imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:f0:60:6e:09:34:c9:b5:7e:b4:a0:fe:cf:03:4e:6a was issued on by GlobalSign nv-sa.

With 144 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:f0:60:6e:09:34:c9:b5:7e:b4:a0:fe:cf:03:4e:6a
Serial Number (int): 2577335071102283407854860241817783914
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 64:1f:68:07:55:03:ea:f7:48:c1:b8:22:4e:8b:7f:6e:2d:93:f9:41
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 1d:7e:0b:3d:24:9c:64:e6:a6:33:dd:69:54:65:df:ae:aa:3d:21:51
Fingerprint (sha256): 03:f0:e9:e5:3c:77:b5:8c:59:e0:d1:f8:bc:5e:84:18:c1:aa:6d:9e:d4:07:0b:38:d5:96:ab:52:0f:0c:d3:cf

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

144

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquanima.com
*.buro.santander.com.mx
santandere-derivatives.es
xn--autobrse-r4a.de
*.privatelease.santander.nl
teamsantander.se
emdia.com.br
*.santanderconsumer.es
santander.no
*.hyundaifinance.de
*.s3caceis.com.co
*.santanderibc.com
*.santander.be
*.santanderlapzero.com
*.santanderconsumerservices.pt
*.suressedirektbank.de
carmine.pt
santanderlapzero.com
*.bancosantander.es
*.eu01.solpheosuite.com
*.wrvc.co.uk
*.carmine.pt
*.universia.net
www.sannetman.com
*.e.santanderopenacademy.com
*.zurichsantanderseguros.cl
*.zurichsantander.cl
*.platform.aquanima.com
santandere-derivatives.com
*.universia.com.br
*.acp.santanderconsumerbank.nl
*.santanderconsumer.dk
*.santanderconsumerbank.be
paycar.es
santanderopenacademy.com
*.santanderdigitalservices.com
*.solution4fleet.com.br
*.dv.euemdia.com.br
*.scb.nu
santanderworkcafe.je
gruposantander.com
santander.com
gira.com.br
f1rst.com.uy
returncapital.com.br
santanderdigitalservices.net
*.santanderopenacademy.com
santanderam.co.uk
imperva.com
*.santander.de
*.tuiio.com.mx
*.santanderdigitalservices.net
*.santanderconsumer.fi
*.easydata.pt
*.emdia.com.br
euemdia.com.br
emdia.vc
*.solution4fleet.services
santanderdigitalservices.com
suressedirectbank.pt
santandersmusic.com
*.dev.returncapital.com.br
*.test.santanderconsumer.com
*.mycampusdigital.com
*.santander.com.uy
*.emdia.vc
*.eu.pre.gruposantander.com
*.santander.com.mx
tuiio.com.mx
*.negocieipanema.com.br
santanderconsumerbank.nl
*.gruposantander.es
santandereurosdetunomina.com
portalcobrancaflex.com.br
santanderconsumerservices.pt
*.creditodelacasa.com.uy
*.santander.com
*.santander.nl
bancosantander.com
*.pre.gruposantander.com
*.santander.no
*.seguros.santander.com.mx
*.stg.santanderconsumer.fi
santandermarcas.com
*.qa.euemdia.com.br
*.santanderconsumerbank.nl
*.api-dev.santanderauto.systems
*.e.santanderx.com
*.easyboss.pt
*.pagonxt.com
*.santandermarcas.com
*.workcafe.im
easymanager.pt
negocieipanema.com.br
*.hyundaicapital.de
*.pp.santanderconsumer.se
*.f1rst.com.uy
*.gsnetcloud.com
