imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:d5:62:a6:78:97:18:fb:6e:19:56:14:7d:d8:30:04 was issued on by GlobalSign nv-sa.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:d5:62:a6:78:97:18:fb:6e:19:56:14:7d:d8:30:04
Serial Number (int): 2437188091989836341547425626863448068
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 74:e8:fa:6a:0e:0c:33:e2:87:97:68:93:3e:d0:f1:7f:ad:30:49:c4
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 5c:75:10:e5:5e:cc:dd:29:21:83:3d:60:8a:c2:c7:ca:7e:6c:a1:44
Fingerprint (sha256): 12:13:87:12:8b:41:0d:19:66:2b:d9:77:c9:a9:a8:4c:a4:26:36:d0:4f:90:11:f2:5e:85:f6:d6:ce:0c:47:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.phmidlandsnetwork.org
doctors.phupstatenetwork.org
mainbabies.org
*.ccihealth.org
myhfn.ccihealth.org
era.inviohealthnetwork.org
promisehealthplan.com
inviohealthnetwork.org
prismahealthmidlandsfoundation.org
*.ghs.org
phmidlandsnetwork.org
mft-web.prismahealth.org
prismahealthchildrens.org
*.connectpartners.org
*.transformingmedschool.com
pediatrics.prismahealth.org
schealthsciencescenter.org
imperva.com
*.inviohealthnetwork.org
prismahealthupstategiving.org
prismahealth.org
safekidsupstate.org
*.mainbabies.org
www.promisehealthplan.com
transformingmedschool.com
www.prismahealthmidlandsfoundation.org
*.prismahealthupstategiving.org
*.safekidsupstate.org
*.phupstatenetwork.org
phupstatenetwork.org
*.schealthsciencescenter.org
*.prismahealth.org
studyfinder-tst.prismahealth.org
*.prismahealthchildrens.org
redcap.prismahealth.org
mft-web.inviohealthnetwork.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTpJX0ljHOXLzUYRBBi5
Vc0umrcYOE3ZdZ+r21gKHkjfF0OKUoZiaon0KIxc1b9WP1JBFz5kLgIDztuR2cTN
Injk3Fd94/j41jB33Jfda52JYFdfNLVOeZGGI+kEtBh7XvYYUN0RF3TJhUSiL3pc
iK/9hvf4stmoGTr+I7oUR6q4iTyKbMZ78UgKPCaBzwuX11gQr0Zr7u/PigbuuSq2
2Ls8+OG1WP6/OGz+Wlf9RaCqxDF/jBW+nlWO9fpCm+TGbxvoLP0Lajcu6twCo7Wd
nsM4tmj1jCWq8RFYrBPAhkpHPLofXEjuVBL0I5AySbqmfzPojAbBCFU4Zuuy20Be
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2437188091989836341547425626863448068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 21:17:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 21:17:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25907594716772579329630851085327306941703112802681034507141101530339908090995824265195575149819099865585687227107695354337182497737041165702832955830666900593875863776818726142218063385459459035014934264804565200040523543571470178833262246132163387479900286997495086348459158972413899988171958657097495314231209191680793989359156759199247559197257991049118015044033525660202914784156370636858345756299815803930958451487064248695205875370759780745968887452059872657321446416131845446687410237450685994730639049345256294967306857635135626012855034056463033487420039820924298130055698422991173933407192494473202783772397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhfn.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'era.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mft-web.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectpartners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatrics.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyfinder-tst.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcap.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mft-web.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74e8fa6a0e0c33e2879768933ed0f17fad3049c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018de7480b670000040300473045022047a5bbb0d65ea206efb2a11e1846c1d3a2b2abf80d1b3c61ccd8396456ed94e70221008aa29aa45338db2444bf7fd0ad5c729fc7a34e16516176aa51bd6bcc16742b46007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018de7480ba70000040300473045022014d6b15507ce8ca6dd96f4077c1cc88fc7f1cddb390dcb53f5d9f06b03ba96b1022100fcf4e9aab2de1ebcf760a3ae2f22e43e425618163c8b0eb622b094ff7822d62400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de7480ce10000040300463044022066efaa610fbd0de0795e854ee3e8da29744ba537b5b2d080aee1b75f6dce24e602203e4e95064058be352ed2db94ce7ea65d37b5f1ea49819ccc7d2e94c13992cebf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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