imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:bb:10:00:19:7c:7c:8f:d8:1e:73:d4:a7:f8:f2:94 was issued on by GlobalSign nv-sa.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bb:10:00:19:7c:7c:8f:d8:1e:73:d4:a7:f8:f2:94
Serial Number (int): 2300512034772207340232924060802675348
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f3:02:94:ec:b5:25:d5:12:3b:29:c5:ab:dc:96:00:0a:a7:81:de:a5
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): db:6d:cb:27:e6:34:d5:12:7b:79:fa:db:2f:52:6e:b8:fd:79:74:7d
Fingerprint (sha256): 50:aa:12:57:cd:e3:08:57:3a:24:15:51:cd:85:d9:5c:02:16:76:88:3a:cf:89:9e:ba:6d:c5:41:39:7c:1f:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

costcentreapprovaluat.hamilton.kaccess.com.au
api.nonprod.kmart.com.au
*.hamilton.kaccess.com.au
*.kaccess.com.au
portal-nonprod.supplier.kmart.com.au
costing-dev.kmart.com.au
kasservices.co.in
druidbotapp.dev.druiddev.a-kmtkmg.net
nonprod.kmart.com.au
*.ankogcc.com
api.catch-dev.kmart.com.au
notifications.hamilton.kaccess.com.au
imperva.com
costcentreapprovaldev.hamilton.kaccess.com.au
costcentreapproval.hamilton.kaccess.com.au
costing-uat.kmart.com.au
rsdev.kmart.com.au
dev.kmart.com.au
ankogcc.com
portal.supplier.kmart.com.au
api.catch-rel.kmart.com.au
auth-dev.kmart.com.au
new.kmart.com.au
notificationsdev.hamilton.kaccess.com.au
api.catch-sit.kmart.com.au
auth-nonprod.kmart.com.au
druidbotapp.prod.druidprod.a-kmtkmg.net
portal-dev.supplier.kmart.com.au
*.kmart.co.nz
notificationsuat.hamilton.kaccess.com.au
www.kasservices.co.in
api.catch.kmart.com.au
api.hamilton.kaccess.com.au
app.stores-sit.kmart.com.au
api.kmart.com.au
auth.kmart.com.au

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWMpAkgr5bGusMDeMqA
ZasDCcxDB4yfc6d3JKF1zX4gA3xzMwdpnDKb7+djuu4x95Pz4OQoouXq73SO1UEi
01cSdaYPG78rGQoeco76zF/wIpz23hAEJ94sDI1mbWvQjNLBhPRZpNexUqdrF1wg
KEPX7R/W8iqTmCXyXMSBFlOsvwZg6ftgfd32vwFa3QgLgkHlIcn/mVNVZAQwdRxI
BTEHkwVRKxlpxCjP7Pt9xpct6hw3iRHzkRgcnE/HhpZtrA5LMjL7EUkRJJBoqMJr
naYaFq/yyo9ZUmAtzHUNpukRZYwMuWRSErwrkl9DdX/BeS2Y5U2eFH32K+QNcWmt
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2300512034772207340232924060802675348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 09:12:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 09:12:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16823990637002702904749487150434795421157795698884020376788963922257544923029488406634251550717832586620579477388754494363397973495753766931409496553739542988635021584632815017816829158639074537574048321126043231524897244181239016538255372124256287887486523697991703863648468291002141498070430602817789403508892962736440914286630769722269245700402028138239342047105004929068125883292848748407759736415299279669562991043051507152752218818942167417759618277365347743022031214217709291087612911682033551245431450951379702330800814226345415347094030483779041600345156102063348737459475123565701348127620365504049960300001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaluat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-nonprod.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.dev.druiddev.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapprovaldev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcentreapproval.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costing-uat.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsdev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankogcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-rel.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsdev.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-nonprod.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druidbotapp.prod.druidprod.a-kmtkmg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.supplier.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notificationsuat.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasservices.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.catch.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hamilton.kaccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stores-sit.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.kmart.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f30294ecb525d5123b29c5abdc96000aa781dea5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001878e7cd95800000403004830460221009ea24adb736bd30ca8d2c7ca40f94b0587e71b5e25601d82b18a5332f52bfe31022100d6165f5411452f76b9991f810563aca5668e11f6fd26e0969f7781d3fc0519b90075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001878e7cd9aa0000040300463044022045fb59cb5ecbbdadd634073b5437b09e15ad34c3af8cb50e66e9b98a187e43f30220340680a7ea806142dfa06497d6a146bf2ad30afb75b0f04a93b89ffc05125643007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001878e7cda70000004030046304402206887ba2600a4e8542f5ceeab5a0a2f228e382db6c43878e377037469fa4b4150022043c2371fa36cfecdb56f98b9a2e23a7b84797e0e2c87f5f4f08285b70bcbf0f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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