*.officebanking.cl
www.hedinautomotive-financieringen.nl
*.paycar.es
santandercibgreeting.com
*.santander-homo.cl
*.bancosantander.com
*.ipanemacapital.com.br
*.workcafe.je
easyboss.pt
*.easymanager.pt
*.soysantander.com.uy
*.suressedirectbank.pt
zurichsantander.cl
*.santanderconsumer.pt
*.portalcobrancaflex.com.br
ipanemacm.com.br
*.officebanking-qa.cl
*.santanderam.co.uk
*.santandere-derivatives.com
ipanemacapital.com.br
*.euemdia.com.br
*.santanderglobaltech.com
*.santanderconsumer.co
*.pp.santanderconsumer.fi
*.santandercibgreeting.com
*.dev.santanderconsumer.fi
*.hedinautomotive-financieringen.nl
*.santandersmusic.com
*.dev.ipanemacm.com.br
*.gruposantander.com
*.gira.com.br
*.santandere-derivatives.es
*.santandereurosdetunomina.com
workcafe.je
*.santanderworkcafe.je
*.santandercib.com
*.returncapital.com.br
*.timfin.it
*.xn--autobrse-r4a.de
*.aquanima.com
*.teamsantander.se
*.e.universia.net
*.dev.negocieipanema.com.br
imperva.seceng.tlzproject.com
*.ipanemacm.com.br
workcafe.im

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIISqzCCEZOgAwIBAgIQAfBgbgk0ybV+tKD+zwNOajANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMTAeFw0yNDAx
MDkxMjAwMDdaFw0yNDA3MDcxMjAwMDdaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFHSlGRpT9GTS70TvFg
oY2vWpQ+UfnmMrh6/AK1hlo2zE9nxfjwEvha7j9RkzinTJ0DB2MdWhCSulPaoMNi
webTkrZxMXx1SEJGYPN1d2ejNKoLUCNpif1Kpe2OXxk1C4NF7ZGI7Wyh8s+2KOwh
MJ/U0GvYOL+yqvm2NyTyNca91cc3p4LSXj0ItcSll6DTMjmJuB4vkX9GwYx9aLCK
ysb0vJ/CIJt/nwtJP5ewe804SoquF59PT9pEhQcqD372RHvdL2pMRayAQuMJ3M92
xOdw5HLPJ/6bmrrHFiqykZInzsPl9l4bSwxPSDAxjztQirvWxvoEl94h9tOadxiG
gQIDAQABo4IPsTCCD60wggxlBgNVHREEggxcMIIMWIIMYXF1YW5pbWEuY29tghcq
LmJ1cm8uc2FudGFuZGVyLmNvbS5teIIZc2FudGFuZGVyZS1kZXJpdmF0aXZlcy5l
c4ITeG4tLWF1dG9icnNlLXI0YS5kZYIbKi5wcml2YXRlbGVhc2Uuc2FudGFuZGVy
Lm5sghB0ZWFtc2FudGFuZGVyLnNlggxlbWRpYS5jb20uYnKCFiouc2FudGFuZGVy
Y29uc3VtZXIuZXOCDHNhbnRhbmRlci5ub4ITKi5oeXVuZGFpZmluYW5jZS5kZYIR
Ki5zM2NhY2Vpcy5jb20uY2+CEiouc2FudGFuZGVyaWJjLmNvbYIOKi5zYW50YW5k
ZXIuYmWCFiouc2FudGFuZGVybGFwemVyby5jb22CHiouc2FudGFuZGVyY29uc3Vt
ZXJzZXJ2aWNlcy5wdIIWKi5zdXJlc3NlZGlyZWt0YmFuay5kZYIKY2FybWluZS5w
dIIUc2FudGFuZGVybGFwemVyby5jb22CEyouYmFuY29zYW50YW5kZXIuZXOCFyou
ZXUwMS5zb2xwaGVvc3VpdGUuY29tggwqLndydmMuY28udWuCDCouY2FybWluZS5w
dIIPKi51bml2ZXJzaWEubmV0ghF3d3cuc2FubmV0bWFuLmNvbYIcKi5lLnNhbnRh
bmRlcm9wZW5hY2FkZW15LmNvbYIbKi56dXJpY2hzYW50YW5kZXJzZWd1cm9zLmNs
ghQqLnp1cmljaHNhbnRhbmRlci5jbIIXKi5wbGF0Zm9ybS5hcXVhbmltYS5jb22C
GnNhbnRhbmRlcmUtZGVyaXZhdGl2ZXMuY29tghIqLnVuaXZlcnNpYS5jb20uYnKC
HiouYWNwLnNhbnRhbmRlcmNvbnN1bWVyYmFuay5ubIIWKi5zYW50YW5kZXJjb25z
dW1lci5ka4IaKi5zYW50YW5kZXJjb25zdW1lcmJhbmsuYmWCCXBheWNhci5lc4IY
c2FudGFuZGVyb3BlbmFjYWRlbXkuY29tgh4qLnNhbnRhbmRlcmRpZ2l0YWxzZXJ2
aWNlcy5jb22CFyouc29sdXRpb240ZmxlZXQuY29tLmJyghMqLmR2LmV1ZW1kaWEu
