imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:db:31:b1:b1:e0:bd:00:de:3a:5a:b1:98:b5:7b:53 was issued on by GlobalSign nv-sa.

With 142 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:db:31:b1:b1:e0:bd:00:de:3a:5a:b1:98:b5:7b:53
Serial Number (int): 2467348924309925745440740835224550227
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 64:1f:68:07:55:03:ea:f7:48:c1:b8:22:4e:8b:7f:6e:2d:93:f9:41
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): fc:0d:8f:ee:99:7e:f2:f9:3e:ba:1c:a6:98:d5:e5:bd:af:87:8f:ed
Fingerprint (sha256): 14:81:ec:1b:57:49:7d:c3:3b:33:8b:97:f1:88:30:44:c7:9a:eb:de:8e:01:5f:67:87:43:e0:0b:91:3c:09:ce

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

142

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquanima.com
*.buro.santander.com.mx
santandere-derivatives.es
xn--autobrse-r4a.de
*.privatelease.santander.nl
teamsantander.se
emdia.com.br
*.santanderconsumer.es
santander.no
*.hyundaifinance.de
*.s3caceis.com.co
*.santanderibc.com
*.santander.be
*.santanderlapzero.com
*.santanderconsumerservices.pt
*.suressedirektbank.de
carmine.pt
santanderlapzero.com
*.bancosantander.es
*.eu01.solpheosuite.com
*.wrvc.co.uk
*.carmine.pt
*.universia.net
www.sannetman.com
*.e.santanderopenacademy.com
*.zurichsantanderseguros.cl
*.zurichsantander.cl
*.platform.aquanima.com
santandere-derivatives.com
*.zurich-santander.cl
*.universia.com.br
*.acp.santanderconsumerbank.nl
*.santanderconsumer.dk
*.santanderconsumerbank.be
paycar.es
*.santanderdigitalservices.com
*.dv.euemdia.com.br
*.scb.nu
santanderworkcafe.je
gruposantander.com
santander.com
gira.com.br
f1rst.com.uy
returncapital.com.br
santanderdigitalservices.net
*.santanderopenacademy.com
santanderam.co.uk
imperva.com
*.santander.de
*.tuiio.com.mx
*.santanderdigitalservices.net
*.santanderconsumer.fi
*.easydata.pt
*.emdia.com.br
euemdia.com.br
emdia.vc
*.solution4fleet.services
santanderdigitalservices.com
suressedirectbank.pt
santandersmusic.com
*.dev.returncapital.com.br
*.test.santanderconsumer.com
*.mycampusdigital.com
*.thefloor.io
*.santander.com.uy
*.emdia.vc
*.eu.pre.gruposantander.com
*.santander.com.mx
tuiio.com.mx
*.negocieipanema.com.br
santanderconsumerbank.nl
*.gruposantander.es
santandereurosdetunomina.com
portalcobrancaflex.com.br
santanderconsumerservices.pt
*.creditodelacasa.com.uy
*.santander.com
*.santander.nl
bancosantander.com
*.pre.gruposantander.com
*.santander.no
*.seguros.santander.com.mx
*.stg.santanderconsumer.fi
santandermarcas.com
*.qa.euemdia.com.br
*.santanderconsumerbank.nl
*.api-dev.santanderauto.systems
*.e.santanderx.com
*.easyboss.pt
*.pagonxt.com
*.santandermarcas.com
*.workcafe.im
easymanager.pt
negocieipanema.com.br
*.hyundaicapital.de
*.pp.santanderconsumer.se
*.f1rst.com.uy
*.gsnetcloud.com
*.officebanking.cl
www.hedinautomotive-financieringen.nl
*.paycar.es
santandercibgreeting.com
*.santander-homo.cl
*.bancosantander.com
*.ipanemacapital.com.br
easyboss.pt
*.easymanager.pt
*.soysantander.com.uy
*.suressedirectbank.pt
zurichsantander.cl
*.santanderconsumer.pt
*.portalcobrancaflex.com.br
ipanemacm.com.br
*.officebanking-qa.cl
*.santanderam.co.uk
*.santandere-derivatives.com
ipanemacapital.com.br
*.euemdia.com.br
*.santanderglobaltech.com
*.pp.santanderconsumer.fi
*.santandercibgreeting.com
*.dev.santanderconsumer.fi
*.hedinautomotive-financieringen.nl
*.santandersmusic.com
*.dev.ipanemacm.com.br
*.gruposantander.com
*.gira.com.br
*.santandere-derivatives.es
*.santandereurosdetunomina.com
*.santanderworkcafe.je
*.santandercib.com
*.returncapital.com.br
*.timfin.it
*.xn--autobrse-r4a.de
*.aquanima.com
*.teamsantander.se
*.e.universia.net
*.santander.com.ar
*.dev.negocieipanema.com.br
imperva.seceng.tlzproject.com
*.ipanemacm.com.br
workcafe.im

