imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:4b:d2:cd:56:3d:28:ec:5e:e7:3d:2c:d0:22:4e:75 was issued on by GlobalSign nv-sa.

With 144 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4b:d2:cd:56:3d:28:ec:5e:e7:3d:2c:d0:22:4e:75
Serial Number (int): 1722925834654758794583416177367862901
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:1e:70:c6:a1:f4:d2:b4:5e:c7:3b:11:01:18:0d:84:db:3a:89:11
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 81:9d:a4:ce:93:20:82:8b:39:fc:d6:f3:cc:21:e5:39:37:10:f1:35
Fingerprint (sha256): 0c:73:e3:b8:a4:ad:55:93:d7:36:bd:24:05:fa:0b:1a:3d:8d:0e:d4:5f:38:df:a5:76:14:78:41:02:fe:fa:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate imperva.com

144

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recepciondev-proveedores.xerox.com
my.comdoc.com
*.qbsi-xerox.com
moj-xsm-stg.services.xerox.com
lucassystems.com
capitalbusinessinc.com
dev.carear.app
carrxerox.com
stage.carear.app
*.heritagebusiness.com
moj-sso-stg.corp.xerox.com
xics-stg.corp.xerox.com
*.thefic.xerox.com
www.docushare-innovation.xerox.com
premier-iowa.com
aberdeenmailservice-stg.corp.xerox.com
socal-office.com
test.econciergetools.com
welwyn-dam-stg.gdc.xerox.com
recepcion-proveedores.xerox.com
xeroxhts.external.xerox.com
conestogacopiers.com
eautoweb.dahill.com
qbsi-xerox.com
*.elanoffice.com
*.iot-xerox.com
ppt-test.corp.xerox.com
nafapps.corp.xerox.com
www.s3.external.xerox.com
zenosolutions.com
dev.apiv2.carear.app
imagequestks.com
myinfo.cotg.com
rkdixon.com
*.lucassystems.com
sierraoffice.com
*.mos-xerox.com
gitlab-epn.parc.com
conwayoffice.com
nhsbsa-portal-stg.corp.xerox.com
www.sitepecas.xerox.com.br
*.stewartxerox.com
webportal.lasernetworks.com
ssbi-qc.corp.xerox.com
beu.net
ppm-test.corp.xerox.com
*.roa-usa.com
heritagebusiness.com
*.premier-iowa.com
xdsde-stg.services.xerox.com
elanoffice.com
carolinaosonline.com
moj-portal-stg.corp.xerox.com
aart.corp.xerox.com
boeweb.com
inlandbusiness.us
transcobusiness.com
esi.net
www.custsatsurvey.xerox.com
imperva.com
*.mbm360.com
dhcpportaluk-stg.services.xerox.com
printportal-stg.services.xerox.com
digitisationportal-stg.services.xerox.com
gsnstage.xrxgsn.com
easternmpn.com
*.sierraoffice.com
*.gfive.net
laserresources.com
beta.apiv2.carear.app
www.xdocushare.xerox.com
gcm-test.corp.xerox.com
people.parc.com
ba-portal-stg.corp.xerox.com
*.documentsystems.com
gfive.net
www.docushare-xogpsg.xerox.com
*.comdoc.com
dealregistration-test.corp.xerox.com
tco-test.corp.xerox.com
gotocos.com
teamamcom.com
cmswebshop-stg.corp.xerox.com
roa-usa.com
www.zenosolutions.com
pg-portal-stg.corp.xerox.com
*.its-xrx.com
its-xrx.com
mos-xerox.com
www.partner.xerox.com
*.mrc360.com
cbs-gisx.com
mtbt.com
*.mtbt.com
apiv2.carear.app
mrc360.com
ppmm-test.corp.xerox.com
cmshelpdesk-stg.corp.xerox.com
dwprepro-dr.corp.xerox.com
iot-xerox.com
www.xecc.support.xerox.com
gskreprographics-portal-stg.corp.xerox.com
pwm-api-test2.corp.xerox.com
cmswebshop-stg.external.xerox.com
*.boeweb.com
kindred.carolinaosonline.com
*.socal-office.com
*.conestogacopiers.com
*.docushare.xerox.com
zoomcopiers.com
*.beu.net
*.easternmpn.com
*.carrxerox.com
*.ctx-xerox.com
*.gotocos.com
dwprepro-stg.corp.xerox.com
pwm-api-test.corp.xerox.com
*.laserresources.com
*.zoomcopiers.com
mbm360.com
*.capitalbusinessinc.com
documentsystems.com
