imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:dc:c0:fa:14:a0:4a:71:66:ce:01:cd:7f:fd:7b:eb was issued on by GlobalSign nv-sa.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:dc:c0:fa:14:a0:4a:71:66:ce:01:cd:7f:fd:7b:eb
Serial Number (int): 2475447340730587512561227655515306987
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c5:7e:f5:2e:99:c8:9a:db:de:6b:12:8a:9b:39:f9:9d:17:97:69:9a
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 8f:ab:6c:8d:5e:d4:bf:e7:69:bc:37:c7:dd:27:48:ca:b6:44:f8:34
Fingerprint (sha256): 19:fd:4d:a9:1c:ce:f1:0b:7b:1a:32:16:37:e8:ed:46:de:e3:e2:cd:39:9c:6c:c7:b0:3d:ce:81:51:d7:ce:44

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anytimefitness.com
*.anytimefitness.co.th
anytimefitness.qa
*.basecampfitness.com
anytimefitness.be
anytimefitness.hk
*.anytimefitness.be
*.anytimefitness.hk
anytimefitness.jp
memberauth.anytimefitness.com
www.anytimefitness.my
anytimefitness.quebec
www.anytimefitness.it
anytimefitnessasia.com
resourcecenter-stage.sebrands.com
resourcecenter.sebrands.com
anytimefitness.com
sebrands.com
imperva.com
*.waxingthecity.com
anytimefitness.it
anytimefitness.my
*.healthycontributions.com
www.anytimefitness.vn
basecampfitness.com
*.provisionsecurity.com
*.sebrands.com
*.anytimefitness.quebec
*.anytimefitnessasia.com
*.anytimefitness.jp
provisionsecurity.com
*.anytimefitness.qa
healthycontributions.com
anytimefitness.vn

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK0ek4U4ueelNjNL7ucB
y+7qxidRp2TxPR1vKPN7XQZkcfm1ZDS9NCBYvf8IKm9qzSHVWptHtIxVrtTYSrJp
7OTkaot43TCxg16pKAiPv2jFMNGtoo8PqmLolG8nH2HldtlxUzj8zYdPsHIKLmer
k6nvXighfhWLEFNpFWIXjsWYqKf2bieQ0JVfNZAyKhVr9ZUxzmBkP4SCrFkgf4BX
zcko79gAiD4ToQYCcTAB8JCWBeNWIqYIx0XHbVTFbVW59ZU6VEgkG5OWiKhsd1Tx
jFuQ4Cx9FhNsn6ZdiLqqq/tFfcmy0Uh66yDpfcwWFuv85oUTJd1IkIEbRzvloQDC
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2475447340730587512561227655515306987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 19:59:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 19:59:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22303310050865073369735631487320836230902342580654999450905143323683244109796812010452248908638782584898205041660326049462070203067348122803307450909844811160214493242104881672479160211557249736781738917963541893915777043845148721488573893353439161163592670982584626103626963681050148600815438409426112702008437400694827581903681936293239723400864013671060144268914593946332040946010142623806784133094305132271697149537801988822059021053427827276125106752252450949776627907132370178527616579605822108872587299334173147589416997309716357486106256386627513202964847412473465665844478960649781531216735141342439714898599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (759 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basecampfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anytimefitness.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anytimefitness.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitnessasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter-stage.sebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter.sebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waxingthecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthycontributions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anytimefitness.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basecampfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provisionsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitnessasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provisionsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimefitness.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthycontributions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimefitness.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c57ef52e99c89adbde6b128a9b39f99d1797699a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c28a2ea2e4719d50a3de7470791c0d3c1c8c045b1ce0a3b7df81d1d678e7ca1e19404f22fd2b85ba143dde16e0880080771b6128b548ee1ba6d01cedb2f92a87e527961f78b3b64498f06dcba7f24bdcb7fb6a451002cd51c27130bfb4797b24e7752ce34b51a7be7d36edca7621cff73a5dcb4b0828b8a5ae6c125d4e6f3d22bb57eab700f793bde2366440381b277599799f1f5aa578429a850d754707f80f2b7dbdcb99e25e3d3260004b6ec6ffae0da87b12345b849be6f37142035e51138292e6206e5fce86d6ae697a5f4117f8ffe072f0ec36d791fcfdcb2dbca1ca8e47469f6b45cbe761e1c1c23041a8c431875c5d0d55dd7152f01063716122b8a