imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q3

About this certificate

This digital certificate with serial number 01:f0:33:0e:75:35:5b:ec:32:d8:94:9c:33:0a:49:e3 was issued on by GlobalSign nv-sa.

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f0:33:0e:75:35:5b:ec:32:d8:94:9c:33:0a:49:e3
Serial Number (int): 2576414790191589248625806414409517539
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d3:82:ed:2a:f6:4c:e3:3c:93:6c:e4:7f:08:0a:0b:58:87:2d:df:e2
AuthorityKeyId: ed:a0:e6:01:05:3e:34:82:1a:a4:4f:5f:c5:bd:11:41:aa:df:f3:61

Fingerprint (sha1): 28:18:72:a5:69:76:b2:e4:4a:7f:99:17:86:6a:d9:43:5c:28:28:7e
Fingerprint (sha256): 7e:63:97:b7:60:aa:b8:35:f3:2c:3e:6d:4a:b6:f4:f8:fd:58:f2:1e:88:13:4d:db:95:3b:c8:cd:98:81:89:fd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl

Check the revocation status for certificate imperva.com

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recepciondev-proveedores.xerox.com
*.docushare-test.com
moj-xsm-stg.services.xerox.com
preprod1ws.services.xerox.com
ds-securitytest.docushare.com
preprod1integration7.services.xerox.com
*.ssg.world.xerox.com
dev.carear.app
stage.carear.app
moj-sso-stg.corp.xerox.com
xics-stg.corp.xerox.com
www.docushare-innovation.xerox.com
aberdeenmailservice-stg.corp.xerox.com
test.econciergetools.com
welwyn-dam-stg.gdc.xerox.com
preprod1xrm3.services.xerox.com
tco.corp.xerox.com
www.docushare-xogpsg-dr.xerox.com
ifusion.corp.xerox.com
recepcion-proveedores.xerox.com
*.jp.qa.ai.carear.app
xeroxhts.external.xerox.com
staging1integration7.services.xerox.com
flight-sig-qa.portal.xerox.com
ppt-test.corp.xerox.com
nafapps.corp.xerox.com
ukps-ppd.corp.xerox.com
www.s3.external.xerox.com
dev.apiv2.carear.app
ip-xwc-eng-stg-neu.services.xerox.com
docushare-test.com
nhsbsa-portal-stg.corp.xerox.com
www.sitepecas.xerox.com.br
webportal.lasernetworks.com
ssbi-qc.corp.xerox.com
www.xeroxprintservicesubc.ca
ppm-test.corp.xerox.com
flight-col-qa.portal.xerox.com
xdsde-stg.services.xerox.com
felectronica.xerox.ec
moj-portal-stg.corp.xerox.com
aart.corp.xerox.com
ip-xwc-web-stg-weu.services.xerox.com
www.thefic.xerox.com
flight-ui-staging.portal.xerox.com
imperva.com
dhcpportaluk-stg.services.xerox.com
printportal-stg.services.xerox.com
advancedanalytics.services.xerox.com
digitisationportal-stg.services.xerox.com
gsnstage.xrxgsn.com
beta.apiv2.carear.app
www.xdocushare.xerox.com
gcm-test.corp.xerox.com
ba-portal-stg.corp.xerox.com
ip-xwc-eng-stg-weu.services.xerox.com
preprod1office.services.xerox.com
www.docushare-xogpsg.xerox.com
dealregistration-test.corp.xerox.com
ip-genesis-cs-stg-neu.services.xerox.com
preprod1transactions.services.xerox.com
tco-test.corp.xerox.com
workflowcentral-test.services.xerox.com
staging1jobticket.services.xerox.com
workflowcentral.services.xerox.com
staging1integration2.services.xerox.com
cmswebshop-stg.corp.xerox.com
pg-portal-stg.corp.xerox.com
ppmm.corp.xerox.com
staging1integration6.services.xerox.com
www.docushare.xerox.com
intelligentfiler-stage.services.xerox.com
intelligentfilerui-stage.services.xerox.com
ip-xwc-web-stg-neu.services.xerox.com
ip-xwc-svc-stg-neu.services.xerox.com
apiv2.carear.app
ppmm-test.corp.xerox.com
cmshelpdesk-stg.corp.xerox.com
dwprepro-dr.corp.xerox.com
gpecommerce-test.corp.xerox.com
gskreprographics-portal-stg.corp.xerox.com
cmswebshop-stg.external.xerox.com
*.api.docushare-test.com
uat.services.xerox.com
preprod1integration2.services.xerox.com
workflowcentral-development.services.xerox.com
*.docusharetest.net
ip-xwc-eip-stg-neu.services.xerox.com
ip-xwc-eip-stg-weu.services.xerox.com
dwprepro-stg.corp.xerox.com
pwm-api-test.corp.xerox.com
viit.corp.xerox.com
ip-genesis-cs-stg-weu.services.xerox.com
app-mpsaa-embedded-ppd.services.xerox.com
ifusion-test.corp.xerox.com
stage.apiv2.carear.app
ppt.corp.xerox.com
logonstage.xrxgsn.com
rmm-mst-01.itservices.services.xerox.com
*.jp.ai.carear.app
rmm-est-01.itservices.services.xerox.com
hosttest1xrm3.services.xerox.com
indtestnew.corp.xerox.com
test1.felectronica.xerox.ec
preprod1integrations.services.xerox.com
www.dmowoe.extranet.xerox.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEWMNJnA1GNjpy+vhIV3
yzeJVJBbiaJPOsiBcfOcYTdsxpQKcmkexAMo46CRg0K0BeMOKXLm2qytJEd77GKj
qx4mjlkephaRF4z7mEFhv7gRUXYhmpkbsUxfaAfN+nQidrpTdaa5nVvJ3KFVDlYV
a1xpW7X0mLjgegqgD4KtuHb9gqW7baruZ2cZrSoCMy6KNMTly79ijG52LZyNbto2
/JkB4DchVDE4+UA1Z7BOM/cWQgLxCWsOzSoVM3m02VtxQWXrzKG2Zs0ndObXT/CU
68i5qnQ1saovL/sZ6UrI0UaIo6Oq0P5gCKUjufLP+gUDYizixCqqbgGsO3JnpZOj
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2576414790191589248625806414409517539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 09:53:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 09:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23767096571655178370219257614946733458238826402595375616685886649171987666240349309934149441972469767135765361776820593784959755517859343000420731311155375366534773808044691578980593499984056717865775485768666776239665884927378827480335959454698030428066912706558405980476554960506315734838542565467022793248276940677437073065635796222383409230258765755074569160853032597060499003260047883955367627839728845025826547323971510142222426274045529582472050430345236110716308813943611193114577090317170483691149772982123672872309536263265236905755188829990920282961328847494481849521624742369750513853002359816210892432177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3289 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepciondev-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docushare-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-xsm-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1ws.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-securitytest.docushare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1integration7.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssg.world.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-sso-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xics-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-innovation.