Y29tLmJygggqLnNjYi5udYIUc2FudGFuZGVyd29ya2NhZmUuamWCEmdydXBvc2Fu
dGFuZGVyLmNvbYINc2FudGFuZGVyLmNvbYILZ2lyYS5jb20uYnKCDGYxcnN0LmNv
bS51eYIUcmV0dXJuY2FwaXRhbC5jb20uYnKCHHNhbnRhbmRlcmRpZ2l0YWxzZXJ2
aWNlcy5uZXSCGiouc2FudGFuZGVyb3BlbmFjYWRlbXkuY29tghFzYW50YW5kZXJh
bS5jby51a4ILaW1wZXJ2YS5jb22CDiouc2FudGFuZGVyLmRlgg4qLnR1aWlvLmNv
bS5teIIeKi5zYW50YW5kZXJkaWdpdGFsc2VydmljZXMubmV0ghYqLnNhbnRhbmRl
cmNvbnN1bWVyLmZpgg0qLmVhc3lkYXRhLnB0gg4qLmVtZGlhLmNvbS5icoIOZXVl
bWRpYS5jb20uYnKCCGVtZGlhLnZjghkqLnNvbHV0aW9uNGZsZWV0LnNlcnZpY2Vz
ghxzYW50YW5kZXJkaWdpdGFsc2VydmljZXMuY29tghRzdXJlc3NlZGlyZWN0YmFu
ay5wdIITc2FudGFuZGVyc211c2ljLmNvbYIaKi5kZXYucmV0dXJuY2FwaXRhbC5j
b20uYnKCHCoudGVzdC5zYW50YW5kZXJjb25zdW1lci5jb22CFSoubXljYW1wdXNk
aWdpdGFsLmNvbYISKi5zYW50YW5kZXIuY29tLnV5ggoqLmVtZGlhLnZjghsqLmV1
LnByZS5ncnVwb3NhbnRhbmRlci5jb22CEiouc2FudGFuZGVyLmNvbS5teIIMdHVp
aW8uY29tLm14ghcqLm5lZ29jaWVpcGFuZW1hLmNvbS5icoIYc2FudGFuZGVyY29u
c3VtZXJiYW5rLm5sghMqLmdydXBvc2FudGFuZGVyLmVzghxzYW50YW5kZXJldXJv
c2RldHVub21pbmEuY29tghlwb3J0YWxjb2JyYW5jYWZsZXguY29tLmJyghxzYW50
YW5kZXJjb25zdW1lcnNlcnZpY2VzLnB0ghgqLmNyZWRpdG9kZWxhY2FzYS5jb20u
dXmCDyouc2FudGFuZGVyLmNvbYIOKi5zYW50YW5kZXIubmyCEmJhbmNvc2FudGFu
ZGVyLmNvbYIYKi5wcmUuZ3J1cG9zYW50YW5kZXIuY29tgg4qLnNhbnRhbmRlci5u
b4IaKi5zZWd1cm9zLnNhbnRhbmRlci5jb20ubXiCGiouc3RnLnNhbnRhbmRlcmNv
bnN1bWVyLmZpghNzYW50YW5kZXJtYXJjYXMuY29tghMqLnFhLmV1ZW1kaWEuY29t
LmJyghoqLnNhbnRhbmRlcmNvbnN1bWVyYmFuay5ubIIfKi5hcGktZGV2LnNhbnRh
bmRlcmF1dG8uc3lzdGVtc4ISKi5lLnNhbnRhbmRlcnguY29tgg0qLmVhc3lib3Nz
LnB0gg0qLnBhZ29ueHQuY29tghUqLnNhbnRhbmRlcm1hcmNhcy5jb22CDSoud29y
a2NhZmUuaW2CDmVhc3ltYW5hZ2VyLnB0ghVuZWdvY2llaXBhbmVtYS5jb20uYnKC
EyouaHl1bmRhaWNhcGl0YWwuZGWCGSoucHAuc2FudGFuZGVyY29uc3VtZXIuc2WC
DiouZjFyc3QuY29tLnV5ghAqLmdzbmV0Y2xvdWQuY29tghIqLm9mZmljZWJhbmtp
bmcuY2yCJXd3dy5oZWRpbmF1dG9tb3RpdmUtZmluYW5jaWVyaW5nZW4ubmyCCyou
cGF5Y2FyLmVzghhzYW50YW5kZXJjaWJncmVldGluZy5jb22CEyouc2FudGFuZGVy
LWhvbW8uY2yCFCouYmFuY29zYW50YW5kZXIuY29tghcqLmlwYW5lbWFjYXBpdGFs
LmNvbS5icoINKi53b3JrY2FmZS5qZYILZWFzeWJvc3MucHSCECouZWFzeW1hbmFn
ZXIucHSCFSouc295c2FudGFuZGVyLmNvbS51eYIWKi5zdXJlc3NlZGlyZWN0YmFu
ay5wdIISenVyaWNoc2FudGFuZGVyLmNsghYqLnNhbnRhbmRlcmNvbnN1bWVyLnB0
ghsqLnBvcnRhbGNvYnJhbmNhZmxleC5jb20uYnKCEGlwYW5lbWFjbS5jb20uYnKC
FSoub2ZmaWNlYmFua2luZy1xYS5jbIITKi5zYW50YW5kZXJhbS5jby51a4IcKi5z
YW50YW5kZXJlLWRlcml2YXRpdmVzLmNvbYIVaXBhbmVtYWNhcGl0YWwuY29tLmJy
ghAqLmV1ZW1kaWEuY29tLmJyghkqLnNhbnRhbmRlcmdsb2JhbHRlY2guY29tghYq
LnNhbnRhbmRlcmNvbnN1bWVyLmNvghkqLnBwLnNhbnRhbmRlcmNvbnN1bWVyLmZp
ghoqLnNhbnRhbmRlcmNpYmdyZWV0aW5nLmNvbYIaKi5kZXYuc2FudGFuZGVyY29u
c3VtZXIuZmmCIyouaGVkaW5hdXRvbW90aXZlLWZpbmFuY2llcmluZ2VuLm5sghUq
LnNhbnRhbmRlcnNtdXNpYy5jb22CFiouZGV2LmlwYW5lbWFjbS5jb20uYnKCFCou
Z3J1cG9zYW50YW5kZXIuY29tgg0qLmdpcmEuY29tLmJyghsqLnNhbnRhbmRlcmUt
ZGVyaXZhdGl2ZXMuZXOCHiouc2FudGFuZGVyZXVyb3NkZXR1bm9taW5hLmNvbYIL
