imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:48:34:43:47:6e:53:be:b3:ec:b4:79:62:a4:12:06 was issued on by GlobalSign nv-sa.

With 132 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:48:34:43:47:6e:53:be:b3:ec:b4:79:62:a4:12:06
Serial Number (int): 1704133385292514816468163955272192518
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:66:4a:cb:70:24:10:f0:a8:4b:53:a2:43:2f:1e:7c:9b:80:63:a6
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 36:f6:17:83:a7:8b:7a:e8:93:39:ef:8c:a2:fb:b7:69:1d:52:23:ef
Fingerprint (sha256): 76:f3:fc:7b:34:e6:3e:77:45:ca:ea:3a:4e:91:79:74:98:10:31:c7:8e:68:aa:88:f0:14:24:9d:92:e9:20:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate imperva.com

132

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitatranslationinterpreting.com
*.capita-mits.co.uk
*.entrust-ed.co.uk
*.cs-nams.co.uk
*.redstartwales.com
mishare.co.uk
acutest.co.uk
*.capitatranslationinterpreting.com
*.southoxon.gov.uk
redstartwales.com
*.vwpension.co.uk
*.trade.co.uk
*.capitatranslationinterpreting.fr
*.electranetuk.com
*.one247.co.uk
*.capitaonboard.com
*.csl-inn.co.uk
redsms.co.uk
capitatranslationinterpreting.it
*.mythreadneedlepensions.co.uk
capitaintelligentcommunications.co.uk
*.de.capita-europe.com
*.easthants.gov.uk
*.charnwood.gov.uk
*.staygassafe.co.uk
vwpension.co.uk
my-capita-europe.com
*.financialassessments.co.uk
*.bexley.gov.uk
*.voicegroup.co.uk
*.chhrml.co.uk
*.sigmaseven.com
*.hartlinkonline.ie
*.capitaservicenow.co.uk
eapf.org.uk
*.sigmaseven.co.uk
hartlinkonline.ie
*.capita-europe.com
*.inthost.net
capitapipjobs.co.uk
*.pcse.england.nhs.uk
*.whitehorsedc.gov.uk
staygassafe.co.uk
*.capita-im.co.uk
caterpillarpensions.co.uk
royalmailsps.co.uk
*.capitacm.co.uk
imperva.com
*.glhims.com
*.updata.net
*.capitaservicemanager.co.uk
myattpension.co.uk
*.wmsl.co.uk
*.capitawfm.co.uk
*.capitatranslationinterpreting.it
*.redsms.co.uk
*.capitalinguistportal.com
*.traineradvisor.com
*.capita-pip.co.uk
*.beovax.co.uk
ycbps.co.uk
*.ventura-crm.co.uk
*.pensionscams.co.uk
gassaferegister.co.uk
*.gassaferegister.co.uk
*.uat.pcse.england.nhs.uk
t-mobilepension.co.uk
*.myattpension.co.uk
*.acutest.co.uk
*.eapf.org.uk
*.hart.gov.uk
*.tascor.co.uk
eepension.co.uk
capitalinguistportal.com
capitatranslationinterpreting.de
*.mi-share.co.uk
*.squidgeit.com
*.harrow.gov.uk
*.optilead.co.uk
pensionscams.co.uk
capitatranslationinterpreting.es
smartmate.co
*.t-mobilepension.co.uk
*.trustmarque.com
*.ycbps.co.uk
*.capita-ti.com
capita-pip.co.uk
*.caterpillarpensions.co.uk
capitatranslationinterpreting.us
*.capitasoftware.com
*.barnet.gov.uk
*.royalmailsps.co.uk
*.retaincloud.com
*.capita-ic.co.uk
*.capitapipjobs.co.uk
capitatranslationinterpreting.fr
*.crm4.dynamics.com
*.eepension.co.uk
*.capitasecureinformationsolutions.co.uk
entrust-ed.co.uk
*.cloud.sigmaseven.com
*.lambeth.gov.uk
*.ventura-uk.com
*.capitatranslationinterpreting.de
*.chks.co.uk
mythreadneedlepensions.co.uk
*.smartmate.co
barnet.gov.uk
glhims.com
tascor.co.uk
*.capitahartshead.co.uk
*.capitatranslationinterpreting.us
*.csa.capita.co.in
*.mishare.co.uk
trustmarque.com
*.credit.trade.co.uk
*.my-capita-europe.com
*.securitywatchdog.org.uk
*.havant.gov.uk
*.tflpp.co.uk
traineradvisor.com
*.capitaproperty.co.uk
capita-europe.com
voicegroup.co.uk
*.mendip.gov.uk
*.capitatranslationinterpreting.es
*.scottishwan.com
*.capita-software.co.uk
optilead.co.uk
*.capitaintelligentcommunications.co.uk
*.amt-sybex.com
mi-share.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdVv76KPr27C5kJMdVv
WOGJkeTumG/+peSv29bKRUztftVNKKLPnz9XSl3d0UHAoIrzoJEXkbyHwkz97LQs
DF2NnevCrjgikj/cG29Ckdm3fM7AO1qOGqQ2dA15fYGr/syM91Ji9JzoOO4idUzi
tj7MQraLtet6bn1Fv/jxTmOuThqVU+Z6FN0+B/MTd/J+ZD2/KgcfbbqYf/4peVuq
aK0nTGfXwUbdBsWfiBDnGjHEMtt9Ee6nOC1csp7secKdRuO4c2eQao+p+MKaqiiH
HqPkcdzUHo9AN1eZQbOiR2B4O8OBOcTf8ScZjXOQ7aJU07PotSuoxyi9yiDBStTQ
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1704133385292514816468163955272192518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 09:29:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-21 00:23:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19294407979747692107814480175211470949549430727584330910960674474049228062681274098046147130481952781739394765204226075183535169565207957886327449785037139555843834662989195055627979439246164233009054293256571260557937493974626192399411430635248877898715389191407821212562128585469092378842206772805055633318057282365336745534256778457526565846993102201341407852208160931687812573188100158145964041516852344921998436418400567656941917104943213197295644663136022714107824135217571130969443466405998322385137730540211492055450311051472788648460993642281901646416827193668087766016567106782723239924780013793578281390237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2831 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-mits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cs-nams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acutest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southoxon.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electranetuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaonboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csl-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easthants.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charnwood.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialassessments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bexley.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chhrml.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigmaseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicenow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigmaseven.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inthost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehorsedc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-im.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmsl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitawfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beovax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-crm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acutest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hart.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalinguistportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi-share.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squidgeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrow.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustmarque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitasoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaincloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm4.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitasecureinformationsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.sigmaseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambeth.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitahartshead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csa.capita.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustmarque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitywatchdog.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havant.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tflpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traineradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mendip.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottishwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amt-sybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-share.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec664acb702410f0a84b53a2432f1e7c9b8063a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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