imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:dc:41:4c:6c:01:1b:39:d4:e1:ae:50:8d:1e:fc:cd was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:dc:41:4c:6c:01:1b:39:d4:e1:ae:50:8d:1e:fc:cd
Serial Number (int): 2472857716052884951071795133487709389
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e2:54:d5:f3:8f:8d:f8:39:52:98:f3:d3:ec:43:6a:5e:01:a3:93:fb
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): e9:d0:db:5b:76:83:45:25:31:fb:35:10:81:cf:89:e1:79:bd:04:a5
Fingerprint (sha256): 03:3b:30:71:21:e0:dc:a4:52:d8:5f:6c:5c:23:06:ba:18:ac:ce:16:3c:2a:c8:4c:89:87:cd:a0:d4:6f:e8:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mysbli.com
*.distribenligne.com
evvocdn.com
*.dingconnect.com
*.enelamericas.com
*.superdigital.com.br
*.bravissimo.com
*.ezetop-staging.com
*.alletf.com
*.sharphealthplanpayment.com
ding.com
*.evvochannel.tv
sbliagent.com
*.reporthq.nasdaq.com
*.sbliagent.com
*.copart.es
*.fleetfarm.com
*.acbj.com
competitioneconomics.com
distribenligne.com
mysbli.com
timenet.org.il
dingconnect.com
*.etcc.com
recargasacuba.com
imperva.com
www.competitioneconomics.com
sharphealthplanpayment.com
*.timenet.org.il
*.pango.pl
bravissimo.com
*.ding.com
azorus.com
fleetfarm.com
*.digicelgroup.com
*.evvocdn.com
*.sanmina.com
evvochannel.tv
*.oxlive.dorseywright.com
*.dorseywright.com
*.recargasacuba.com
ezetop.com
*.azorus.com
*.ezetop.com
acbj.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScKGUHON0kP9rZ4/O7F
KVB5k0r833m1RfVPk6xAtp2h8ET06k63oZwkmIIFwjD4DXanpTF/dVXGeVWRCMQL
ZEETRifR7u6es/eZjSw0/g8bdPPlSASoCK782AiNJ3wpmOpTxba08JvVswTJxzJd
jvxp3KtvU344KD0W8QGDIKlNuhaJmHvWLCRPIX+v2VROLBCYPrPqcYtXbhl2T1X7
7JNPcdC7dGbSpErF43awRHnp2u/k+pM+FlWMp5Ywfvy4CuwHERQ6CIsn+LmWunBp
j7xojAA//Tqhel5nFoSL8OgONXZsNydgPsSkuwDh6LFlcprAd55V5AECZ85lxj3H
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2472857716052884951071795133487709389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 08:27:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-03 23:22:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21353524608516649880807988182599357894911731812433701499205465754693415520949286019892795864510865390603303620963677315747100056592014646842383583576823654559729390877112767841163538245437025628284307593681921489804523322874507689949645197644596141323282655698697637397341056762014125318002795352766076144147357768783499262119191250222251121365091871904897224389651324306456520661688972768361276678571692066518461723840460736489490922999781898993792352095706789420325877706335034812998213706473775394644197356362934161324858518625524898387167633077423436022612468029487256957746023951205167041416178517496126584506163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysbli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.distribenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dingconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enelamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravissimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezetop-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alletf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharphealthplanpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evvochannel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbliagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporthq.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbliagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copart.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleetfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acbj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competitioneconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysbli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timenet.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasacuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.competitioneconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharphealthplanpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timenet.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pango.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravissimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azorus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evvocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanmina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvochannel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxlive.dorseywright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorseywright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recargasacuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezetop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azorus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezetop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acbj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e254d5f38f8df8395298f3d3ec436a5e01a393fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004345b62847207adb52ae656bf10988483fcd51b9f5fc015ed0aeec6fd7ee74749e70cd7ebd44ef3aece8f5ec74d213a857984772f3d53651026ec1df4925ab53342ad8d02e85db96d9495bd44cae7dfeb8f6ee6359cff6fa594b48e0b135f46dc99b7ebff3a87da54396adf40a488fdf7e2c8e5eb1fc2e52bac015743ab6cdd89ee71a711be562777e5eba88f0e1f309171a5e88b3aca49b87f01a73a7677b92c7a52fa7bce2143f7a04fba568329b2258a34e9ec58c6d5eaa699704c8fac327211be6308451f5b13036eea5c150124e1fb76b16a0a5ff8f19facc24fffbfede27da536e0ef7bb12a4021a326f7bcdafc5ba7448529f9eb83830a297c67e8f8