imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:44:80:f4:ad:de:ea:bb:59:23:53:48:22:0d:07:45 was issued on by GlobalSign nv-sa.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:44:80:f4:ad:de:ea:bb:59:23:53:48:22:0d:07:45
Serial Number (int): 1684919716076601766724865793228343109
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: fc:2a:76:fa:51:bb:e9:be:8d:4e:79:69:ca:3e:55:d8:2e:7e:ce:80
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 5f:4b:8d:a2:47:6c:68:48:6f:c1:8d:70:45:82:d4:77:c0:28:93:9f
Fingerprint (sha256): 41:08:a7:38:e1:50:7e:cf:5f:7f:a2:76:72:46:ff:b4:6b:da:6b:dd:9a:2e:7b:f4:1f:03:2b:b5:00:c6:9b:0d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commmoms.com
www.studentswithoutlimits.org
www.piedmontmaids.com
mvpgermanauto.com
www.taikingtour-pos.com
caryrheumatology.com
plantarfasciitisresource.com
natalini-frames.it
www.brambleworkshop.com
noratechcomputers.com
acenewstoday.com
barbabramson.com
www.atlasideal.com
www.miltonmerlos.com
www.michelezackheim.com
www.woksdeli.com
www.tech4pub.com
montitrans.com
www.toddsafety.com
www.beckwithstrings.com
outpace-consulting.com
brambleworkshop.com
expressivetherapy.net
www.summit-flooring.com
www.ashlindproperties.com
www.londontradingcompany.com
carvertubs.com
www.sociologicalscience.com
heritagetaxmn.com
michelezackheim.com
develop4u.com
atlasideal.com
www.acenewstoday.com
imperva.com
piedmontmaids.com
www.heritagetaxmn.com
www.lgbtqiahistory.com
ctwfl.com
prepkanga.com
www.ibasementsystem.com
ashlindproperties.com
tech4pub.com
www.tyneoconnell.co.uk
www.expressivetherapy.net
www.premiumpension.com
kelseypro.com
2asuccessdreamblog.com
lukerioux.com
www.johnsgymgeorgetown.com
tyneoconnell.co.uk
*.kelseypro.com
youngzonejewelry.com
www.commmoms.com
sociologicalscience.com
www.swamisriatmananda.com
lgbtqiahistory.com
www.texanwater.com
summit-flooring.com
www.thecoffeemod.com
www.taslleeh.com
www.develop4u.com
beckwithstrings.com
www.ableelectricnj.com
quadrapower.ca
studentswithoutlimits.org
nymblsoft.com
premiumpension.com
www.2asuccessdreamblog.com
woksdeli.com
pdeelectronics.com
salsatanzenmunich.com
www.caryrheumatology.com
www.natalini-frames.it
www.noratechcomputers.com
www.pacifichomebrokers.org
texanwater.com
aslinteractive.com
stasnm.org
www.plantarfasciitisresource.com
www.stasnm.org
www.barbabramson.com
www.nymblsoft.com
www.prepkanga.com
www.lukerioux.com
taikingtour-pos.com
toddsafety.com
www.outpace-consulting.com
www.pdeelectronics.com
miltonmerlos.com
ibasementsystem.com
www.klitznerlaw.com
www.aslinteractive.com
www.carvertubs.com
www.quadrapower.ca
www.montitrans.com
pacifichomebrokers.org
www.youngzonejewelry.com
www.ctwfl.com
www.salsatanzenmunich.com
taslleeh.com
klitznerlaw.com
johnsgymgeorgetown.com
www.mvpgermanauto.com
ableelectricnj.com
swamisriatmananda.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPCDCCDfCgAwIBAgIQAUSA9K3e6rtZI1NIIg0HRTANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEy
MjgxNzM4MjNaFw0yNDA2MjUxNzM4MjNaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPA2RA8Nw4UBU1udDlOu
B0i44lsBChxfH79k/sPW5xVn4BDr9AfexVxVoXqRvE8WS8FWvW9AE6R1r3ZPlb17
7olTxCMCEyaAF+4U1gNG5YjuhxQKMH1NgywrEi8UkAOC6+CX1u17xPSBm0rPw51l
cAx6IcGsOPyMe6XxNegGrmTT5cSNPEtiy7mVgSV3Li/ix05e3e90o50V0NJ7Gifr
4H/I3Kb5Gr8UiBn1oX+Yfmt/PO19YrOtI1twyEQmYNXm0Tetdh76e8R6bccr4z7/
xS3YEIHzqYNHSKg7XiCfp/E+zLZk5SIMw1uYQLVKvN3pqVRS73yGo2NQEL532/oC
fQIDAQABo4IMDjCCDAowggjCBgNVHREEggi5MIIItYIMY29tbW1vbXMuY29tgh13
d3cuc3R1ZGVudHN3aXRob3V0bGltaXRzLm9yZ4IVd3d3LnBpZWRtb250bWFpZHMu
Y29tghFtdnBnZXJtYW5hdXRvLmNvbYIXd3d3LnRhaWtpbmd0b3VyLXBvcy5jb22C
FGNhcnlyaGV1bWF0b2xvZ3kuY29tghxwbGFudGFyZmFzY2lpdGlzcmVzb3VyY2Uu
Y29tghJuYXRhbGluaS1mcmFtZXMuaXSCF3d3dy5icmFtYmxld29ya3Nob3AuY29t
ghVub3JhdGVjaGNvbXB1dGVycy5jb22CEGFjZW5ld3N0b2RheS5jb22CEGJhcmJh
YnJhbXNvbi5jb22CEnd3dy5hdGxhc2lkZWFsLmNvbYIUd3d3Lm1pbHRvbm1lcmxv
cy5jb22CF3d3dy5taWNoZWxlemFja2hlaW0uY29tghB3d3cud29rc2RlbGkuY29t
ghB3d3cudGVjaDRwdWIuY29tgg5tb250aXRyYW5zLmNvbYISd3d3LnRvZGRzYWZl
