlobalSignnv-saC=BE4D:8E:B4:93:80:EC:72:AC:9F:DF:21:FE:1C:6D:B2:E9:49:0C:76:BE:AD:D1:F7:B5:28:C3:CC:D2:72:C8:FE:28CN=GlobalSignTimestampingCA-SHA384-G4O=GlobalSignnv-saC=BEF6:42:41:8E:4D:0C:63:DE:C7:85:C9:60:EF:A6:8B:A7:45:F3:88:51:74:4E:F8:1F:22:5C:B8:93:05:31:4D:50CN=GlobalSignPartnersTimestampingCA-SHA384-G4O=GlobalSignnv-saC=BE2A:01:55:31:A5:F3:A4:CE:58:9B:D8:53:C7:1D:D0:69:58:73:22:F5:74:D8:5C:9C:9B:9F:9D:F8:F8:6C:07:5ECN=GlobalSignPartnersTSACAforAATLO=GlobalSignnv-saC=BE7E:8F:91:41:19:BB:10:90:D6:20:49:08:E5:AE:1F:40:BE:24:C1:49:1C:D7:D5:CF:B6:A9:36:18:CB:C0:0F:D9CN=GlobalSignPersonalSignPartnersCA-G2O=GlobalSignnv-saC=BEB2:AB:B9:07:6E:F2:03:AD:CB:56:B0:AC:B4:0C:27:52:62:C6:CF:E9:B7:A1:2A:BE:A7:C8:FA:57:77:3B:0D:0ACN=GlobalSignTimestampingCA-G2O=GlobalSignnv-saC=BEC9:77:92:3C:77:1E:1A:66:C9:25:A2:B6:F5:01:73:2E:67:8D:C9:88:7A:FE:6B:FA:AC:03:9D:1D:9A:71:F0:ECCN=JCANSubRootCA0OU=JCANSubRootCA0O=JIPDECC=JP8F:A6:02:FF:F5:90:DF:58:3A:36:D5:09:C2:65:F6:C3:EA:8C:34:A9:D5:6C:FF:86:28:5F:BF:E9:93:6B:FC:55CN=GlobalSignPersonalSignPartnersCA-G2O=GlobalSignnv-sa23:6B:8F:F6:CB:17:71:8D:9C:92:44:0B:D9:2C:69:2D:17:38:19:93:E5:79:11:83:43:C0:A5:5C:8D:BE:6C:1AGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comC=BECN=GlobalSignPersonalSignPartnersCA-SHA256-G2O=GlobalSignnv-saC=BE11:82:62:C2:08:8E:E1:52:8E:20:D8:36:D2:07:08:54:70:7C:0D:8F:8E:80:FB:E3:96:F9:EC:D4:B9:14:1B:5BCN=GlobalSignCAforAATL-SHA256-G2O=GlobalSignnv-saC=BEAA:89:C4:66:E9:D0:68:82:C0:DA:AF:72:BE:0F:0F:BC:FE:7C:1E:F2:AA:AD:19:06:40:C4:AD:44:F5:51:7F:34CN=GlobalSignPersonalSignPartnersCA-SHA256-G2O=GlobalSignnv-saC=BEC8:F1:D6:91:B4:15:2C:26:03:3C:97:7F:E7:79:78:D9:C8:21:43:D4:6B:24:3B:9C:9B:A7:22:8E:00:0E:15:BBCN=GlobalSignTimestampingCA-SHA256-G2O=GlobalSignnv-saC=BE9B:F9:49:67:77:D1:44:25:ED:00:86:C1:BB:2C:07:07:B6:2A:61:C1:94:C5:16:2E:4F:07:63:7A:FF:16:6B:76CN=GlobalSignCA2forAATLO=GlobalSignnv-saC=BEA1:38:20:A7:38:7B:DF:AD:20:44:63:EF:A9:21:64:16:63:9B:7E:73:C3:1D:C2:F4:99:F5:3F:CD:4D:4D:25:C4CN=GlobalSignCA3forAATLO=GlobalSignnv-saC=BEC0:19:63:05:90:70:CB:23:06:F4:B4:86:CC:F1:50:33:59:20:9E:98:49:9C:81:0C:2B:49:E2:6E:31:A4:BD:74CN=JCANPublicCA1-G3OU=JCANPublicCA1-G3O=JIPDECC=JP91:E9:8D:09:47:C1:25:49:4E:AA:F2:A3:8D:08:7B:E0:78:1A:F2:0D:8A:14:EE:8C:39:FE:CD:C4:82:CF:5F:82CN=JCANPublicCA0-G3OU=JCANPublicCA0-G3O=JIPDECC=JP39:88:3A:FF:3D:0A:0A:40:1A:9B:84:C0:B8:30:B9:5A:FE:C8:2A:F3:71:D9:DC:5D:02:19:EA:8A:3D:B4:CF:81CN=GlobalSignTimestampingCAO=GlobalSignOU=TimestampingCAD0:CA:E6:94:7B:C7:7F:0B:49:5C:A8:08:D6:CD:E6:85:FC:D2:02:25:E1:E5:30:B6:35:B1:13:ED:40:72:8E:F3CN=SignTrustDomainVerificationCA-G2O=SignTrustOU=SignTrustDomainVerificationCA-G2DA:C1:A5:1E:6A:44:08:8E:77:02:0C:A9:70:4C:36:12:41:FE:2D:DC:42:F8:13:26:77:BA:5E:BB:BA:4D:0C:2CCN=GlobalSignCAforAATL-SHA256-G2O=GlobalSignnv-saC=BE3A:AE:B2:6C:FC:AD:B7:78:14:E3:45:12:61:62:32:A6:87:D1:86:A8:43:03:AA:0C:8D:BB:E4:92:CE:BD:94:A1CN=GlobalSignTimestampingCA-R3O=GlobalSignOU=TimestampingCA61:C1:06:70:83:AE:04:4E:F1:D6:49:CE:59:0B:BF:09:D9:D7:39:E0:25:DA:8D:19:5F:71:CF:AA:D6:EB:AE:69CN=SignTrustDomainVerificationCA-SHA256-G2O=SignTrustOU=SignTrustDomainVerificationCA-SHA256-G2BE:CD:7B:1B:8C:68:07:A2:96:3B:3A:EE:9B:E6:0A:31:4E:BE:AF:3E:A4:C3:0A:F3:9B:7A:A6:C0:82:58:3C:E0CN=GlobalSignCA2forAATLO=GlobalSignnv-saC=BE75:25:B1:84:0C:39:8E:29:5F:F3:AE:C5:A4:5B:D9:51:B6:15:E9:AA:26:B8:90:31:9C:3B:F5:CB:A9:5F:24:41CN=GlobalSignCA3forAATLO=GlobalSignnv-saC=BEAB:68:68:55:67:BF:68:81:9C:D1:63:93:3C:DE:F8:6B:CD:44:7A:EB:21:40:4B:97:D9:DA:7B:57:C8:44:91:79CN=JCANPublicCA0-G3OU=JCANPublicCA0-G3O=JIPDECC=JP59:B6:9B:0D:E7:3B:02:09:A7:CE:14:6D:BC:EA:01:B0:96:E9:25:13:47:7E:BE:60:40:9D:AC:E8:8B:6D:F7:D9CN=GlobalSignPersonalSign1CA-G3O=GlobalSignnv-saC=BE25:4B:E9:1C:1A:BC:B2:8D:B5:E4:D6:75:A2:9A:1E:78:84:60:B0:65:91:F1:BA:84:97:CB:D1:78:37:E2:7A:BECN=GlobalSignPersonalSign2CA-G3O=GlobalSignnv-saC=BE64:E7:16:01:F7:05:09:21:DE:E0:39:C0:34:93:61:5E:48:8F:12:FC:3F:CE:CB:AD:F4:38:AA:46:7E:E1:D4:1AGlobalSignNV/SAMartelarenlaan383010LeuvenBelgiumMain:+3216891900|Fax:+3216891909Web:www.
globalsign.
com|Email:sales@globalsign.
comCN=GlobalSignPersonalSign3CA-G3O=GlobalSignnv-saC=BEC2:28:D9:3D:BE:55:36:A1:20:AC:24:ED:93:44:67:BA:D7:29:2F:8B:7E:B2:02:63:4B:17:07:0A:89:C5:FE:9BCN=NAESBIssuingCA-SHA384-G3O=GMOGlobalSignInc.
L=PortsmouthST=NewHampshireC=US09:86:B5:A1:C7:31:4E:FB:04:FB:64:8B:9E:2B:57:CF:48:42:FD:1D:43:45:D2:8E:52:09:4C:90:A9:FE:CB:FECN=TouchtechIntermediateCAO=TouchtechPaymentsLimitedL=DublinC=IEEF:5C:B9:F6:B5:2E:79:FC:BC:71:93:70:50:D1:1B:9D:7E:51:36:54:13:9B:22:7D:0F:F2:51:B2:50:56:1F