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberdeenmailservice-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.econciergetools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welwyn-dam-stg.gdc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1xrm3.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tco.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-xogpsg-dr.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifusion.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepcion-proveedores.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jp.qa.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeroxhts.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging1integration7.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight-sig-qa.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppt-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafapps.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukps-ppd.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s3.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-eng-stg-neu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docushare-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhsbsa-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitepecas.xerox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webportal.lasernetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssbi-qc.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xeroxprintservicesubc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight-col-qa.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdsde-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felectronica.xerox.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aart.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-web-stg-weu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefic.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight-ui-staging.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhcpportaluk-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedanalytics.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitisationportal-stg.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xdocushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-eng-stg-weu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1office.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare-xogpsg.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealregistration-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-genesis-cs-stg-neu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1transactions.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tco-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowcentral-test.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging1jobticket.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowcentral.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging1integration2.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmm.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging1integration6.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docushare.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentfiler-stage.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentfilerui-stage.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-web-stg-neu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-svc-stg-neu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmm-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmshelpdesk-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-dr.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpecommerce-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gskreprographics-portal-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmswebshop-stg.external.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.docushare-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1integration2.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowcentral-development.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docusharetest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-eip-stg-neu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-xwc-eip-stg-weu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwprepro-stg.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwm-api-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viit.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-genesis-cs-stg-weu.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-mpsaa-embedded-ppd.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifusion-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppt.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logonstage.xrxgsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmm-mst-01.itservices.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jp.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmm-est-01.itservices.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosttest1xrm3.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indtestnew.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.felectronica.xerox.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1integrations.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmowoe.extranet.xerox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d382ed2af64ce33c936ce47f080a0b58872ddfe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eda0e601053e34821aa44f5fc5bd1141aadff361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018aff41aec50000040300483046022100ba092867e95511d6a9f6617587982c96399261d66cf5800f26f65f0cd983891702210085eb149382b53776eea9c3b63801ed32f7f04175840b62287bef06015eacb5b8007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018aff41b0880000040300483046022100aa6acbccd232bb166c1205e903cb75c97c6e4bb163a472fb96742ca9c7d7a3150221008784f9d774a982c9eb020b1305e0603fd7f6204ebfe34158c1b324accda1d5170076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018aff41b1b7000004030047304502206e6072a6661165c179194a769aba065d68845996aae31e0a1c93196ed814b77b022100e0c3b3a99ff52c0c9db8f829b25998bf4ae842df8031893d7ebbc64f55a13278
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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