dHkuY29tghd3d3cuYmVja3dpdGhzdHJpbmdzLmNvbYIWb3V0cGFjZS1jb25zdWx0
aW5nLmNvbYITYnJhbWJsZXdvcmtzaG9wLmNvbYIVZXhwcmVzc2l2ZXRoZXJhcHku
bmV0ghd3d3cuc3VtbWl0LWZsb29yaW5nLmNvbYIZd3d3LmFzaGxpbmRwcm9wZXJ0
aWVzLmNvbYIcd3d3LmxvbmRvbnRyYWRpbmdjb21wYW55LmNvbYIOY2FydmVydHVi
cy5jb22CG3d3dy5zb2Npb2xvZ2ljYWxzY2llbmNlLmNvbYIRaGVyaXRhZ2V0YXht
bi5jb22CE21pY2hlbGV6YWNraGVpbS5jb22CDWRldmVsb3A0dS5jb22CDmF0bGFz
aWRlYWwuY29tghR3d3cuYWNlbmV3c3RvZGF5LmNvbYILaW1wZXJ2YS5jb22CEXBp
ZWRtb250bWFpZHMuY29tghV3d3cuaGVyaXRhZ2V0YXhtbi5jb22CFnd3dy5sZ2J0
cWlhaGlzdG9yeS5jb22CCWN0d2ZsLmNvbYINcHJlcGthbmdhLmNvbYIXd3d3Lmli
YXNlbWVudHN5c3RlbS5jb22CFWFzaGxpbmRwcm9wZXJ0aWVzLmNvbYIMdGVjaDRw
dWIuY29tghZ3d3cudHluZW9jb25uZWxsLmNvLnVrghl3d3cuZXhwcmVzc2l2ZXRo
ZXJhcHkubmV0ghZ3d3cucHJlbWl1bXBlbnNpb24uY29tgg1rZWxzZXlwcm8uY29t
ghYyYXN1Y2Nlc3NkcmVhbWJsb2cuY29tgg1sdWtlcmlvdXguY29tghp3d3cuam9o
bnNneW1nZW9yZ2V0b3duLmNvbYISdHluZW9jb25uZWxsLmNvLnVrgg8qLmtlbHNl
eXByby5jb22CFHlvdW5nem9uZWpld2VscnkuY29tghB3d3cuY29tbW1vbXMuY29t
ghdzb2Npb2xvZ2ljYWxzY2llbmNlLmNvbYIZd3d3LnN3YW1pc3JpYXRtYW5hbmRh
LmNvbYISbGdidHFpYWhpc3RvcnkuY29tghJ3d3cudGV4YW53YXRlci5jb22CE3N1
bW1pdC1mbG9vcmluZy5jb22CFHd3dy50aGVjb2ZmZWVtb2QuY29tghB3d3cudGFz
bGxlZWguY29tghF3d3cuZGV2ZWxvcDR1LmNvbYITYmVja3dpdGhzdHJpbmdzLmNv
bYIWd3d3LmFibGVlbGVjdHJpY25qLmNvbYIOcXVhZHJhcG93ZXIuY2GCGXN0dWRl
bnRzd2l0aG91dGxpbWl0cy5vcmeCDW55bWJsc29mdC5jb22CEnByZW1pdW1wZW5z
aW9uLmNvbYIad3d3LjJhc3VjY2Vzc2RyZWFtYmxvZy5jb22CDHdva3NkZWxpLmNv
bYIScGRlZWxlY3Ryb25pY3MuY29tghVzYWxzYXRhbnplbm11bmljaC5jb22CGHd3
dy5jYXJ5cmhldW1hdG9sb2d5LmNvbYIWd3d3Lm5hdGFsaW5pLWZyYW1lcy5pdIIZ
d3d3Lm5vcmF0ZWNoY29tcHV0ZXJzLmNvbYIad3d3LnBhY2lmaWNob21lYnJva2Vy
cy5vcmeCDnRleGFud2F0ZXIuY29tghJhc2xpbnRlcmFjdGl2ZS5jb22CCnN0YXNu
bS5vcmeCIHd3dy5wbGFudGFyZmFzY2lpdGlzcmVzb3VyY2UuY29tgg53d3cuc3Rh
c25tLm9yZ4IUd3d3LmJhcmJhYnJhbXNvbi5jb22CEXd3dy5ueW1ibHNvZnQuY29t
ghF3d3cucHJlcGthbmdhLmNvbYIRd3d3Lmx1a2VyaW91eC5jb22CE3RhaWtpbmd0
b3VyLXBvcy5jb22CDnRvZGRzYWZldHkuY29tghp3d3cub3V0cGFjZS1jb25zdWx0
aW5nLmNvbYIWd3d3LnBkZWVsZWN0cm9uaWNzLmNvbYIQbWlsdG9ubWVybG9zLmNv
bYITaWJhc2VtZW50c3lzdGVtLmNvbYITd3d3LmtsaXR6bmVybGF3LmNvbYIWd3d3
LmFzbGludGVyYWN0aXZlLmNvbYISd3d3LmNhcnZlcnR1YnMuY29tghJ3d3cucXVh
ZHJhcG93ZXIuY2GCEnd3dy5tb250aXRyYW5zLmNvbYIWcGFjaWZpY2hvbWVicm9r
ZXJzLm9yZ4IYd3d3LnlvdW5nem9uZWpld2VscnkuY29tgg13d3cuY3R3ZmwuY29t
ghl3d3cuc2Fsc2F0YW56ZW5tdW5pY2guY29tggx0YXNsbGVlaC5jb22CD2tsaXR6
bmVybGF3LmNvbYIWam9obnNneW1nZW9yZ2V0b3duLmNvbYIVd3d3Lm12cGdlcm1h
bmF1dG8uY29tghJhYmxlZWxlY3RyaWNuai5jb22CFXN3YW1pc3JpYXRtYW5hbmRh
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB0GA1UdDgQWBBT8Knb6Ubvpvo1OeWnKPlXYLn7OgDBXBgNVHSAEUDBOMAgG
BmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3
Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4GCCsG
AQUFBwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxzaWdu
LmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0MEoGCCsGAQUFBzAChj5odHRw
Oi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRsc2Nh
MjAyM3E0LmNydDAfBgNVHSMEGDAWgBSqEXGPlcRYmIuxbg87UGgkvLgZvDBIBgNV
HR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRs
YXNyM2R2dGxzY2EyMDIzcTQuY3JsMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYyxgbJZAAAEAwBI
MEYCIQCB3AokVQ+Hgb/46umSCioMjrlFDy+dJ430DeiX6wdGvQIhAIqV1fJXP/zT
V5NkmRfMeV13hecx12i1C+eR31Ti9SqgAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f
hWrrwb8ohez4ZG4AAAGMsYGy1QAABAMARzBFAiEAlsf8yJbAWtSpDxi+SZ2uRRSL
C01U0TweHQ0dfn92BwsCIH72CdlCQRIbj/qC4QKBJzNW8yxQ/HkVM/F9HB1CuRvo
AHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMsYGzOAAABAMA
RzBFAiEA8yxICsbpUN6XdkgpJb14pZZ6vnv6WWBlWneiftbeE2QCIGq+e5i1WwVm
J+rbpLDF6nBy/d2gh1gNDjuq+a6dtXyeMA0GCSqGSIb3DQEBCwUAA4IBAQBw85H2
j+5EJ4IFrfal6VS/l/c38uW+SE9k+woR9xlK/D5kHXrw1AUbcvRlpG0NNFsYZh21
5zz1TU2igoYFd3wKBBLboORgxBivWGJ4Th+4iNytIMV1vVqGc7RaD/4wUWJbt7dh
ZeU3tQAWpQhpNhU/WFyxP5p8j5yW7kCowle+gPFZFDrJkvfMpT8UN+g2C1LZPcuK
2K1vY790ZBhwJ65PPzuyxnpLKL58r5NpmKKg8/dTVA25lFJlCDRZklNEKDeJdrEs
ytb4xeoR5liVKAReCsWLRMGpZXtv8CTj/QjImTWzNy5enrHgriF2u1Iub6alL/tq
+GwG7eQDXCBv6lbX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPA2RA8Nw4UBU1udDlOu