viit.corp.xerox.com
gitlab-test.parc.com
stewartxerox.com
ctx-xerox.com
*.everythingjustrunsbetter.com
*.carolinaosonline.com
*.imagequestks.com
*.rkdixon.com
*.inlandbusiness.us
stage.apiv2.carear.app
logonstage.xrxgsn.com
saxon.net
*.teamamcom.com
*.conwayoffice.com
*.saxon.net
www.esi.net
digitisationportal-uat.services.xerox.com
everythingjustrunsbetter.com
test1.felectronica.xerox.ec
*.cbs-gisx.com
*.transcobusiness.com
comdoc.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRKTCCEBGgAwIBAgIQAUvSzVY9KOxe5z0s0CJOdTANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMiBRMTAeFw0yMjAz
MTYxNzIxMjRaFw0yMjA5MTUwODE2MDBaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDWgMqFJxPlUYKjncJVV
WPPFqHukd1SrQYsbqOigOdd4xIql7h0O0WHMZhzqHjnGnBau4CwKGngV6CPHUE4s
s9hBp+VgiEX7DyMTK6Pgo7tmQpjn1OjtIUFd8yVwENmMHo3SKgnjQK/n/GDbnmm9
cyoyykhzPV+/AVC4QKQP9ZNDEOrBhhH4OXS+FHQ1kr4LUPGMO4U9zNRTQ3gVcSxp
UT9wO1VW6B9X19zaeTFj0Hg4bENQup9AuCU6ruVik9Ki7WzfFVExKC2V65p7mbiS
8a2I/JLrqGef8MPsKo7U9nSQyRbEojKzq/LX2K7ltzqtuBG9o+JlXQ4MG1ll7pQt
VwIDAQABo4IOLzCCDiswggxRBgNVHREEggxIMIIMRIIicmVjZXBjaW9uZGV2LXBy
b3ZlZWRvcmVzLnhlcm94LmNvbYINbXkuY29tZG9jLmNvbYIQKi5xYnNpLXhlcm94
LmNvbYIebW9qLXhzbS1zdGcuc2VydmljZXMueGVyb3guY29tghBsdWNhc3N5c3Rl
bXMuY29tghZjYXBpdGFsYnVzaW5lc3NpbmMuY29tgg5kZXYuY2FyZWFyLmFwcIIN
Y2Fycnhlcm94LmNvbYIQc3RhZ2UuY2FyZWFyLmFwcIIWKi5oZXJpdGFnZWJ1c2lu
ZXNzLmNvbYIabW9qLXNzby1zdGcuY29ycC54ZXJveC5jb22CF3hpY3Mtc3RnLmNv
cnAueGVyb3guY29tghIqLnRoZWZpYy54ZXJveC5jb22CInd3dy5kb2N1c2hhcmUt
aW5ub3ZhdGlvbi54ZXJveC5jb22CEHByZW1pZXItaW93YS5jb22CJmFiZXJkZWVu
bWFpbHNlcnZpY2Utc3RnLmNvcnAueGVyb3guY29tghBzb2NhbC1vZmZpY2UuY29t
ghh0ZXN0LmVjb25jaWVyZ2V0b29scy5jb22CHHdlbHd5bi1kYW0tc3RnLmdkYy54
ZXJveC5jb22CH3JlY2VwY2lvbi1wcm92ZWVkb3Jlcy54ZXJveC5jb22CG3hlcm94
aHRzLmV4dGVybmFsLnhlcm94LmNvbYIUY29uZXN0b2dhY29waWVycy5jb22CE2Vh
dXRvd2ViLmRhaGlsbC5jb22CDnFic2kteGVyb3guY29tghAqLmVsYW5vZmZpY2Uu
Y29tgg8qLmlvdC14ZXJveC5jb22CF3BwdC10ZXN0LmNvcnAueGVyb3guY29tghZu
YWZhcHBzLmNvcnAueGVyb3guY29tghl3d3cuczMuZXh0ZXJuYWwueGVyb3guY29t
ghF6ZW5vc29sdXRpb25zLmNvbYIUZGV2LmFwaXYyLmNhcmVhci5hcHCCEGltYWdl
cXVlc3Rrcy5jb22CD215aW5mby5jb3RnLmNvbYILcmtkaXhvbi5jb22CEioubHVj
YXNzeXN0ZW1zLmNvbYIQc2llcnJhb2ZmaWNlLmNvbYIPKi5tb3MteGVyb3guY29t
ghNnaXRsYWItZXBuLnBhcmMuY29tghBjb253YXlvZmZpY2UuY29tgiBuaHNic2Et
cG9ydGFsLXN0Zy5jb3JwLnhlcm94LmNvbYIad3d3LnNpdGVwZWNhcy54ZXJveC5j
b20uYnKCEiouc3Rld2FydHhlcm94LmNvbYIbd2VicG9ydGFsLmxhc2VybmV0d29y
a3MuY29tghZzc2JpLXFjLmNvcnAueGVyb3guY29tggdiZXUubmV0ghdwcG0tdGVz
dC5jb3JwLnhlcm94LmNvbYINKi5yb2EtdXNhLmNvbYIUaGVyaXRhZ2VidXNpbmVz
cy5jb22CEioucHJlbWllci1pb3dhLmNvbYIceGRzZGUtc3RnLnNlcnZpY2VzLnhl
cm94LmNvbYIOZWxhbm9mZmljZS5jb22CFGNhcm9saW5hb3NvbmxpbmUuY29tgh1t
b2otcG9ydGFsLXN0Zy5jb3JwLnhlcm94LmNvbYITYWFydC5jb3JwLnhlcm94LmNv
bYIKYm9ld2ViLmNvbYIRaW5sYW5kYnVzaW5lc3MudXOCE3RyYW5zY29idXNpbmVz
cy5jb22CB2VzaS5uZXSCG3d3dy5jdXN0c2F0c3VydmV5Lnhlcm94LmNvbYILaW1w
ZXJ2YS5jb22CDCoubWJtMzYwLmNvbYIjZGhjcHBvcnRhbHVrLXN0Zy5zZXJ2aWNl
cy54ZXJveC5jb22CInByaW50cG9ydGFsLXN0Zy5zZXJ2aWNlcy54ZXJveC5jb22C
KWRpZ2l0aXNhdGlvbnBvcnRhbC1zdGcuc2VydmljZXMueGVyb3guY29tghNnc25z
dGFnZS54cnhnc24uY29tgg5lYXN0ZXJubXBuLmNvbYISKi5zaWVycmFvZmZpY2Uu
Y29tggsqLmdmaXZlLm5ldIISbGFzZXJyZXNvdXJjZXMuY29tghViZXRhLmFwaXYy
LmNhcmVhci5hcHCCGHd3dy54ZG9jdXNoYXJlLnhlcm94LmNvbYIXZ2NtLXRlc3Qu
Y29ycC54ZXJveC5jb22CD3Blb3BsZS5wYXJjLmNvbYIcYmEtcG9ydGFsLXN0Zy5j
