imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:d5:97:84:ca:0a:6e:49:ac:f9:80:9f:cd:e9:8f:29 was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d5:97:84:ca:0a:6e:49:ac:f9:80:9f:cd:e9:8f:29
Serial Number (int): 2438260391149019504404799244640816937
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 46:93:b9:8d:06:8e:01:51:91:62:33:ef:b7:80:82:1b:5e:93:29:9a
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): b3:5e:b4:5a:df:1b:04:d8:6c:11:14:41:17:5d:c9:af:d5:25:11:fd
Fingerprint (sha256): 31:a8:10:ac:6b:6e:44:5a:9a:19:3e:3a:51:ae:90:c9:d6:53:ee:90:2d:1d:a4:6f:f2:26:e6:d3:7c:4c:01:3d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate imperva.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clienteimbera.com.br
careers.femsa.com
femsa-analistas.com
solkos.com.mx
alpuntovision360.com
*.solisticacolombia.co
imberafoodservice.com
ses.femsa.com
cscmakpsp02.femsa.com
*.femsaventures.com
coleccionfemsa.com
compartefemsa.com
donativos.femsa.com
admindsocial.femsa.com
*.clienteimbera.com.br
*.coleccionfemsa.com
*.solkos.com.mx
informeanual.femsa.com
www.pro-cut.us
*.imberafoodservice.com
opiniondeservicio.femsa.com
imperva.com
solisticacolombia.co
*.alpuntovision360.com
pro-cut.us
*.expressojundiai.com.br
*.femsafoundation.org
femsa.com
sil.femsa.com
laboral.femsa.com
benefitplus.femsa.com
climaorganizacional.femsa.com
cscmakpsd01.femsa.com
*.compartefemsa.com
fiori.efemsa.com
*.femsa.com
*.femsa-analistas.com
*.informeanual.femsa.com
femsafoundation.org
*.solistica.com
*.etr.repare.com.mx
ric2.femsa.com
gestionindicadores.femsa.com
anspacfemsa.femsa.com
femsaventures.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2zm0DShLmUCYr8yXNE
0zi18vjFO5Jp/88uRUQ7FDc60iCSPA3ebexkEwanxUMb7+PCc+hGKLuZaywoupm6
zbZyLy5cATpsobkZpSznqbg2i1OilSzFW5SPgE+/3dXjqOWV48mpV+cspLACqlDv
ec2exoWd/AMuIuLt8MH12lHuqvW8T0Y6obEVqCo0gvaB56eJhXRJROCvwvHQqFEj
XxdB1wGZmEooJLELtT7vdvmMDNODtSSkmqsCzs71XZ/nKIJppElPR/6GrgrLhsC8
ng2oki+oySCxwxaAxOoYUh/2QKBt87iik4VVbziwpFrt2RGx2tajNMm9Z7wjdoTL
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2438260391149019504404799244640816937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-18 21:15:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 21:15:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17009478204842099407301011431172705494428465559615315274097006089833826661310733159729754328265630447589195380007279263856318220412490610150949014735290940452928346736538688111775263403223871980330074586782407510177691301152827698632692345693404886253333213370426361543465635944005029574495854236585714267490123737103495551839348998976107678564490805294171159848961416971209565413407450506191749396276541950603553364018167440947412760132394131999300647659695311804944207531491656644803739261667375011311095336695585785926799765646245708663419458266019419059447916910994584516399696820978459689546390985148927356226399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clienteimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsa-analistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpuntovision360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solisticacolombia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imberafoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscmakpsp02.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsaventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleccionfemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compartefemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donativos.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admindsocial.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clienteimbera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coleccionfemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informeanual.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro-cut.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imberafoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiniondeservicio.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solisticacolombia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpuntovision360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-cut.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressojundiai.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sil.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laboral.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climaorganizacional.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscmakpsd01.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compartefemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiori.efemsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femsa-analistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informeanual.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solistica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etr.repare.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ric2.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionindicadores.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anspacfemsa.femsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femsaventures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4693b98d068e0151916233efb780821b5e93299a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ad113cd19022a5014c113cbf5fcb42d2212305c09c3ce8a1343e651aa006aa4c9223bf3cff97ed121360187e8424a25718588a71b4b13d40aafbf631ea404535d4f41f20f78fcb1f3a0f8e340bb6cfd215aa926073200a8515e646a9023f230fea9b296dcf61e0d5a6dc4c13503b8841e580319bce3eefd2ebb5d8c104e9d7f2cc933d372dda28cec50851b96c11fe76f2ff7adde9b5fbc8af82ad7cbc818b082988309003c7c14f05ff642499bd9e7e1af28cc0e007ca93e63c7f6571f3598459c1eaf2bf0ed6cf9bf9d23f015c4946e395b6f50d1383aab4ade6c64ba888432850829b43a73cb321e8b5dc47bb258f1fd9ba8777fa08d1028943550262809