d29ya2NhZmUuamWCFiouc2FudGFuZGVyd29ya2NhZmUuamWCEiouc2FudGFuZGVy
Y2liLmNvbYIWKi5yZXR1cm5jYXBpdGFsLmNvbS5icoILKi50aW1maW4uaXSCFSou
eG4tLWF1dG9icnNlLXI0YS5kZYIOKi5hcXVhbmltYS5jb22CEioudGVhbXNhbnRh
bmRlci5zZYIRKi5lLnVuaXZlcnNpYS5uZXSCGyouZGV2Lm5lZ29jaWVpcGFuZW1h
LmNvbS5icoIdaW1wZXJ2YS5zZWNlbmcudGx6cHJvamVjdC5jb22CEiouaXBhbmVt
YWNtLmNvbS5icoILd29ya2NhZmUuaW0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUZB9oB1UD6vdIwbgiTot/
bi2T+UEwVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAM
BgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0
cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRx
MTBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNl
cnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRxMS5jcnQwHwYDVR0jBBgwFoAUZsDHo5rN
/vPqzktTC2FerzMFs+EwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9i
YWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyNHExLmNybDCCAX8GCisG
AQQB1nkCBAIEggFvBIIBawFpAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8o
hez4ZG4AAAGM7hhj/wAABAMASDBGAiEA2qHpx4tMk3D8Z4wOobVexoiiSlUVdBbA
UAc4/z39X5UCIQD29HH4M9ipUU4/ebrEjg2Yi8G52lhEGEKTpnwUn5DdaAB3AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjO4YZBgAAAQDAEgwRgIh
AMl3V9qxHClAJhVxdyNaV14dukaHauKLfgcJf6M7ovU4AiEA+vEhutVxkkO/HfgJ
Bbm9sxO2zq2B1b+goVoYuZwbCBsAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAYzuGGVwAAAEAwBGMEQCIESnH8IPSY2HBpDillS462sXIgOhioJr
9pAc/iI1z2JAAiBmYnNQGAU8wJ6iCdZIaxhiF29sPkUA8CtEvESUiAzWETANBgkq
hkiG9w0BAQsFAAOCAQEAhVQoi/c9vmAr8LNX4pyK4Zbie5APVXKluEBabtQMyQW4
2WIXNBwtu4TYKGjNNlBcE7f7XsEyWI4wqDZn8Kfky+4KxQgBjuHtvgRTFnF4Lwf3
31PqnlrKfxMvSeWKO4X14rMJXE37oYomDTVU4nJO0jEZSs7pdsjaJJ+UaZC8+BSj
BT45G6tZW/cbVcFSBVOwyQd9HLk1L8YEK+tafDuvpGfAmSp2N+se361wmupbo1Ff
2vwufqh1nS6TKypSennPZGueRk6jLc8wEYK8cUmBYq9YS8/MpfOAoTasobuDNKWL
/tJok0wfL7HaiSF01nrpLfMy+02NtYVuDBxA5cbJSQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFHSlGRpT9GTS70TvFg
oY2vWpQ+UfnmMrh6/AK1hlo2zE9nxfjwEvha7j9RkzinTJ0DB2MdWhCSulPaoMNi
webTkrZxMXx1SEJGYPN1d2ejNKoLUCNpif1Kpe2OXxk1C4NF7ZGI7Wyh8s+2KOwh
MJ/U0GvYOL+yqvm2NyTyNca91cc3p4LSXj0ItcSll6DTMjmJuB4vkX9GwYx9aLCK
ysb0vJ/CIJt/nwtJP5ewe804SoquF59PT9pEhQcqD372RHvdL2pMRayAQuMJ3M92
xOdw5HLPJ/6bmrrHFiqykZInzsPl9l4bSwxPSDAxjztQirvWxvoEl94h9tOadxiG
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2577335071102283407854860241817783914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 12:00:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 12:00:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21847747094069952824804670329597289745303541475789323902967001661678803400115276093452775370988613529978963600532788691375787376496793203226115887018082391422407858496231616597082630306618745579644173773530002172173399590899566279965897109248055323774301405005743246446041259629536379965105471027843081498122838349539898333369928433392927283761917142236276361819706441498782675396197150110874556398158043546612662245801419143659236329929771275910320502927620072477725942228110876914233477409923052564658786311075927827433221800164514053104710982002046898378951018104713993714305635435411235191037989619658901027325569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buro.