imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:75:ae:a8:ca:2c:cc:76:27:d5:cf:47:10:c1:0b:03 was issued on by GlobalSign nv-sa.

With 144 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:75:ae:a8:ca:2c:cc:76:27:d5:cf:47:10:c1:0b:03
Serial Number (int): 1940269240405958754827839580999322371
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:1e:70:c6:a1:f4:d2:b4:5e:c7:3b:11:01:18:0d:84:db:3a:89:11
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): de:dc:a7:59:60:56:c0:ca:77:d5:6d:0d:b8:9d:bf:f1:3f:0e:96:57
Fingerprint (sha256): 17:94:d7:09:0e:de:22:23:56:4e:cf:0d:52:66:48:ac:35:56:3c:3e:9a:bf:7d:c7:d5:d9:50:98:60:d1:06:2a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate imperva.com

144

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recepciondev-proveedores.xerox.com
my.comdoc.com
*.qbsi-xerox.com
moj-xsm-stg.services.xerox.com
lucassystems.com
capitalbusinessinc.com
dev.carear.app
carrxerox.com
stage.carear.app
*.heritagebusiness.com
xics-stg.corp.xerox.com
moj-sso-stg.corp.xerox.com
www.docushare-innovation.xerox.com
*.thefic.xerox.com
premier-iowa.com
socal-office.com
test.econciergetools.com
aberdeenmailservice-stg.corp.xerox.com
welwyn-dam-stg.gdc.xerox.com
recepcion-proveedores.xerox.com
xeroxhts.external.xerox.com
conestogacopiers.com
eautoweb.dahill.com
qbsi-xerox.com
*.elanoffice.com
*.iot-xerox.com
ppt-test.corp.xerox.com
nafapps.corp.xerox.com
zenosolutions.com
www.s3.external.xerox.com
dev.apiv2.carear.app
imagequestks.com
myinfo.cotg.com
rkdixon.com
*.lucassystems.com
sierraoffice.com
gitlab-epn.parc.com
*.mos-xerox.com
conwayoffice.com
nhsbsa-portal-stg.corp.xerox.com
www.sitepecas.xerox.com.br
*.stewartxerox.com
webportal.lasernetworks.com
ssbi-qc.corp.xerox.com
beu.net
ppm-test.corp.xerox.com
*.roa-usa.com
heritagebusiness.com
*.premier-iowa.com
xdsde-stg.services.xerox.com
elanoffice.com
carolinaosonline.com
moj-portal-stg.corp.xerox.com
aart.corp.xerox.com
boeweb.com
inlandbusiness.us
transcobusiness.com
esi.net
www.custsatsurvey.xerox.com
imperva.com
*.mbm360.com
dhcpportaluk-stg.services.xerox.com
printportal-stg.services.xerox.com
digitisationportal-stg.services.xerox.com
gsnstage.xrxgsn.com
easternmpn.com
*.sierraoffice.com
*.gfive.net
laserresources.com
beta.apiv2.carear.app
www.xdocushare.xerox.com
people.parc.com
gcm-test.corp.xerox.com
ba-portal-stg.corp.xerox.com
*.documentsystems.com
gfive.net
www.docushare-xogpsg.xerox.com
*.comdoc.com
partner.xerox.com
dealregistration-test.corp.xerox.com
tco-test.corp.xerox.com
gotocos.com
teamamcom.com
cmswebshop-stg.corp.xerox.com
www.zenosolutions.com
roa-usa.com
pg-portal-stg.corp.xerox.com
*.its-xrx.com
its-xrx.com
mos-xerox.com
*.mrc360.com
cbs-gisx.com
mtbt.com
*.mtbt.com
apiv2.carear.app
mrc360.com
ppmm-test.corp.xerox.com
cmshelpdesk-stg.corp.xerox.com
dwprepro-dr.corp.xerox.com
iot-xerox.com
www.xecc.support.xerox.com
gskreprographics-portal-stg.corp.xerox.com
pwm-api-test2.corp.xerox.com
cmswebshop-stg.external.xerox.com
*.boeweb.com
kindred.carolinaosonline.com
*.socal-office.com
*.conestogacopiers.com
zoomcopiers.com
*.docushare.xerox.com
*.beu.net
*.easternmpn.com
*.carrxerox.com
*.gotocos.com
*.ctx-xerox.com
dwprepro-stg.corp.xerox.com
pwm-api-test.corp.xerox.com
*.laserresources.com
*.zoomcopiers.com
mbm360.com
*.capitalbusinessinc.com
documentsystems.com
viit.corp.xerox.com
gitlab-test.parc.com
stewartxerox.com
ctx-xerox.com
*.everythingjustrunsbetter.com
*.imagequestks.com
*.rkdixon.com
*.carolinaosonline.com
stage.apiv2.carear.app
*.inlandbusiness.us
saxon.net
logonstage.xrxgsn.com
*.teamamcom.com
*.conwayoffice.com
*.saxon.net
www.esi.net
digitisationportal-uat.services.xerox.com
everythingjustrunsbetter.com
test1.felectronica.xerox.ec
*.cbs-gisx.com
*.transcobusiness.com
comdoc.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDWgMqFJxPlUYKjncJVV
WPPFqHukd1SrQYsbqOigOdd4xIql7h0O0WHMZhzqHjnGnBau4CwKGngV6CPHUE4s
s9hBp+VgiEX7DyMTK6Pgo7tmQpjn1OjtIUFd8yVwENmMHo3SKgnjQK/n/GDbnmm9
cyoyykhzPV+/AVC4QKQP9ZNDEOrBhhH4OXS+FHQ1kr4LUPGMO4U9zNRTQ3gVcSxp
UT9wO1VW6B9X19zaeTFj0Hg4bENQup9AuCU6ruVik9Ki7WzfFVExKC2V65p7mbiS
8a2I/JLrqGef8MPsKo7U9nSQyRbEojKzq/LX2K7ltzqtuBG9o+JlXQ4MG1ll7pQt
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1940269240405958754827839580999322371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 13:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 04:30:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20729525868455423313464820461999205283724377312262808113938727368706470812809550118546612156382128721843010317113440553396635039460090282501337757502109766673216496297218653649561727374493929145569378356371006483208087713434034248170242610821332120594274576130070052478755199232367215687921107200780395713905502557405805216601241783880868927312570207368174884957688154802640620053374553649057671847568338657564142514462678679504637438727298139730648418752569987813945083986295331204104405116151959017146306010860969007743549082986296833555094573910344011898668000339838244925357525245040143843736785342161004176616791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepciondev-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.comdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbsi-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-xsm-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucassystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xics-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-sso-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-innovation.