B0i44lsBChxfH79k/sPW5xVn4BDr9AfexVxVoXqRvE8WS8FWvW9AE6R1r3ZPlb17
7olTxCMCEyaAF+4U1gNG5YjuhxQKMH1NgywrEi8UkAOC6+CX1u17xPSBm0rPw51l
cAx6IcGsOPyMe6XxNegGrmTT5cSNPEtiy7mVgSV3Li/ix05e3e90o50V0NJ7Gifr
4H/I3Kb5Gr8UiBn1oX+Yfmt/PO19YrOtI1twyEQmYNXm0Tetdh76e8R6bccr4z7/
xS3YEIHzqYNHSKg7XiCfp/E+zLZk5SIMw1uYQLVKvN3pqVRS73yGo2NQEL532/oC
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1684919716076601766724865793228343109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 17:38:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 17:38:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19811628514869784117051653492076320540722582528566807939857430232563724413211737367545920650091103791696895849641544769822884865615381291923722650678403106006608432415867826734640442657929065244798965610388566533352415678908714699853470529007171079464177132983069699814343107848167322110069830448713363006739209382601436832891471118441496078808457493266137315317112227086135980761466240109862386753143029142321099221757719957533079215966435757119553961239311789265262837271036165247879632328802502908605955567270434985805137706915292465655784994091663583055927494815072469706202134528986323884542706559572750699725437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commmoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentswithoutlimits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piedmontmaids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpgermanauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taikingtour-pos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caryrheumatology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantarfasciitisresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natalini-frames.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brambleworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noratechcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acenewstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbabramson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlasideal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miltonmerlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelezackheim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woksdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tech4pub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toddsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckwithstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outpace-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brambleworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressivetherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summit-flooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londontradingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carvertubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sociologicalscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagetaxmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelezackheim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasideal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acenewstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontmaids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagetaxmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgbtqiahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctwfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepkanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibasementsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech4pub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyneoconnell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expressivetherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiumpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelseypro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2asuccessdreamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukerioux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsgymgeorgetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyneoconnell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kelseypro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngzonejewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commmoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sociologicalscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamisriatmananda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqiahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texanwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit-flooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecoffeemod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taslleeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.develop4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckwithstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ableelectricnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadrapower.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentswithoutlimits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymblsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2asuccessdreamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woksdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdeelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salsatanzenmunich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caryrheumatology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natalini-frames.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noratechcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacifichomebrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texanwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aslinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantarfasciitisresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbabramson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nymblsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prepkanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukerioux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taikingtour-pos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outpace-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdeelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonmerlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibasementsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klitznerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aslinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvertubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quadrapower.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacifichomebrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngzonejewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctwfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salsatanzenmunich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taslleeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klitznerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsgymgeorgetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvpgermanauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ableelectricnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swamisriatmananda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc2a76fa51bbe9be8d4e7969ca3e55d82e7ece80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb181b259000004030048304602210081dc0a24550f8781bff8eae9920a2a0c8eb9450f2f9d278df40de897eb0746bd0221008a95d5f2573ffcd35793649917cc795d7785e731d768b50be791df54e2f52aa00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018cb181b2d5000004030047304502210096c7fcc896c05ad4a90f18be499dae45148b0b4d54d13c1e1d0d1d7e7f76070b02207ef609d94241121b8ffa82e10281273356f32c50fc791533f17d1c1d42b91be80076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb181b3380000040300473045022100f32c480ac6e950de9776482925bd78a5967abe7bfa5960655a77a27ed6de136402206abe7b98b55b056627eadba4b0c5ea7072fddda087580d0e3baaf9ae9db57c9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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