imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:ab:dd:94:5a:1d:53:7f:c2:53:83:3e:88:d5:d4:66 was issued on by GlobalSign nv-sa.

With 135 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ab:dd:94:5a:1d:53:7f:c2:53:83:3e:88:d5:d4:66
Serial Number (int): 2221604924773934573515314063610336358
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 64:1f:68:07:55:03:ea:f7:48:c1:b8:22:4e:8b:7f:6e:2d:93:f9:41
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 79:73:7a:c1:74:8f:18:d3:81:10:5f:e5:5d:f7:51:ea:3e:74:64:4e
Fingerprint (sha256): 02:19:06:e0:0b:97:26:41:74:96:fe:1c:9b:f1:3a:46:66:ff:7a:17:f1:e9:a1:dc:6b:10:8f:fd:46:49:ae:ca

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

135

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquanima.com
*.buro.santander.com.mx
santandere-derivatives.es
xn--autobrse-r4a.de
*.privatelease.santander.nl
teamsantander.se
emdia.com.br
*.santanderconsumer.es
santander.no
*.hyundaifinance.de
*.s3caceis.com.co
*.santanderibc.com
*.santander.be
*.santanderlapzero.com
*.santanderconsumerservices.pt
*.suressedirektbank.de
carmine.pt
santanderlapzero.com
*.bancosantander.es
*.eu01.solpheosuite.com
*.wrvc.co.uk
*.carmine.pt
*.universia.net
www.sannetman.com
*.e.santanderopenacademy.com
*.zurichsantanderseguros.cl
*.zurichsantander.cl
*.platform.aquanima.com
santandere-derivatives.com
*.zurich-santander.cl
*.santander.co.uk
*.universia.com.br
*.acp.santanderconsumerbank.nl
*.santanderconsumer.dk
*.santanderconsumerbank.be
paycar.es
*.santanderdigitalservices.com
*.dv.euemdia.com.br
*.scb.nu
gruposantander.com
santander.com
gira.com.br
f1rst.com.uy
returncapital.com.br
santanderdigitalservices.net
*.santanderopenacademy.com
santanderam.co.uk
imperva.com
*.santander.de
*.tuiio.com.mx
*.santanderdigitalservices.net
*.santanderconsumer.fi
*.easydata.pt
*.emdia.com.br
euemdia.com.br
emdia.vc
santanderdigitalservices.com
santandersmusic.com
*.dev.returncapital.com.br
*.test.santanderconsumer.com
*.mycampusdigital.com
*.thefloor.io
*.santander.com.uy
*.emdia.vc
*.eu.pre.gruposantander.com
*.santander.com.mx
tuiio.com.mx
*.negocieipanema.com.br
santanderconsumerbank.nl
*.gruposantander.es
santandereurosdetunomina.com
portalcobrancaflex.com.br
santanderconsumerservices.pt
*.creditodelacasa.com.uy
*.santander.com
*.santander.nl
bancosantander.com
*.pre.gruposantander.com
*.santander.no
*.seguros.santander.com.mx
*.stg.santanderconsumer.fi
santandermarcas.com
*.qa.euemdia.com.br
*.santanderconsumerbank.nl
*.api-dev.santanderauto.systems
*.e.santanderx.com
*.easyboss.pt
*.pagonxt.com
*.santandermarcas.com
easymanager.pt
negocieipanema.com.br
*.hyundaicapital.de
*.f1rst.com.uy
*.gsnetcloud.com
*.officebanking.cl
www.hedinautomotive-financieringen.nl
*.paycar.es
santandercibgreeting.com
*.santander-homo.cl
*.bancosantander.com
*.ipanemacapital.com.br
easyboss.pt
*.easymanager.pt
*.soysantander.com.uy
zurichsantander.cl
*.santanderconsumer.pt
*.portalcobrancaflex.com.br
ipanemacm.com.br
*.officebanking-qa.cl
*.santanderam.co.uk
*.santandere-derivatives.com
ipanemacapital.com.br
*.euemdia.com.br
*.santanderglobaltech.com
*.pp.santanderconsumer.fi
*.santandercibgreeting.com
*.dev.santanderconsumer.fi
*.hedinautomotive-financieringen.nl
*.santandersmusic.com
*.dev.ipanemacm.com.br
*.gruposantander.com
*.gira.com.br
*.santandere-derivatives.es
*.santandereurosdetunomina.com
*.santandercib.com
*.returncapital.com.br
*.timfin.it
*.xn--autobrse-r4a.de
*.aquanima.com
*.teamsantander.se
*.e.universia.net
*.santander.com.ar
*.dev.negocieipanema.com.br
imperva.seceng.tlzproject.com
*.ipanemacm.com.br

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFHSlGRpT9GTS70TvFg
oY2vWpQ+UfnmMrh6/AK1hlo2zE9nxfjwEvha7j9RkzinTJ0DB2MdWhCSulPaoMNi
webTkrZxMXx1SEJGYPN1d2ejNKoLUCNpif1Kpe2OXxk1C4NF7ZGI7Wyh8s+2KOwh
MJ/U0GvYOL+yqvm2NyTyNca91cc3p4LSXj0ItcSll6DTMjmJuB4vkX9GwYx9aLCK
ysb0vJ/CIJt/nwtJP5ewe804SoquF59PT9pEhQcqD372RHvdL2pMRayAQuMJ3M92
xOdw5HLPJ/6bmrrHFiqykZInzsPl9l4bSwxPSDAxjztQirvWxvoEl94h9tOadxiG
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2221604924773934573515314063610336358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 16:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 16:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21847747094069952824804670329597289745303541475789323902967001661678803400115276093452775370988613529978963600532788691375787376496793203226115887018082391422407858496231616597082630306618745579644173773530002172173399590899566279965897109248055323774301405005743246446041259629536379965105471027843081498122838349539898333369928433392927283761917142236276361819706441498782675396197150110874556398158043546612662245801419143659236329929771275910320502927620072477725942228110876914233477409923052564658786311075927827433221800164514053104710982002046898378951018104713993714305635435411235191037989619658901027325569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buro.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelease.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaifinance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3caceis.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderibc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirektbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.solpheosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrvc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sannetman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantanderseguros.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-santander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acp.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scb.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydata.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.santanderconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefloor.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditodelacasa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.santanderauto.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagonxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaicapital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsnetcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-homo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soysantander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking-qa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderglobaltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timfin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.seceng.tlzproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641f68075503eaf748c1b8224e8b7f6e2d93f941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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