imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:ee:67:e5:01:a1:3d:d6:40:c6:3e:ca:6a:bd:1e:23 was issued on by GlobalSign nv-sa.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ee:67:e5:01:a1:3d:d6:40:c6:3e:ca:6a:bd:1e:23
Serial Number (int): 2567101880059010820486514966047563299
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:1e:ef:89:9d:1e:38:c8:9d:58:8b:0d:6b:2e:7f:58:dc:a6:b6:03
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): d2:84:af:11:46:12:c4:97:82:5d:7c:36:d2:9a:81:07:f3:59:2a:2b
Fingerprint (sha256): 09:0a:8a:c2:0c:b9:c1:2f:6a:e0:a3:12:98:55:d8:32:1b:b7:10:43:ef:36:83:5c:d7:e4:99:0c:03:3b:15:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.getrova.com
cslstockbrokers.com
cslportal.fcmb.com
www.fcmbtrustees.com
flexxzone.fcmb.com
*.prd.getrova.io
image.fcmb.com
appraisal.fcmb.com
*.fcmbassetmanagement.com
onlineaccount.fcmb.com
mobileappserver.fcmb.com
developer.fcmb.com
posmerchant.fcmb.com
backendeip.fcmb.com
fcmb.com
fcmbassetmanagement.com
devportal.fcmb.com
elearning.fcmb.com
yaarnbox.fcmb.com
imperva.com
ibank.fcmb.com
webpayment.fcmb.com
fcmbgroup.com
*.cslstockbrokers.com
tradeservices.fcmb.com
wallet.fcmb.com
getrova.com
*.fcmbgroup.com
enterpriseregistration.fcmb.com
fcmbtrustees.com
testapp-gw.fcmb.com
businesszone.fcmb.com
*.fcmb.com
yedp.fcmb.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV59XPJEUgNg66AaWK/K
v88nceGaM4dsprGcFUO10+HuqZTrIA9e53AzmGpYG4l6Y3pv+LHxkud+IoemwaEx
MPB98oA9NVNuK99B7VWjTvL1fNdEImWfUnJ4RtRT2h+jg4wgSTQxbteah/nJ6rg7
sNVuqbgJKM9EPu/IfmHV3NNp/IpgENUZT106b3SOyXi21nKbPtZLXpSnf9snbiZ4
6TL/aZu2VHypCn+RNF0hO73nkCYWKVqiQ+fyEFxaM8PZkM/UesamVf+keFsbLTx7
/8m8GhWU2xDaXPxpcr+Do3q5eXsATLQzf68GtQABpL3YfReN/xYTE1xq2Cd8IIbp
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2567101880059010820486514966047563299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 15:09:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 15:09:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19866008487098875138459988993246246750566672075712168760823183025289344614602592173520295432650165638489662466753587414183284712029301496305964398241835412998015427598939238304391875948294354748600729055589094440865970235520622347983756260355673409231392570539752548635299821072583205343674397729776817626752810978861672589503181627585270601150917855105997884315325532319835787634436097247878192398817239576750498503414673793162250649916668041328944704265452439821135873623899358907547804792241071495633937525803604017856078104571958118820975737409533938596777805367370230193525269750573288799584913482411021041068293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (671 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getrova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cslstockbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cslportal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcmbtrustees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexxzone.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.getrova.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmbassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineaccount.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileappserver.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posmerchant.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backendeip.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devportal.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaarnbox.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibank.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpayment.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cslstockbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeservices.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmbgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmbtrustees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapp-gw.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesszone.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yedp.fcmb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1eef899d1e38c89d588b0d6b2e7f58dca6b603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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