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelease.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaifinance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3caceis.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderibc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirektbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.solpheosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrvc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sannetman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantanderseguros.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acp.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solution4fleet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scb.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydata.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solution4fleet.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.santanderconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditodelacasa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.santanderauto.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagonxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workcafe.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaicapital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsnetcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-homo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soysantander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking-qa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderglobaltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timfin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.seceng.tlzproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcafe.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641f68075503eaf748c1b8224e8b7f6e2d93f941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008554288bf73dbe602bf0b357e29c8ae196e27b900f5572a5b8405a6ed40cc905b8d96217341c2dbb84d82868cd36505c13b7fb5ec132588e30a83667f0a7e4cbee0ac508018ee1edbe04531671782f07f7df53ea9e5aca7f132f49e58a3b85f5e2b3095c4dfba18a260d3554e2724ed231194acee976c8da249f946990bcf814a3053e391bab595bf71b55c1520553b0c9077d1cb9352fc6042beb5a7c3bafa467c0992a7637eb1edfad709aea5ba3515fdafc2e7ea8759d2e932b2a527a79cf646b9e464ea32dcf301182bc71498162af584bcfcca5f380a136aca1bb8334a58bfed268934c1f2fb1da892174d67ae92df332fb4d8db5856e0c1c40e5c6c949