imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:fd:8e:84:14:d3:e7:7a:56:be:60:87:2b:5f:53:33 was issued on by GlobalSign nv-sa.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:fd:8e:84:14:d3:e7:7a:56:be:60:87:2b:5f:53:33
Serial Number (int): 2645769667721274350791232966526718771
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 22:16:aa:12:a2:d2:67:81:06:d9:f6:7d:d0:d4:59:62:6e:a6:7a:53
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 27:49:95:df:85:40:30:8c:0e:cc:5d:1f:6a:88:61:11:75:f3:25:39
Fingerprint (sha256): 0f:4a:6b:b9:40:70:d4:d7:9f:3b:3e:20:12:b6:d4:21:23:08:32:71:75:d5:95:7e:0e:ad:cf:cc:8b:1a:4b:9f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloudvector.com
sonargdocs.jsonar.com
support.jsonar.com
wafmx.impervademo.com
apps.imperva.com
manager.prevoty.com
*.distilconnector.com
incapstage.com
www.rpa-imp.com
compass.apps.imperva.com
support.prevoty.com
opencart.impervademo.com
www.cloudvector.com
www.imperva.cn
info.distilnetworks.com
www-il.imperva.de
www-us.imperva.cn
*.impervademo.com
imperva.com
rpa-imp.com
www.distilnetworks.com
dammx.impervademo.com
*.imperva.com
imperva-incapsula.cn
help.distilnetworks.com
discover.jsonar.com
wwsonar.impervademo.com
*.incapstage.com
resources.distilnetworks.com
api.impervademo.com
www.imperva-incapsula.cn
www-us.imperva.de
dra.impervademo.com
*.secure.imperva.com
iec.impervademo.com
*.impervacloud.com
*.jsonar.imperva.com
*.cn.imperva.com
*.impervafps.com
discovery.distilnetworks.com
www.imperva.jp
www-il.imperva.cn
www.imperva.de

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtluBahfy9PxZeRGd9cQK
2X5ML88WD/SnxrcarWmzYujIiJDVV9t1hcdiMFDm9SxUJQAE/ViHORZTVs6VM/kx
XPyqHog1TYNX87r2ZcQ3rH5zODTpBjuvEq9kvON9xZT3v4g7kRmSPYOo/bx5TWqb
PAAuQEE2DNZYfXcBJfNCPacNFFfP1qOIPJhx+IcUJKkQAm/CCZ0R5vqPKDeepPQM
8OF/HZmkhwVC/66wvE1vs4Mup/C1YMEtNXSlJsZosRRN9QMIZQKERm0sjLOuGZ/N
A6JMN3Cp8pEerkYN0yibrkM8UtDyBPrb5dGQ1PjfhYECXfwFc3TBMyPQbrikWMRD
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2645769667721274350791232966526718771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 11:17:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 11:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23020494560013309213352616955621022620624032138205923358922635631042585478460490426726154197481483374167807757640392182476926866497452178846441833439331193474885299347872969828897558943813779237206430831746438421088384651197118916026709941814869555951570311295725278582550678646287111902696398291354519551135413810404432077202562193611396727240920249599240716185019412270422144356160272219460811583726495515657575559969256616185977758809662584574984562952862200520277029700864313145634370943118422032112328138536769766342506336017703882723121113087778964045393635564165643771056960118677283768749327099160480331350843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (892 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonargdocs.jsonar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.jsonar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wafmx.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager.prevoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.distilconnector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rpa-imp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.apps.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.prevoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencart.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudvector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.distilnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-il.imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-us.imperva.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpa-imp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distilnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dammx.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva-incapsula.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.distilnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.jsonar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwsonar.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incapstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.distilnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva-incapsula.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-us.imperva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dra.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iec.impervademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impervacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsonar.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impervafps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.distilnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-il.imperva.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imperva.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2216aa12a2d2678106d9f67dd0d459626ea67a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1c4a4b1500000403004630440220724c1b1e013184a0073da7d71f748d9e3d62f352127e2b556db88af017b1c269022030ff467a47a9312ab6a06b934b0b527763cac06f3171770ca3eb959ea92e7807007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d1c4a4d0a0000040300473045022100895b2872e4d461fbf907a489ced530f266d5b9202a04eb82ad32d28c02cb758c02201ffa9c1e11894513143f76951cd4ee44ec16f0ae592e44f0138fc236c7d9a75b00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1c4a4f0b000004030046304402204133a51efa53c72b78675a9c72798271508e2800c48fac6d5939140202201559022017dd9d4b673e9febff85efd7240b5116396590ec7d03b6636884cd91280540a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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