imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:36:f3:b1:65:ef:b2:a2:a1:f4:97:7d:e7:ae:75:78 was issued on by GlobalSign nv-sa.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:36:f3:b1:65:ef:b2:a2:a1:f4:97:7d:e7:ae:75:78
Serial Number (int): 1614554706612011789665585254590477688
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 86:75:14:24:22:76:d9:2c:e9:d2:10:36:34:a4:e2:26:c8:00:53:f7
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): e4:6f:b5:fd:87:e9:80:76:35:a7:84:63:a2:15:ca:2c:19:7d:91:f6
Fingerprint (sha256): 6a:1d:2b:89:48:7f:d9:5b:ce:ce:43:0c:ee:fd:b0:ea:41:45:d6:a2:5f:53:a1:69:23:ea:c3:4a:b5:44:3b:83

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.covid19-cas.nhs.uk
*.plymouth.nhs.uk
*.norfolkcommunityhealthandcare.nhs.uk
*.continuityofcarer-tools.nhs.uk
*.nwangliaft.nhs.uk
continuityofcarer-tools.nhs.uk
*.dhc.nhs.uk
*.nwas.nhs.uk
woundcarelite.kentcht.nhs.uk
www.cypmh-model.nhs.uk
*.slam-services.org
bradfordhospitals.nhs.uk
healthgis.nhs.uk
*.ncic.nhs.uk
cypmh-model.nhs.uk
*.scwcsu.nhs.uk
*.lnwh.nhs.uk
frimleyhealthcareercentre.org.uk
*.rwt.nhs.uk
*.yorkhospitals.nhs.uk
*.bdct.nhs.uk
*.imperial.nhs.uk
lpft.nhs.uk
*.frimleyparkhospital.co.uk
*.rwh-tr.nhs.uk
www.shropscommunityhealth.nhs.uk
ncic.nhs.uk
*.oxleas.nhs.uk
*.secureboundary.nhs.uk
*.nhsla.com
*.slam.nhs.uk
frimleyparkhospital.co.uk
*.bthft.nhs.uk
pulsesite-sensordata.kentcht.nhs.uk
*.healthgis.nhs.uk
*.plymouthhospitals.nhs.uk
*.chesterfieldroyal.nhs.uk
*.nhsbt.nhs.uk
*.lpft.nhs.uk
*.secamb.nhs.uk
*.yas.nhs.uk
*.kentcht.nhs.uk
mtw.nhs.uk
*.lthtr.nhs.uk
imperva.com
*.mtw.nhs.uk
plymouthhospitals.nhs.uk
*.bradfordhospitals.nhs.uk
*.england.nhs.uk
*.ice-ni.nnuh.nhs.uk
webcentre-sch.smartmedia.net
*.thh.nhs.uk
covid19-cas.nhs.uk
*.frimleyhealthcareercentre.org.uk
rmmatters.rmh.nhs.uk
norfolkcommunityhealthandcare.nhs.uk
*.cypmh-model.nhs.uk
lnwh.nhs.uk
*.shropcom.nhs.uk
yastransfers.yas.nhs.uk
scwcsu.nhs.uk
thh.nhs.uk
bdct.nhs.uk
*.uclh.nhs.uk
shropscommunityhealth.nhs.uk
training-sch.smartmedia.net

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILzzCCCregAwIBAgIQATbzsWXvsqKh9Jd95651eDANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMjAeFw0yMzA2
MjkxNDA5MDhaFw0yMzEyMjYxNDA5MDhaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjS5I3ib3hyqnbgv043c
FT2AbGCHwsDFKsBQfZPfpMerdgLNfXIREtlJYNOkB0bC6BbFvYrRDta4lgSqqIbH
caArw26boxpt1r5NTWs9fhpnyji3PohDhqGTG5HwRC0lLIJaakD7y1aq91A4H1z4
CSUQThviXI1p7ZRMrHD4o0m6yElXY9KZi8z0o995sTTV7p692YKxqqemONKfV4Ik
fCtSFiqL1W8RbdY2vZWaHctPuBTsfEdqml857VM1E4fnQIR6dMPHE8G3yRsH4V5R
0N2SNpSu8leXIOAWHm/MKLwVh8XNvJWx8Bi7hKnetqGHeype9ABHT7K9LQYeHCjm
5QIDAQABo4II1TCCCNEwggWKBgNVHREEggWBMIIFfYIWd3d3LmNvdmlkMTktY2Fz
Lm5ocy51a4IRKi5wbHltb3V0aC5uaHMudWuCJioubm9yZm9sa2NvbW11bml0eWhl
YWx0aGFuZGNhcmUubmhzLnVrgiAqLmNvbnRpbnVpdHlvZmNhcmVyLXRvb2xzLm5o
cy51a4ITKi5ud2FuZ2xpYWZ0Lm5ocy51a4IeY29udGludWl0eW9mY2FyZXItdG9v
bHMubmhzLnVrggwqLmRoYy5uaHMudWuCDSoubndhcy5uaHMudWuCHHdvdW5kY2Fy
ZWxpdGUua2VudGNodC5uaHMudWuCFnd3dy5jeXBtaC1tb2RlbC5uaHMudWuCEyou
c2xhbS1zZXJ2aWNlcy5vcmeCGGJyYWRmb3JkaG9zcGl0YWxzLm5ocy51a4IQaGVh
bHRoZ2lzLm5ocy51a4INKi5uY2ljLm5ocy51a4ISY3lwbWgtbW9kZWwubmhzLnVr
gg8qLnNjd2NzdS5uaHMudWuCDSoubG53aC5uaHMudWuCIGZyaW1sZXloZWFsdGhj
