imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:ea:7c:17:f5:a1:55:1c:d6:7d:b2:f1:08:31:df:fb was issued on by GlobalSign nv-sa.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ea:7c:17:f5:a1:55:1c:d6:7d:b2:f1:08:31:df:fb
Serial Number (int): 2546742377739522569495358674897592315
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0d:5d:08:6e:00:84:06:6e:cd:32:a8:0b:33:89:a1:5f:19:0f:a1:55
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): f7:c4:53:bb:b3:af:3a:96:f7:56:97:b6:32:3c:50:22:96:05:0e:ae
Fingerprint (sha256): cb:2b:1a:86:69:e2:67:cd:ae:0a:33:e6:9b:57:a2:a9:de:cc:04:d7:ac:4f:80:ee:00:55:33:65:50:28:d3:1d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitatranslationinterpreting.com
ycbps.co.uk
*.capita-mits.co.uk
*.entrust-ed.co.uk
*.ventura-crm.co.uk
*.redstartwales.com
gassaferegister.co.uk
*.gassaferegister.co.uk
mishare.co.uk
*.capitatranslationinterpreting.com
*.southoxon.gov.uk
*.uat.pcse.england.nhs.uk
redstartwales.com
t-mobilepension.co.uk
*.vwpension.co.uk
*.myattpension.co.uk
*.eapf.org.uk
*.hart.gov.uk
*.tascor.co.uk
eepension.co.uk
*.capitaonboard.com
*.mi-share.co.uk
*.squidgeit.com
*.csl-inn.co.uk
*.harrow.gov.uk
redsms.co.uk
*.optilead.co.uk
smartmate.co
*.t-mobilepension.co.uk
*.mythreadneedlepensions.co.uk
*.ycbps.co.uk
capitaintelligentcommunications.co.uk
*.capita-ti.com
capita-pip.co.uk
*.charnwood.gov.uk
*.staygassafe.co.uk
*.caterpillarpensions.co.uk
vwpension.co.uk
my-capita-europe.com
*.financialassessments.co.uk
*.bexley.gov.uk
capitaservicemanager.co.uk
*.voicegroup.co.uk
*.barnet.gov.uk
*.royalmailsps.co.uk
*.retaincloud.com
*.capita-ic.co.uk
*.capitapipjobs.co.uk
*.hartlinkonline.ie
eapf.org.uk
*.eepension.co.uk
hartlinkonline.ie
*.capita-europe.com
capitapipjobs.co.uk
entrust-ed.co.uk
*.lambeth.gov.uk
*.pcse.england.nhs.uk
*.whitehorsedc.gov.uk
staygassafe.co.uk
*.capita-im.co.uk
*.chks.co.uk
caterpillarpensions.co.uk
royalmailsps.co.uk
mythreadneedlepensions.co.uk
*.capitacm.co.uk
imperva.com
*.smartmate.co
barnet.gov.uk
tascor.co.uk
*.capitahartshead.co.uk
*.mishare.co.uk
*.updata.net
*.capitaservicemanager.co.uk
myattpension.co.uk
*.credit.trade.co.uk
*.my-capita-europe.com
*.capitawfm.co.uk
*.havant.gov.uk
*.tflpp.co.uk
*.capitaproperty.co.uk
*.redsms.co.uk
capita-europe.com
voicegroup.co.uk
*.mendip.gov.uk
*.scottishwan.com
*.capita-software.co.uk
optilead.co.uk
*.capitaintelligentcommunications.co.uk
*.capita-pip.co.uk
mi-share.co.uk

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdzGkDk+9/LIdNBGfad5
HCoEA85dsHtj8wDVNr+wpYuluYvJawDtAK/WYgtD41RH97MRMnyijQdxQqfXgUup
Bcb1ZXtKmXGyJ+BRBESMg+TRNUoGWDnTX3hMe9Z9JRO10Hu4wOuyJXuJyeiYA8+z
AsWaTEoKf61+qvMUMmUVaurNOuJK8YYsw2vNMGtLdrm8V0HApzSuyM/u/OR8ch8I
m5I1DntjHdCEYJkH4VYgJ58koTTGbTiBN5pKj43tmt8bGBkx+nR6ZR2JvG1+cT3+
LmC/caKYcCsbpl12eF1JpJ7ZyVBeahhAI9FzGE1vv2qIxb5PeGe/qRWaNAfxe8wK
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2546742377739522569495358674897592315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 16:49:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 16:49:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25987721042812951609183989796563422102001641091442172932509346436305409130804116079138263970396578551498257837229864340153043833528399952695796853026599550519773823359105600259315425904681289168193183769910240658464610876553714731235810695787263237110763592445291504153825561254141776785322297290740504308353146780983787454344017599037363311246809766781073346823446140577896294761304293793462883654780809535859929610872396304568513701550216435405388581304862549804293386728832153260000778791844094869585876332978569917949353181289359097281048852103881114103393372241381963963936244802191760377904855746913739333175823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-mits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventura-crm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gassaferegister.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatranslationinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southoxon.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redstartwales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hart.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaonboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi-share.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squidgeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csl-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrow.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycbps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charnwood.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialassessments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bexley.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retaincloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-ic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapf.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eepension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlinkonline.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitapipjobs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrust-ed.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambeth.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcse.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehorsedc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygassafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-im.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillarpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmailsps.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythreadneedlepensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitacm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnet.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitahartshead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaservicemanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit.trade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitawfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havant.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tflpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capita-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mendip.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottishwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaintelligentcommunications.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capita-pip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-share.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d5d086e0084066ecd32a80b3389a15f190fa155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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