imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:34:e2:45:0d:99:5a:7c:ed:89:9f:87:ab:ac:bc:e9 was issued on by GlobalSign nv-sa.

With 142 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:34:e2:45:0d:99:5a:7c:ed:89:9f:87:ab:ac:bc:e9
Serial Number (int): 1603816727951063766917133731776740585
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 64:1f:68:07:55:03:ea:f7:48:c1:b8:22:4e:8b:7f:6e:2d:93:f9:41
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): e2:ad:1a:b8:74:51:88:34:e6:9f:42:18:9e:68:98:9e:1e:61:a2:9e
Fingerprint (sha256): 0f:10:67:f2:e7:0a:30:17:c6:3b:b7:61:16:f6:bd:f9:50:3f:d1:85:f9:01:fa:c3:00:48:21:2e:8f:05:63:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

142

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquanima.com
*.buro.santander.com.mx
santandere-derivatives.es
xn--autobrse-r4a.de
*.privatelease.santander.nl
teamsantander.se
emdia.com.br
*.santanderconsumer.es
santander.no
*.hyundaifinance.de
*.s3caceis.com.co
*.santanderibc.com
*.santander.be
*.santanderlapzero.com
*.santanderconsumerservices.pt
*.suressedirektbank.de
carmine.pt
santanderlapzero.com
*.bancosantander.es
*.eu01.solpheosuite.com
*.wrvc.co.uk
*.carmine.pt
*.universia.net
www.sannetman.com
*.e.santanderopenacademy.com
*.zurichsantanderseguros.cl
*.zurichsantander.cl
*.platform.aquanima.com
santandere-derivatives.com
*.universia.com.br
*.acp.santanderconsumerbank.nl
*.santanderconsumer.dk
*.santanderconsumerbank.be
paycar.es
santanderopenacademy.com
*.santanderdigitalservices.com
*.solution4fleet.com.br
*.dv.euemdia.com.br
*.scb.nu
santanderworkcafe.je
gruposantander.com
santander.com
gira.com.br
f1rst.com.uy
returncapital.com.br
santanderdigitalservices.net
*.santanderopenacademy.com
imperva.com
*.santander.de
*.tuiio.com.mx
*.santanderdigitalservices.net
*.santanderconsumer.fi
*.easydata.pt
*.emdia.com.br
euemdia.com.br
emdia.vc
*.solution4fleet.services
santanderdigitalservices.com
suressedirectbank.pt
santandersmusic.com
*.dev.returncapital.com.br
*.test.santanderconsumer.com
*.mycampusdigital.com
*.santander.com.uy
*.emdia.vc
*.eu.pre.gruposantander.com
*.santander.com.mx
tuiio.com.mx
*.negocieipanema.com.br
santanderconsumerbank.nl
*.gruposantander.es
santandereurosdetunomina.com
portalcobrancaflex.com.br
santanderconsumerservices.pt
*.creditodelacasa.com.uy
*.santander.com
*.santander.nl
bancosantander.com
*.pre.gruposantander.com
*.santander.no
*.seguros.santander.com.mx
*.stg.santanderconsumer.fi
santandermarcas.com
*.qa.euemdia.com.br
*.santanderconsumerbank.nl
*.api-dev.santanderauto.systems
*.e.santanderx.com
*.easyboss.pt
*.pagonxt.com
*.santandermarcas.com
*.workcafe.im
easymanager.pt
negocieipanema.com.br
*.hyundaicapital.de
*.pp.santanderconsumer.se
*.f1rst.com.uy
*.gsnetcloud.com
*.officebanking.cl
www.hedinautomotive-financieringen.nl
*.paycar.es
santandercibgreeting.com
*.santander-homo.cl
*.bancosantander.com
*.ipanemacapital.com.br
*.workcafe.je
easyboss.pt
*.easymanager.pt
*.soysantander.com.uy
*.suressedirectbank.pt
zurichsantander.cl
*.santanderconsumer.pt
*.portalcobrancaflex.com.br
ipanemacm.com.br
*.officebanking-qa.cl
*.santandere-derivatives.com
ipanemacapital.com.br
*.euemdia.com.br
*.santanderglobaltech.com
*.santanderconsumer.co
*.pp.santanderconsumer.fi
*.santandercibgreeting.com
*.dev.santanderconsumer.fi
*.hedinautomotive-financieringen.nl
*.santandersmusic.com
*.dev.ipanemacm.com.br
*.gruposantander.com
*.gira.com.br
*.santandere-derivatives.es
*.santandereurosdetunomina.com
workcafe.je
*.santanderworkcafe.je
*.santandercib.com
*.returncapital.com.br
*.timfin.it
*.xn--autobrse-r4a.de
*.aquanima.com
*.teamsantander.se
*.e.universia.net
*.dev.negocieipanema.com.br
imperva.seceng.tlzproject.com
*.ipanemacm.com.br
workcafe.im

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFHSlGRpT9GTS70TvFg
oY2vWpQ+UfnmMrh6/AK1hlo2zE9nxfjwEvha7j9RkzinTJ0DB2MdWhCSulPaoMNi
webTkrZxMXx1SEJGYPN1d2ejNKoLUCNpif1Kpe2OXxk1C4NF7ZGI7Wyh8s+2KOwh
MJ/U0GvYOL+yqvm2NyTyNca91cc3p4LSXj0ItcSll6DTMjmJuB4vkX9GwYx9aLCK
ysb0vJ/CIJt/nwtJP5ewe804SoquF59PT9pEhQcqD372RHvdL2pMRayAQuMJ3M92
xOdw5HLPJ/6bmrrHFiqykZInzsPl9l4bSwxPSDAxjztQirvWxvoEl94h9tOadxiG
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1603816727951063766917133731776740585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 13:49:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 13:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21847747094069952824804670329597289745303541475789323902967001661678803400115276093452775370988613529978963600532788691375787376496793203226115887018082391422407858496231616597082630306618745579644173773530002172173399590899566279965897109248055323774301405005743246446041259629536379965105471027843081498122838349539898333369928433392927283761917142236276361819706441498782675396197150110874556398158043546612662245801419143659236329929771275910320502927620072477725942228110876914233477409923052564658786311075927827433221800164514053104710982002046898378951018104713993714305635435411235191037989619658901027325569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buro.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelease.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaifinance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3caceis.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderibc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirektbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.solpheosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrvc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sannetman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantanderseguros.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acp.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solution4fleet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scb.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydata.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solution4fleet.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.santanderconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditodelacasa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.santanderauto.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagonxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workcafe.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaicapital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsnetcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-homo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soysantander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking-qa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderglobaltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timfin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.seceng.tlzproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcafe.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641f68075503eaf748c1b8224e8b7f6e2d93f941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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