imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:83:1f:f7:4f:27:54:72:83:af:14:1a:7f:4b:74:80 was issued on by GlobalSign nv-sa.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:83:1f:f7:4f:27:54:72:83:af:14:1a:7f:4b:74:80
Serial Number (int): 2010067232803695191369271513642136704
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 07:f7:2f:52:b1:35:e8:48:56:cb:cd:d0:87:60:95:d6:de:0f:f6:9d
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 9b:d7:b4:8e:3b:80:ac:fa:8b:92:1f:a9:06:8e:ea:40:46:26:36:5b
Fingerprint (sha256): 23:f4:c3:9a:77:87:37:48:48:9d:ed:39:13:f3:f6:f1:43:47:56:3c:4d:d1:74:12:cc:6a:14:96:4c:ca:25:b6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.connect.bukalapak.com
*.bukalapak.com
*.stg.itemx.id
smartsari.com
bmoney.id
*.bldevs.info
itemku.com
*.itemku.com
*.bukalapak.design
*.glimpsetrack.net
*.preproduction.bukapengadaan.id
lapakgaming.com
bukapengadaan.co.id
*.preproduction.bukalapak.io
*.shoopon.com
itemx.id
*.preproduction.investdiashmore.id
*.smartsari.com
gokil.me
investdiashmore.id
glimpsetrack.net
imperva.com
*.bl.id
*.lapakgaming.com
shoopon.com
*.ashmore.preproduction.invbackoffice.com
testing-conn.dev.core.buka20.com
bukapengadaan.id
*.preproduction.smartsari.com
bl.id
mofabenefit.com
*.ashmore.invbackoffice.com
*.preproduction.bukapengadaan.com
*.gokil.me
*.investdiashmore.id
*.email.bukalapak.com
bukalapak.design
*.bukapengadaan.co.id
*.preproduction.bukapengadaan.co.id
*.connect.preproduction.bukalapak.com
*.mofabenefit.com
*.bmoney.id
*.bukapengadaan.id
*.itemx.id

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiUqHmW3Be0HM5BRem+r
gmLBUMiF8Khsu3ZIEyXa2aiwzaqrfmsNRKXsgiRjMtg/tAJ/zeqJr7TAJwc6L29I
ZA95+Ho0dLf/v2Hr0S2++oRQaAgmgz2oH7Y31grOMm5JtLhNAeIu9/Z2LIOBYGlP
mg9tR0Gb0PHj/Zi4sm93E6CLRABItl3YcXaUvW16UTrS94YC9Z149Fy4Afx9jYjY
JkK7d3Hjr2O8J/OSum4FVlurPzkEUx4DuHs/RN7pPRENxSjnY5GAY8nD3KxEVjRN
NGgtqrxnGQ64NHXJMoGkFsLY5c33WS3i5dpSOFvQdQoIeEmCkZF53XguwEN6xris
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2010067232803695191369271513642136704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 04:15:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 04:15:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16934259376421798510476326285306727629412313846313178151542971323525323167792394268202652513559548718722020847157891650594040642225081779253011557216986290897294341778490957532937551016358548474878816286230606305703047939581800459138753067197661185431784404155810774540768725791080271440695120752394083498735469504142670651298492875443146052208159023430904433047712288564049483829631559626595597062542383290795811192961701488632756979041890116536223024507034990028728391357043917466497207148303485692072459633346669787632522439063571653769952517264657735821718582954840201173442137094933435946553366863230569597676703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (903 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.itemx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmoney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bldevs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukalapak.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glimpsetrack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapakgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukalapak.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoopon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glimpsetrack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapakgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoopon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashmore.preproduction.invbackoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing-conn.dev.core.buka20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.smartsari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mofabenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashmore.invbackoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investdiashmore.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukalapak.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preproduction.bukapengadaan.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.preproduction.bukalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mofabenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmoney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukapengadaan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemx.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07f72f52b135e84856cbcdd0876095d6de0ff69d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187e4f8da52000004030046304402207f2541a1ee7c9ebee9dccd1bc0311af567d4926cb51f56ebbeabab90031f28470220690edd330e7fa0bbb00843bfd982e3daee978b6092319e9793ca574ec62ada370075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e4f8da9800000403004630440220505f2f3af78581858b1f74df82ee37fd67d89e2d7913ec0a397f7861db06336a02201415672607de6469f13b286a061a3b535498db1d82e642ccfc7f563ea8f72dea007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000187e4f8db4e000004030046304402202af7cde274982d7874111748bf4cfb759a120a85b46eada350f8e565bc22d39f022077d807c15256a9614bb191cfcbc69294e51c705494f44262a7342f5272f4f480
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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