imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q2

About this certificate

This digital certificate with serial number 01:c1:43:96:68:2e:a9:24:dd:f9:67:12:af:34:71:3d was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c1:43:96:68:2e:a9:24:dd:f9:67:12:af:34:71:3d
Serial Number (int): 2332712127392809775914716943776772413
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:66:4a:cb:70:24:10:f0:a8:4b:53:a2:43:2f:1e:7c:9b:80:63:a6
AuthorityKeyId: 62:aa:74:a1:57:a0:ed:e2:c4:e4:48:98:14:e3:d3:dc:ae:79:51:25

Fingerprint (sha1): bf:7f:c9:e1:be:19:bc:d6:ab:5b:26:e9:8c:e5:43:e8:25:37:63:84
Fingerprint (sha256): 1a:7b:f2:ee:02:00:56:e6:a4:05:a5:27:35:16:13:b3:14:5b:ec:67:f1:85:0e:97:7b:42:45:ff:01:87:c4:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl

Check the revocation status for certificate imperva.com

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitatranslationinterpreting.com
*.capita-mits.co.uk
*.entrust-ed.co.uk
*.redstartwales.com
mishare.co.uk
*.southoxon.gov.uk
*.capitatranslationinterpreting.com
redstartwales.com
*.vwpension.co.uk
*.trade.co.uk
*.capitatranslationinterpreting.fr
*.one247.co.uk
*.capitaonboard.com
*.csl-inn.co.uk
redsms.co.uk
capitatranslationinterpreting.it
*.mythreadneedlepensions.co.uk
capitaintelligentcommunications.co.uk
*.easthants.gov.uk
*.de.capita-europe.com
*.charnwood.gov.uk
*.staygassafe.co.uk
vwpension.co.uk
my-capita-europe.com
*.financialassessments.co.uk
*.bexley.gov.uk
capitaservicemanager.co.uk
*.voicegroup.co.uk
*.hartlinkonline.ie
eapf.org.uk
hartlinkonline.ie
*.capita-europe.com
*.inthost.net
capitapipjobs.co.uk
*.whitehorsedc.gov.uk
*.pcse.england.nhs.uk
staygassafe.co.uk
*.capita-im.co.uk
royalmailsps.co.uk
caterpillarpensions.co.uk
*.capitacm.co.uk
imperva.com
*.glhims.com
*.updata.net
*.capitaservicemanager.co.uk
myattpension.co.uk
*.wmsl.co.uk
*.capitawfm.co.uk
*.capitatranslationinterpreting.it
*.redsms.co.uk
*.capitalinguistportal.com
*.traineradvisor.com
*.capita-pip.co.uk
ycbps.co.uk
*.ventura-crm.co.uk
*.pensionscams.co.uk
gassaferegister.co.uk
*.gassaferegister.co.uk
*.uat.pcse.england.nhs.uk
t-mobilepension.co.uk
*.myattpension.co.uk
*.eapf.org.uk
*.hart.gov.uk
*.tascor.co.uk
eepension.co.uk
capitalinguistportal.com
capitatranslationinterpreting.de
*.squidgeit.com
*.mi-share.co.uk
*.harrow.gov.uk
pensionscams.co.uk
*.optilead.co.uk
capitatranslationinterpreting.es
smartmate.co
*.t-mobilepension.co.uk
*.ycbps.co.uk
*.capita-ti.com
capita-pip.co.uk
*.caterpillarpensions.co.uk
capitatranslationinterpreting.us
*.barnet.gov.uk
*.royalmailsps.co.uk
*.retaincloud.com
*.capita-ic.co.uk
*.capitapipjobs.co.uk
capitatranslationinterpreting.fr
*.eepension.co.uk
entrust-ed.co.uk
*.lambeth.gov.uk
*.capitatranslationinterpreting.de
*.chks.co.uk
mythreadneedlepensions.co.uk
*.smartmate.co
barnet.gov.uk
glhims.com
tascor.co.uk
*.capitatranslationinterpreting.us
*.capitahartshead.co.uk
*.mishare.co.uk
*.credit.trade.co.uk
*.my-capita-europe.com
*.securitywatchdog.org.uk
*.havant.gov.uk
traineradvisor.com
*.tflpp.co.uk
voicegroup.co.uk
*.capitaproperty.co.uk
capita-europe.com
*.mendip.gov.uk
*.capitatranslationinterpreting.es
*.scottishwan.com
*.capita-software.co.uk
optilead.co.uk
*.capitaintelligentcommunications.co.uk
mi-share.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdVv76KPr27C5kJMdVv
WOGJkeTumG/+peSv29bKRUztftVNKKLPnz9XSl3d0UHAoIrzoJEXkbyHwkz97LQs
DF2NnevCrjgikj/cG29Ckdm3fM7AO1qOGqQ2dA15fYGr/syM91Ji9JzoOO4idUzi
tj7MQraLtet6bn1Fv/jxTmOuThqVU+Z6FN0+B/MTd/J+ZD2/KgcfbbqYf/4peVuq
aK0nTGfXwUbdBsWfiBDnGjHEMtt9Ee6nOC1csp7secKdRuO4c2eQao+p+MKaqiiH
HqPkcdzUHo9AN1eZQbOiR2B4O8OBOcTf8ScZjXOQ7aJU07PotSuoxyi9yiDBStTQ
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2332712127392809775914716943776772413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-15 16:07:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 07:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19294407979747692107814480175211470949549430727584330910960674474049228062681274098046147130481952781739394765204226075183535169565207957886327449785037139555843834662989195055627979439246164233009054293256571260557937493974626192399411430635248877898715389191407821212562128585469092378842206772805055633318057282365336745534256778457526565846993102201341407852208160931687812573188100158145964041516852344921998436418400567656941917104943213197295644663136022714107824135217571130969443466405998322385137730540211492055450311051472788648460993642281901646416827193668087766016567106782723239924780013793578281390237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-mits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southoxon.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaonboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csl-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easthants.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charnwood.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialassessments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bexley.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inthost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehorsedc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-im.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmsl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitawfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-crm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hart.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squidgeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi-share.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrow.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaincloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambeth.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitahartshead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitywatchdog.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havant.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tflpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mendip.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottishwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-share.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec664acb702410f0a84b53a2432f1e7c9b8063a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62aa74a157a0ede2c4e4489814e3d3dcae795125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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