imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:b2:83:d8:42:fa:d9:f6:f0:e1:45:63:17:7c:1a:3a was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b2:83:d8:42:fa:d9:f6:f0:e1:45:63:17:7c:1a:3a
Serial Number (int): 2256130966274568052600180108127115834
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0d:5d:08:6e:00:84:06:6e:cd:32:a8:0b:33:89:a1:5f:19:0f:a1:55
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): a2:02:f6:d4:43:4c:a9:b1:43:b6:94:ca:b5:66:00:38:ac:8d:d7:10
Fingerprint (sha256): 94:95:37:27:ed:64:1c:3b:6a:5c:37:23:3a:8a:20:d9:56:5e:be:09:16:8f:ba:4e:a2:18:29:bb:35:63:ce:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitatranslationinterpreting.com
ycbps.co.uk
*.capita-mits.co.uk
*.entrust-ed.co.uk
*.ventura-crm.co.uk
*.pensionscams.co.uk
*.redstartwales.com
gassaferegister.co.uk
*.gassaferegister.co.uk
mishare.co.uk
*.capitatranslationinterpreting.com
*.southoxon.gov.uk
*.uat.pcse.england.nhs.uk
redstartwales.com
t-mobilepension.co.uk
*.vwpension.co.uk
*.myattpension.co.uk
*.eapf.org.uk
*.hart.gov.uk
*.tascor.co.uk
eepension.co.uk
*.capitaonboard.com
*.mi-share.co.uk
*.squidgeit.com
*.csl-inn.co.uk
*.harrow.gov.uk
redsms.co.uk
*.optilead.co.uk
pensionscams.co.uk
smartmate.co
*.t-mobilepension.co.uk
*.mythreadneedlepensions.co.uk
*.ycbps.co.uk
capitaintelligentcommunications.co.uk
*.capita-ti.com
capita-pip.co.uk
*.easthants.gov.uk
*.charnwood.gov.uk
*.staygassafe.co.uk
*.caterpillarpensions.co.uk
vwpension.co.uk
my-capita-europe.com
*.financialassessments.co.uk
*.bexley.gov.uk
capitaservicemanager.co.uk
*.voicegroup.co.uk
*.barnet.gov.uk
*.royalmailsps.co.uk
*.retaincloud.com
*.capita-ic.co.uk
*.capitapipjobs.co.uk
*.hartlinkonline.ie
eapf.org.uk
*.eepension.co.uk
hartlinkonline.ie
*.capita-europe.com
*.inthost.net
capitapipjobs.co.uk
entrust-ed.co.uk
*.lambeth.gov.uk
*.pcse.england.nhs.uk
*.whitehorsedc.gov.uk
staygassafe.co.uk
*.capita-im.co.uk
*.chks.co.uk
caterpillarpensions.co.uk
royalmailsps.co.uk
mythreadneedlepensions.co.uk
*.capitacm.co.uk
imperva.com
*.smartmate.co
barnet.gov.uk
tascor.co.uk
*.capitahartshead.co.uk
*.mishare.co.uk
*.updata.net
*.capitaservicemanager.co.uk
myattpension.co.uk
*.credit.trade.co.uk
*.my-capita-europe.com
*.capitawfm.co.uk
*.havant.gov.uk
*.tflpp.co.uk
*.capitaproperty.co.uk
*.redsms.co.uk
capita-europe.com
voicegroup.co.uk
*.mendip.gov.uk
*.scottishwan.com
*.capita-software.co.uk
optilead.co.uk
*.capitaintelligentcommunications.co.uk
*.capita-pip.co.uk
mi-share.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdzGkDk+9/LIdNBGfad5
HCoEA85dsHtj8wDVNr+wpYuluYvJawDtAK/WYgtD41RH97MRMnyijQdxQqfXgUup
Bcb1ZXtKmXGyJ+BRBESMg+TRNUoGWDnTX3hMe9Z9JRO10Hu4wOuyJXuJyeiYA8+z
AsWaTEoKf61+qvMUMmUVaurNOuJK8YYsw2vNMGtLdrm8V0HApzSuyM/u/OR8ch8I
m5I1DntjHdCEYJkH4VYgJ58koTTGbTiBN5pKj43tmt8bGBkx+nR6ZR2JvG1+cT3+
LmC/caKYcCsbpl12eF1JpJ7ZyVBeahhAI9FzGE1vv2qIxb5PeGe/qRWaNAfxe8wK
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2256130966274568052600180108127115834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 11:25:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 11:25:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25987721042812951609183989796563422102001641091442172932509346436305409130804116079138263970396578551498257837229864340153043833528399952695796853026599550519773823359105600259315425904681289168193183769910240658464610876553714731235810695787263237110763592445291504153825561254141776785322297290740504308353146780983787454344017599037363311246809766781073346823446140577896294761304293793462883654780809535859929610872396304568513701550216435405388581304862549804293386728832153260000778791844094869585876332978569917949353181289359097281048852103881114103393372241381963963936244802191760377904855746913739333175823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-mits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-crm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southoxon.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hart.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaonboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi-share.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squidgeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csl-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrow.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionscams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easthants.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charnwood.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialassessments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bexley.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaincloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inthost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambeth.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehorsedc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-im.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitahartshead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitawfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havant.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tflpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mendip.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottishwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-share.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d5d086e0084066ecd32a80b3389a15f190fa155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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