imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:8b:4d:a4:e0:59:0a:ea:1a:a1:2d:ad:a7:ff:d9:2d was issued on by GlobalSign nv-sa.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8b:4d:a4:e0:59:0a:ea:1a:a1:2d:ad:a7:ff:d9:2d
Serial Number (int): 2052532067511678571292359805093533997
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f3:02:94:ec:b5:25:d5:12:3b:29:c5:ab:dc:96:00:0a:a7:81:de:a5
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 21:6d:fd:b5:a5:bf:91:a4:c0:0e:b2:6b:43:81:a9:89:5e:8c:5b:05
Fingerprint (sha256): 33:58:94:35:58:af:dd:68:7f:e4:00:98:f8:eb:41:d0:fd:4a:9f:12:c0:a1:43:22:d3:f5:25:3d:be:d7:e8:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kmartcreate.com.au
costcentreapprovaluat.hamilton.kaccess.com.au
api.nonprod.kmart.com.au
*.hamilton.kaccess.com.au
*.kaccess.com.au
portal-nonprod.supplier.kmart.com.au
costing-dev.kmart.com.au
kasservices.co.in
druidbotapp.dev.druiddev.a-kmtkmg.net
nonprod.kmart.com.au
*.ankogcc.com
api.catch-dev.kmart.com.au
notifications.hamilton.kaccess.com.au
imperva.com
costcentreapprovaldev.hamilton.kaccess.com.au
costcentreapproval.hamilton.kaccess.com.au
costing-uat.kmart.com.au
rsdev.kmart.com.au
dev.kmart.com.au
ankogcc.com
portal.supplier.kmart.com.au
www.kmartcreate.com.au
api.catch-rel.kmart.com.au
auth-dev.kmart.com.au
new.kmart.com.au
notificationsdev.hamilton.kaccess.com.au
api.catch-sit.kmart.com.au
auth-nonprod.kmart.com.au
druidbotapp.prod.druidprod.a-kmtkmg.net
portal-dev.supplier.kmart.com.au
*.kmart.co.nz
notificationsuat.hamilton.kaccess.com.au
www.kasservices.co.in
api.catch.kmart.com.au
api.hamilton.kaccess.com.au
app.stores-sit.kmart.com.au
api.kmart.com.au
*.emails.kmart.co.nz
auth.kmart.com.au

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWMpAkgr5bGusMDeMqA
ZasDCcxDB4yfc6d3JKF1zX4gA3xzMwdpnDKb7+djuu4x95Pz4OQoouXq73SO1UEi
01cSdaYPG78rGQoeco76zF/wIpz23hAEJ94sDI1mbWvQjNLBhPRZpNexUqdrF1wg
KEPX7R/W8iqTmCXyXMSBFlOsvwZg6ftgfd32vwFa3QgLgkHlIcn/mVNVZAQwdRxI
BTEHkwVRKxlpxCjP7Pt9xpct6hw3iRHzkRgcnE/HhpZtrA5LMjL7EUkRJJBoqMJr
naYaFq/yyo9ZUmAtzHUNpukRZYwMuWRSErwrkl9DdX/BeS2Y5U2eFH32K+QNcWmt
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2052532067511678571292359805093533997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 10:23:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 10:23:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16823990637002702904749487150434795421157795698884020376788963922257544923029488406634251550717832586620579477388754494363397973495753766931409496553739542988635021584632815017816829158639074537574048321126043231524897244181239016538255372124256287887486523697991703863648468291002141498070430602817789403508892962736440914286630769722269245700402028138239342047105004929068125883292848748407759736415299279669562991043051507152752218818942167417759618277365347743022031214217709291087612911682033551245431450951379702330800814226345415347094030483779041600345156102063348737459475123565701348127620365504049960300001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmartcreate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaluat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-nonprod.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.dev.druiddev.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaldev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapproval.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-uat.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsdev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmartcreate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-rel.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsdev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.prod.druidprod.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsuat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stores-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emails.kmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.kmart.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f30294ecb525d5123b29c5abdc96000aa781dea5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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