imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:ca:cc:f6:d3:43:34:a5:ae:ce:5f:c0:16:12:2d:7e was issued on by GlobalSign nv-sa.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ca:cc:f6:d3:43:34:a5:ae:ce:5f:c0:16:12:2d:7e
Serial Number (int): 2382229128278658225244482095528684926
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6e:da:fa:36:92:6a:9b:a8:6e:7e:f8:e3:d0:10:9c:6e:3d:1e:3b:18
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): e9:ec:8b:0d:37:d5:19:eb:9b:0e:93:a1:37:3d:78:8b:40:0c:38:28
Fingerprint (sha256): ca:c1:ae:3a:7b:23:03:e6:cd:4d:7b:aa:72:89:a0:ad:8b:01:45:72:79:96:d0:9c:54:e5:ed:19:df:d2:52:56

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advice.amp.com.au
northonline.amp.com.au
draft.amp.com.au
portal-uat.amp.com.au
secure-uat.amp.com.au
api.amp.com.au
secure.ampbanking.com
sso.amp.com.au
adviseriq.amp.com.au
portal.northonline.com.au
www.portal.amp.com.au
imperva.com
adviseriq-uat.amp.com.au
infosec.cdr.amp.com.au
www.portal-uat.amp.com.au
portal.amp.com.au
api-uat.amp.com.au
draftonline-test-ext.amp.com.au
teamtools.amp.com.au
*.ccoe-np.ampaws.com.au
advice-uat.amp.com.au
mishare.amp.com.au
m.secure.amp.com.au
employersuperonline.amp.com.au
secure.amp.com.au
testing.ampbanking.com
*.northonline.ampaws.com.au
sso-uat.amp.com.au
infosec-uat.np.cdr.amp.com.au
pt-bluedoor.amp.com.au
*.amp.com.au
draftonline.amp.com.au
m.secure-uat.amp.com.au

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFSl5J+dDvYZViGjNNqk
JMqyNhn/ydSdWg1xXRM6SUnDDwXtud5ocMMTNB0z/Nv4fXF2U9MT3Sg4cq1YrTTi
b7ZumPbOpkKL7u+dgOR0w08dReHxZZZSl3xGzuufpyL39JWvXuRQL4l7y+TeCdVI
RbnVdMkgXgloyKIpyJe6YSxj7mUW0EdOjAQNM6hotZeBg0tSAWMEkw8aBVdvJUNE
m1lpdOaWAhClNj5dNKp8X+X+XmyYTSuNvdD4PZK05+QX1Z5OVRoLR31UeRX7Jcl4
SS0kgnPuvi4EzLLz4b6jYM3UWnQPwUKP2HktO+P7F02el5n59/aJNlBRTt0KE5ED
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2382229128278658225244482095528684926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-27 07:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 07:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17210150969658179119864113059841052179761784397486516466180535008110944571514374755036213714822435823780551459988716603651747714120530963473404843805719093924563631488528767711093389879467160059709994088595052857291199133109340707045174908644911641481533543388665506525821362693307947640558073455633044630327582886764222762470818035071732382261906139831852315308877399668834336432383449646870270637863694309158358404199673461818163639782710137871161052751462398164622554574806368208684791909415282134121621804688968927023620996105109360271448921120942594895043467479628104915140062498461465862340416911397693573628723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (753 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advice.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northonline.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draft.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ampbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviseriq.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.northonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviseriq-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosec.cdr.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftonline-test-ext.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamtools.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccoe-np.ampaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advice-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.secure.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employersuperonline.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.ampbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northonline.ampaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-uat.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosec-uat.np.cdr.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-bluedoor.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftonline.amp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.secure-uat.amp.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6edafa36926a9ba86e7ef8e3d0109c6e3d1e3b18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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