imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:c9:20:f9:4b:69:2a:60:a7:81:24:f8:cc:3a:45:f2 was issued on by GlobalSign nv-sa.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c9:20:f9:4b:69:2a:60:a7:81:24:f8:cc:3a:45:f2
Serial Number (int): 2373548452608712201522160873183528434
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2b:e8:40:9e:00:4d:2c:68:60:76:69:5f:00:11:86:9d:4a:79:ee:35
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): a6:71:e9:2b:5b:d4:28:47:f8:10:29:01:ba:82:c3:fe:8b:cd:ca:26
Fingerprint (sha256): 1e:22:dd:f2:f5:ea:09:39:35:1e:5e:6e:1d:52:2f:e1:1b:77:42:2a:d0:83:b2:62:02:68:f6:d0:d8:f7:50:97

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.phmidlandsnetwork.org
doctors.phupstatenetwork.org
mainbabies.org
*.ccihealth.org
myhfn.ccihealth.org
era.inviohealthnetwork.org
promisehealthplan.com
inviohealthnetwork.org
prismahealthmidlandsfoundation.org
*.ghs.org
phmidlandsnetwork.org
prismahealthchildrens.org
*.connectpartners.org
*.transformingmedschool.com
pediatrics.prismahealth.org
schealthsciencescenter.org
imperva.com
*.inviohealthnetwork.org
prismahealthupstategiving.org
prismahealth.org
safekidsupstate.org
*.mainbabies.org
www.promisehealthplan.com
transformingmedschool.com
www.prismahealthmidlandsfoundation.org
*.prismahealthupstategiving.org
*.safekidsupstate.org
ccihealth.org
*.phupstatenetwork.org
phupstatenetwork.org
*.schealthsciencescenter.org
*.prismahealth.org
*.prismahealthchildrens.org

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE+9x/SM1CHjM0LHSJ0A
DPhKg+/8+ylsBjJaoyYQ3F4RHtK2T2fyayZ02nIx0x9WMpBGZeEikRMK/DaAPAVJ
qOVA6/tDEoSAIFqS7kFXKN3h9/8zAogLvq9dmVpoy+5T9zINl3wRWukBmwdJspVA
wgs0NbqPfWCKDGgj2TAzTzO6oHakpvB2ZfbdZBjUeFdp57KeCKuN8LAa9NqRRXHv
34sVKgrHzIY3y93/yCekrWjxPEo8VA6Y6cY1r4SVnKDnovbJSVGS8eO4xUjtoZeY
NIAWc4kJIIROP7gsrhsMrQIyPAc5y6Sd/f9UxuriuoXSNEsbJu1adp73PnqHJ/xu
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2373548452608712201522160873183528434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 15:05:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 15:05:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22762216810408078786203980355611218112067047936135702343341057057436490602039375422179062939834254421156828210810287799684626823709852165333412289928948627602795097307612220324687334339758749049015619240977152568890814825637585110277882136010379390045120832362846668890312804238943197269445245999083363534137761586440988792004562549582359536144854177521280414337920691094196631399311664146867026719132964677670268308643920799014232998716348031952906040718264914530432457148877637351005357686875521481621416439384825397443182293278723314234334085195126356371231336207224839920014499989040944441144686385575026201751271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (811 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhfn.ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'era.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phmidlandsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectpartners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatrics.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inviohealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainbabies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promisehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformingmedschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prismahealthmidlandsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthupstategiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safekidsupstate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccihealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phupstatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schealthsciencescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismahealthchildrens.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2be8409e004d2c686076695f0011869d4a79ee35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187b3ccc872000004030048304602210092cd74ef1b8fe3961b987d2c4e6c6bdadf3f4004fd99bc06a5a85b0f60cc200e022100c5173e8f571378bf188e1d790658db116d3ddff157d7642283fc89a71c264e21007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187b3ccc8a00000040300473045022100bd3f1e22c81ffcff64aa76a894839e7b0f8e133f1f42f06fe3bef596370cf0a002204ef09179556e4ccf7a000f1d46d7858f7b650eb6e44a11eec3e8eb45150353a10075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b3ccca9a000004030046304402200e7021d400d68e7a9431e1d05ad926947f3a2565326904af96388a701fc8c3d502201539b6578b70cf3ace130d7240a5b19cebe2998cc41a18ea9a680266a57cd338
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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