b3JwLnhlcm94LmNvbYIVKi5kb2N1bWVudHN5c3RlbXMuY29tgglnZml2ZS5uZXSC
Hnd3dy5kb2N1c2hhcmUteG9ncHNnLnhlcm94LmNvbYIMKi5jb21kb2MuY29tgiRk
ZWFscmVnaXN0cmF0aW9uLXRlc3QuY29ycC54ZXJveC5jb22CF3Rjby10ZXN0LmNv
cnAueGVyb3guY29tggtnb3RvY29zLmNvbYINdGVhbWFtY29tLmNvbYIdY21zd2Vi
c2hvcC1zdGcuY29ycC54ZXJveC5jb22CC3JvYS11c2EuY29tghV3d3cuemVub3Nv
bHV0aW9ucy5jb22CHHBnLXBvcnRhbC1zdGcuY29ycC54ZXJveC5jb22CDSouaXRz
LXhyeC5jb22CC2l0cy14cnguY29tgg1tb3MteGVyb3guY29tghV3d3cucGFydG5l
ci54ZXJveC5jb22CDCoubXJjMzYwLmNvbYIMY2JzLWdpc3guY29tgghtdGJ0LmNv
bYIKKi5tdGJ0LmNvbYIQYXBpdjIuY2FyZWFyLmFwcIIKbXJjMzYwLmNvbYIYcHBt
bS10ZXN0LmNvcnAueGVyb3guY29tgh5jbXNoZWxwZGVzay1zdGcuY29ycC54ZXJv
eC5jb22CGmR3cHJlcHJvLWRyLmNvcnAueGVyb3guY29tgg1pb3QteGVyb3guY29t
ghp3d3cueGVjYy5zdXBwb3J0Lnhlcm94LmNvbYIqZ3NrcmVwcm9ncmFwaGljcy1w
b3J0YWwtc3RnLmNvcnAueGVyb3guY29tghxwd20tYXBpLXRlc3QyLmNvcnAueGVy
b3guY29tgiFjbXN3ZWJzaG9wLXN0Zy5leHRlcm5hbC54ZXJveC5jb22CDCouYm9l
d2ViLmNvbYIca2luZHJlZC5jYXJvbGluYW9zb25saW5lLmNvbYISKi5zb2NhbC1v
ZmZpY2UuY29tghYqLmNvbmVzdG9nYWNvcGllcnMuY29tghUqLmRvY3VzaGFyZS54
ZXJveC5jb22CD3pvb21jb3BpZXJzLmNvbYIJKi5iZXUubmV0ghAqLmVhc3Rlcm5t
cG4uY29tgg8qLmNhcnJ4ZXJveC5jb22CDyouY3R4LXhlcm94LmNvbYINKi5nb3Rv
Y29zLmNvbYIbZHdwcmVwcm8tc3RnLmNvcnAueGVyb3guY29tghtwd20tYXBpLXRl
c3QuY29ycC54ZXJveC5jb22CFCoubGFzZXJyZXNvdXJjZXMuY29tghEqLnpvb21j
b3BpZXJzLmNvbYIKbWJtMzYwLmNvbYIYKi5jYXBpdGFsYnVzaW5lc3NpbmMuY29t
ghNkb2N1bWVudHN5c3RlbXMuY29tghN2aWl0LmNvcnAueGVyb3guY29tghRnaXRs
YWItdGVzdC5wYXJjLmNvbYIQc3Rld2FydHhlcm94LmNvbYINY3R4LXhlcm94LmNv
bYIeKi5ldmVyeXRoaW5nanVzdHJ1bnNiZXR0ZXIuY29tghYqLmNhcm9saW5hb3Nv
bmxpbmUuY29tghIqLmltYWdlcXVlc3Rrcy5jb22CDSoucmtkaXhvbi5jb22CEyou
aW5sYW5kYnVzaW5lc3MudXOCFnN0YWdlLmFwaXYyLmNhcmVhci5hcHCCFWxvZ29u
c3RhZ2UueHJ4Z3NuLmNvbYIJc2F4b24ubmV0gg8qLnRlYW1hbWNvbS5jb22CEiou
Y29ud2F5b2ZmaWNlLmNvbYILKi5zYXhvbi5uZXSCC3d3dy5lc2kubmV0gilkaWdp
dGlzYXRpb25wb3J0YWwtdWF0LnNlcnZpY2VzLnhlcm94LmNvbYIcZXZlcnl0aGlu
Z2p1c3RydW5zYmV0dGVyLmNvbYIbdGVzdDEuZmVsZWN0cm9uaWNhLnhlcm94LmVj
gg4qLmNicy1naXN4LmNvbYIVKi50cmFuc2NvYnVzaW5lc3MuY29tggpjb21kb2Mu
Y29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwHQYDVR0OBBYEFLMecMah9NK0Xsc7EQEYDYTbOokRMFcGA1UdIARQME4wCAYG
Z4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cu
Z2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIwADCBngYIKwYB
BQUHAQEEgZEwgY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24u
Y29tL2NhL2dzYXRsYXNyM2R2dGxzY2EyMDIycTEwSgYIKwYBBQUHMAKGPmh0dHA6
Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2Ey
MDIycTEuY3J0MB8GA1UdIwQYMBaAFJwqZ9C0gzFbgMspllV1CTc4uDylMEgGA1Ud
HwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxh
c3IzZHZ0bHNjYTIwMjJxMS5jcmwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAN/x/vRqy0vM07Rn4hxmKSim4SnF+ombjQevhESGYe8cg0sQ
4WZetJrS3jgF8LcImD0RlA2+r19Fli33X51J+lQeIFoLc/iBEqheZ1vhg0myqfOW
C5AX823+02wnqk79GiGL+yMMng4iJw3Q5rqX6MJr+O+ZU28QSrXUxAHs6zZCKzZx
5zDhrV6RCH0KDRvONj8OXR5Fcd5gpmMjYa0qyAUMCZiZY5uqhd+cHo9gb6NiZTBG
N+TGYvWhOfLh8dMzkNpCvg7Q0ZLh7XSqn7PgzEuKfUdqUX8JH6/LPTCNAemp7w7Z
uBknhjtCSTqwN7Oy2py17jYKYw/CMpLB/lO9VP0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDWgMqFJxPlUYKjncJVV
WPPFqHukd1SrQYsbqOigOdd4xIql7h0O0WHMZhzqHjnGnBau4CwKGngV6CPHUE4s
s9hBp+VgiEX7DyMTK6Pgo7tmQpjn1OjtIUFd8yVwENmMHo3SKgnjQK/n/GDbnmm9
cyoyykhzPV+/AVC4QKQP9ZNDEOrBhhH4OXS+FHQ1kr4LUPGMO4U9zNRTQ3gVcSxp
UT9wO1VW6B9X19zaeTFj0Hg4bENQup9AuCU6ruVik9Ki7WzfFVExKC2V65p7mbiS