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFHSlGRpT9GTS70TvFg
oY2vWpQ+UfnmMrh6/AK1hlo2zE9nxfjwEvha7j9RkzinTJ0DB2MdWhCSulPaoMNi
webTkrZxMXx1SEJGYPN1d2ejNKoLUCNpif1Kpe2OXxk1C4NF7ZGI7Wyh8s+2KOwh
MJ/U0GvYOL+yqvm2NyTyNca91cc3p4LSXj0ItcSll6DTMjmJuB4vkX9GwYx9aLCK
ysb0vJ/CIJt/nwtJP5ewe804SoquF59PT9pEhQcqD372RHvdL2pMRayAQuMJ3M92
xOdw5HLPJ/6bmrrHFiqykZInzsPl9l4bSwxPSDAxjztQirvWxvoEl94h9tOadxiG
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2467348924309925745440740835224550227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 22:31:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 22:31:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21847747094069952824804670329597289745303541475789323902967001661678803400115276093452775370988613529978963600532788691375787376496793203226115887018082391422407858496231616597082630306618745579644173773530002172173399590899566279965897109248055323774301405005743246446041259629536379965105471027843081498122838349539898333369928433392927283761917142236276361819706441498782675396197150110874556398158043546612662245801419143659236329929771275910320502927620072477725942228110876914233477409923052564658786311075927827433221800164514053104710982002046898378951018104713993714305635435411235191037989619658901027325569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buro.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelease.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaifinance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3caceis.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderibc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirektbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderlapzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu01.solpheosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrvc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sannetman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantanderseguros.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zurich-santander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acp.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dv.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scb.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderopenacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderdigitalservices.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydata.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solution4fleet.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderdigitalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.santanderconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefloor.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emdia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuiio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanderconsumerservices.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditodelacasa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguros.santander.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumerbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-dev.santanderauto.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.santanderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagonxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandermarcas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workcafe.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundaicapital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f1rst.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsnetcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-homo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancosantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyboss.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soysantander.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suressedirectbank.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurichsantander.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderconsumer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalcobrancaflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebanking-qa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipanemacapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euemdia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderglobaltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercibgreeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedinautomotive-financieringen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandere-derivatives.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandereurosdetunomina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderworkcafe.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandercib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returncapital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timfin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--autobrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquanima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsantander.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e.universia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.negocieipanema.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.seceng.tlzproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipanemacm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcafe.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641f68075503eaf748c1b8224e8b7f6e2d93f941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e32eb60470035714f7f06f613e3312ecf762d63afbd0fc0411feb1a7a21baa3ff0fcd1593875f8e807acd8c9f8d79b8478c886407ee8ebbbf40a76f6a4da09e0ea5d1d69bb0007f1c110544b0761376b3aad497356bb6046ac612cdcfd10124ea4d8c5ac332eb857a675833b86741257fa2c274340a5e97e76c898100006aa0c1434c95a285edcddd5a82d84520e90d8caecdcfc3ab98f67a07891f0e6dd7409a0eabbc4350891f4bef6e03d8df678ccc3ce38e8694994f3ebe2a20a824289b5ec7ba64c08b124a7d4cc0ab4c53438901349755126ba498f5cf38cebad60d4996152796103c0f26fe68c0cd9ddc29b56a36a78df222a6b587426091f49283ca