imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:96:0d:95:5a:2a:0f:d6:f1:7f:66:6b:f3:6f:f4:82 was issued on by GlobalSign nv-sa.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:96:0d:95:5a:2a:0f:d6:f1:7f:66:6b:f3:6f:f4:82
Serial Number (int): 2108348028790702683132279790083503234
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ad:dd:46:d9:13:e3:98:df:15:05:de:42:e5:2b:a3:e3:b1:9e:77:9b
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 48:3a:65:a0:6d:b4:8a:cd:fa:16:e9:fb:75:79:2c:e7:14:7a:0c:f3
Fingerprint (sha256): 0f:cf:10:b5:d2:59:bb:d2:fd:69:e2:cb:23:e1:3d:b6:a8:b4:7f:3b:20:3a:9d:47:d3:57:99:20:f0:40:44:44

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.caserresidencial.com
*.residenciallevant.com
test.hospitalesparque.es
*.caserasesoresfinancieros.es
acierta.es
caserasesoresfinancieros.es
caser.es
*.acierta.es
*.aciertaasistencia.es
www.hospitalesparque.es
*.caserexpatinsurance.com
hospitalesparque.es
caserexpatriates.com
www.asociacionadama.es
caserresidencial.com
sanostravida.es
www.caserasesoresfinancieros.es
clientes.aciertaasistencia.es
wscitaonlinetest.hospitalesparque.es
imperva.com
lazosdigital.es
aciertaasistencia.es
aciertarenting.es
caseresidencial.com
*.becser.com
cdn.sanostravida.es
www.aciertaasistencia.es
pruebaclientes.sanostravida.es
casermultimedia.es
*.caserexpatriates.com
wscitasonlinesferetest.hospitalesparque.es
www.sanostravida.es
residenciallevant.com
*.aciertarenting.es
asociacionadama.es
*.caser.es
test.caserasesoresfinancieros.es
www.lazosdigital.es
*.becierdocuments.com
www.casermultimedia.es
*.caseresidencial.com
*.hospitalesparque.es

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhKDnNq0oqb8gfMKpp+5
P32621YfqetKAA0QQzJkd0W3Pcd7lUDdB0enS5XYfhIDNrickIP8S1XUgnkxsdmm
J4TyOSHv2m5WmhqhfMl35/F8UIuDOCVO/blewVx2eSRGoeegfToRyxloNUVMOhrp
c3+uy9/ec4rgpJHoswwuEQKVAs/qHjzZDAjC0flVCHY3Q7XFXVJ1om7WhCFpWB2e
gEVcb/YOJ+eMPC9u+7PcoX3azS3NetYRUw07e7aM43oOEPuSkbm6eyepubaRfNS8
ZhlvUa3B5/yJLhmwZ+fR9Hv3nJC33En2sSkkLwPipE2/wm6xpR+natV4dJ9mqSj2
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2108348028790702683132279790083503234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 12:06:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 12:06:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18944875393880069138382862163562467378215782630913931808960678030239856449792265387629658081459408585620603839823091829253683830887779595956125058678917790501039361123154633790392284487180479073010428273949029127188171394434562789012098713303837739010624718742461524765910946307117442018138059945068575586275237320540018585883534586178014273492109527136349002242263688827199305190598375978772678537439818799537282957073219128992070596008418551929451806171290233629516309374286262107270959590722156416629862539879279206102266144911167787999634566904953072252504278176738789700051740322623345069179412189135120322066049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (977 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caserresidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.residenciallevant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hospitalesparque.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caserasesoresfinancieros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acierta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caserasesoresfinancieros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caser.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acierta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aciertaasistencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitalesparque.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caserexpatinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalesparque.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caserexpatriates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asociacionadama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caserresidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanostravida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caserasesoresfinancieros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.aciertaasistencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscitaonlinetest.hospitalesparque.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazosdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aciertaasistencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aciertarenting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseresidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sanostravida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aciertaasistencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pruebaclientes.sanostravida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casermultimedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caserexpatriates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscitasonlinesferetest.hospitalesparque.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanostravida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residenciallevant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aciertarenting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asociacionadama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caser.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.caserasesoresfinancieros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazosdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becierdocuments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casermultimedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caseresidencial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospitalesparque.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							addd46d913e398df1505de42e52ba3e3b19e779b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc142deb20000040300483046022100b9771a7a0a764b418aa8d95ca06186e1576caf904092242a7acea7d2373cbde4022100bdf7733eda555a41c82b9b02b65f4071c2debb83f62f2425d799aebfda79b26800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc142defb0000040300463044022051a0294089edfe19d3f307fe9a90e491b787404719ce202d1a185e9ff246e32802203f32d2c6ae553ba3bff406186a502866ecd119c8a0944539d1feab36e4825085
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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