8a2I/JLrqGef8MPsKo7U9nSQyRbEojKzq/LX2K7ltzqtuBG9o+JlXQ4MG1ll7pQt
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1722925834654758794583416177367862901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 17:21:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 08:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20729525868455423313464820461999205283724377312262808113938727368706470812809550118546612156382128721843010317113440553396635039460090282501337757502109766673216496297218653649561727374493929145569378356371006483208087713434034248170242610821332120594274576130070052478755199232367215687921107200780395713905502557405805216601241783880868927312570207368174884957688154802640620053374553649057671847568338657564142514462678679504637438727298139730648418752569987813945083986295331204104405116151959017146306010860969007743549082986296833555094573910344011898668000339838244925357525245040143843736785342161004176616791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepciondev-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.comdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbsi-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-xsm-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucassystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-sso-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xics-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefic.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-innovation.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier-iowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberdeenmailservice-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socal-office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.econciergetools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welwyn-dam-stg.gdc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepcion-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeroxhts.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conestogacopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eautoweb.dahill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbsi-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elanoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iot-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppt-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafapps.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s3.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagequestks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinfo.cotg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkdixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucassystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierraoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mos-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conwayoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhsbsa-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitepecas.xerox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webportal.lasernetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssbi-qc.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roa-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premier-iowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdsde-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elanoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aart.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlandbusiness.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custsatsurvey.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbm360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhcpportaluk-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitisationportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternmpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierraoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xdocushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-xogpsg.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealregistration-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tco-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamamcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roa-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.its-xrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-xrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mos-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partner.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrc360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs-gisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmshelpdesk-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-dr.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xecc.support.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gskreprographics-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwm-api-test2.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindred.carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socal-office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conestogacopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomcopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternmpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctx-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwm-api-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoomcopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbm360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viit.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-test.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctx-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everythingjustrunsbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagequestks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkdixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inlandbusiness.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logonstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamamcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conwayoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saxon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitisationportal-uat.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingjustrunsbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.felectronica.xerox.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs-gisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transcobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdoc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b31e70c6a1f4d2b45ec73b1101180d84db3a8911
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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