YXJlZXJjZW50cmUub3JnLnVrggwqLnJ3dC5uaHMudWuCFioueW9ya2hvc3BpdGFs
cy5uaHMudWuCDSouYmRjdC5uaHMudWuCESouaW1wZXJpYWwubmhzLnVrggtscGZ0
Lm5ocy51a4IbKi5mcmltbGV5cGFya2hvc3BpdGFsLmNvLnVrgg8qLnJ3aC10ci5u
aHMudWuCIHd3dy5zaHJvcHNjb21tdW5pdHloZWFsdGgubmhzLnVrggtuY2ljLm5o
cy51a4IPKi5veGxlYXMubmhzLnVrghcqLnNlY3VyZWJvdW5kYXJ5Lm5ocy51a4IL
Ki5uaHNsYS5jb22CDSouc2xhbS5uaHMudWuCGWZyaW1sZXlwYXJraG9zcGl0YWwu
Y28udWuCDiouYnRoZnQubmhzLnVrgiNwdWxzZXNpdGUtc2Vuc29yZGF0YS5rZW50
Y2h0Lm5ocy51a4ISKi5oZWFsdGhnaXMubmhzLnVrghoqLnBseW1vdXRoaG9zcGl0
YWxzLm5ocy51a4IaKi5jaGVzdGVyZmllbGRyb3lhbC5uaHMudWuCDioubmhzYnQu
bmhzLnVrgg0qLmxwZnQubmhzLnVrgg8qLnNlY2FtYi5uaHMudWuCDCoueWFzLm5o
cy51a4IQKi5rZW50Y2h0Lm5ocy51a4IKbXR3Lm5ocy51a4IOKi5sdGh0ci5uaHMu
dWuCC2ltcGVydmEuY29tggwqLm10dy5uaHMudWuCGHBseW1vdXRoaG9zcGl0YWxz
Lm5ocy51a4IaKi5icmFkZm9yZGhvc3BpdGFscy5uaHMudWuCECouZW5nbGFuZC5u
aHMudWuCFCouaWNlLW5pLm5udWgubmhzLnVrghx3ZWJjZW50cmUtc2NoLnNtYXJ0
bWVkaWEubmV0ggwqLnRoaC5uaHMudWuCEmNvdmlkMTktY2FzLm5ocy51a4IiKi5m
cmltbGV5aGVhbHRoY2FyZWVyY2VudHJlLm9yZy51a4IUcm1tYXR0ZXJzLnJtaC5u
aHMudWuCJG5vcmZvbGtjb21tdW5pdHloZWFsdGhhbmRjYXJlLm5ocy51a4IUKi5j
eXBtaC1tb2RlbC5uaHMudWuCC2xud2gubmhzLnVrghEqLnNocm9wY29tLm5ocy51
a4IXeWFzdHJhbnNmZXJzLnlhcy5uaHMudWuCDXNjd2NzdS5uaHMudWuCCnRoaC5u
aHMudWuCC2JkY3QubmhzLnVrgg0qLnVjbGgubmhzLnVrghxzaHJvcHNjb21tdW5p
dHloZWFsdGgubmhzLnVrght0cmFpbmluZy1zY2guc21hcnRtZWRpYS5uZXQwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQUhnUUJCJ22Szp0hA2NKTiJsgAU/cwVwYDVR0gBFAwTjAIBgZngQwBAgEw
QgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGeBggrBgEFBQcBAQSB
kTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vY2Ev
Z3NhdGxhc3IzZHZ0bHNjYTIwMjNxMjBKBggrBgEFBQcwAoY+aHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMi5j
cnQwHwYDVR0jBBgwFoAUxqJhE0UVzJCPusGsvMw7DQ7Q3gYwSAYDVR0fBEEwPzA9
oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjNkdnRs
c2NhMjAyM3EyLmNybDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUArfe++nz/
EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGJB3yRzAAABAMARjBEAiBxX5JX
xHcn3iSbYh4kVq8wNChD108CRPZHFY8I5AvYJAIgO6ktRXCnAxiVd0UVOO8JUWbt
hC6P/N+sJrI+huFYnkIAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9
bgAAAYkHfJH4AAAEAwBHMEUCIFujNh1b0e927f8WiQ0yVb8Jg0DB9T9JL4jaunlv
/GBcAiEA2xIKUMgZDKrd5fwGZvn05ZGH9K/EU8XRDo3pXTSpliAAdwB6MoxU2Lct
tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYkHfJImAAAEAwBIMEYCIQDYp0aq
J375ljbQ3P5prKWGi8Vna/TPldF1XLeq8A47XgIhALdaECfWL6nS8FoQmPuOKQ3I
jv6pDaCZ1jQiO9CO70VyMA0GCSqGSIb3DQEBCwUAA4IBAQAc3BIstgiul6PRWEzN
zdeC34vhZSFWeQ0UC3mw52Q57pS0hS5ZsTj+dGmX1rRg4kBi/2cxuO29KeqvVAzS
MjS6vG492Rl8olbrIKOlQpBdhvplvPZKgmMNb7M3qWYod+kKgqMIzqo8D1MusbUs
iQLotZYkYA+5AFsUbd0jJCQVeljRBeLbiYkwoQN6fE+l9xIdUTAXCJSdapVDPZFq
yStsrdWRtIu39EMSdRxXshZi5VCy0ZfkZUngc0nC3TEXLwdzXrARp+hmzvr3FowQ
ppK3NTYH424wxMuAqNjfNB5Uj0Ed6Rk433oG7N/h34pOtn3Pd9zqZQJJbDRUdGak
yRti
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjS5I3ib3hyqnbgv043c
FT2AbGCHwsDFKsBQfZPfpMerdgLNfXIREtlJYNOkB0bC6BbFvYrRDta4lgSqqIbH
caArw26boxpt1r5NTWs9fhpnyji3PohDhqGTG5HwRC0lLIJaakD7y1aq91A4H1z4
CSUQThviXI1p7ZRMrHD4o0m6yElXY9KZi8z0o995sTTV7p692YKxqqemONKfV4Ik
fCtSFiqL1W8RbdY2vZWaHctPuBTsfEdqml857VM1E4fnQIR6dMPHE8G3yRsH4V5R
0N2SNpSu8leXIOAWHm/MKLwVh8XNvJWx8Bi7hKnetqGHeype9ABHT7K9LQYeHCjm
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1614554706612011789665585254590477688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 14:09:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 14:09:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19466697742446248639977743603189351919461433262680837635580370918968811312677844582769186565599728230365899720687954026921754216587064760092012190225108143941965276265416618946450238861554671236332389521882993974315895869879567025453299292896607154557038012260897331552642242984296788917897652041200613112622261103549591290104006312102888422449009032665750682621341911461621094739425375167012567121498192194773394501074934429260813367557671326353980278108130683749375987875367867424967495444502871499211541185540151179160366800238226409871460894784659221175761138451242356591096924715647032020834460562273524983064293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwangliaft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuityofcarer-tools.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woundcarelite.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam-services.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperial.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwh-tr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncic.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxleas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secureboundary.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slam.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimleyparkhospital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bthft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesite-sensordata.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthgis.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chesterfieldroyal.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhsbt.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secamb.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcht.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lthtr.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plymouthhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bradfordhospitals.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ice-ni.nnuh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcentre-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19-cas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frimleyhealthcareercentre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmmatters.rmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkcommunityhealthandcare.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypmh-model.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shropcom.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yastransfers.yas.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scwcsu.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdct.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shropscommunityhealth.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-sch.smartmedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							867514242276d92ce9d2103634a4e226c80053f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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