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefic.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier-iowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socal-office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.econciergetools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberdeenmailservice-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welwyn-dam-stg.gdc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepcion-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeroxhts.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conestogacopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eautoweb.dahill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbsi-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elanoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iot-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppt-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafapps.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s3.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagequestks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinfo.cotg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkdixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucassystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierraoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mos-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conwayoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhsbsa-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitepecas.xerox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webportal.lasernetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssbi-qc.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roa-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premier-iowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdsde-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elanoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aart.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlandbusiness.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custsatsurvey.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbm360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhcpportaluk-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitisationportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternmpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierraoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xdocushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-xogpsg.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealregistration-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tco-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamamcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenosolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roa-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.its-xrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-xrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mos-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrc360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs-gisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmshelpdesk-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-dr.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xecc.support.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gskreprographics-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwm-api-test2.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindred.carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socal-office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conestogacopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomcopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternmpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctx-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwm-api-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoomcopiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbm360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalbusinessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viit.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-test.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartxerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctx-xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everythingjustrunsbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagequestks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkdixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolinaosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inlandbusiness.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logonstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamamcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conwayoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saxon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitisationportal-uat.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingjustrunsbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.felectronica.xerox.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs-gisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transcobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdoc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b31e70c6a1f4d2b45ec73b1101180d84db3a8911
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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