*.cf.sapcp.cloud.ibm.com

- International Business Machines Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:21:59:4e:68:35:bf:2e:cd:e5:f1:be:65:a4:fd:95 was issued on by DigiCert Inc.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

International Business Machines Corporation

Organization: International Business Machines Corporation
Organization unit: IBM Cloud
State / Province: New York
Locality: Armonk
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:21:59:4e:68:35:bf:2e:cd:e5:f1:be:65:a4:fd:95
Serial Number (int): 9477753113328878458598667736624463253
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 60:63:d8:dc:23:05:bb:90:cb:e3:30:21:49:87:3c:d4:e2:9c:67:c1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ee:89:e9:98:9d:66:9a:36:da:2e:45:c8:39:94:07:06:b6:64:77:67
Fingerprint (sha256): 01:20:a3:2d:88:be:80:c3:42:3e:8f:56:95:c6:24:87:47:62:85:d9:2c:54:9e:45:5d:b6:d5:59:1e:93:2a:09

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.cf.sapcp.cloud.ibm.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cf.sapcp.cloud.ibm.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cf.sapcp.cloud.ibm.com
*.authentication.sapcp.cloud.ibm.com
*.login.cf.sapcp.cloud.ibm.com
*.uaa.cf.sapcp.cloud.ibm.com
*.cfapps.sapcp.cloud.ibm.com
*.iot-sap.cfapps.sapcp.cloud.ibm.com
*.sb-iot-sap.cfapps.sapcp.cloud.ibm.com
*.ci-iot-sap.cfapps.sapcp.cloud.ibm.com
*.perf-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.ci-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.sb-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.perf-iot-sap.cfapps.sapcp.cloud.ibm.com
*.demo-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.demo-iot-sap.cfapps.sapcp.cloud.ibm.com
*.sh-iot-sap.cfapps.sapcp.cloud.ibm.com
*.sh-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
*.engine-tt-sap.cfapps.sapcp.cloud.ibm.com
*.engine-tt-hf-sap.cfapps.sapcp.cloud.ibm.com
*.cng-sap.cfapps.sapcp.cloud.ibm.com
*.app-tt-sap.cfapps.sapcp.cloud.ibm.com
*.app-tt-hf-sap.cfapps.sapcp.cloud.ibm.com
*.qual-hcp-sap.cfapps.sapcp.cloud.ibm.com
*.admin.cfapps.sapcp.cloud.ibm.com
*.telemetry.sapcp.cloud.ibm.com
*.xsuaa-api.sapcp.cloud.ibm.com
authentication.sapcp.cloud.ibm.com
admin.cfapps.sapcp.cloud.ibm.com
xsuaa-api.sapcp.cloud.ibm.com
cf.sapcp.cloud.ibm.com
login.cf.sapcp.cloud.ibm.com
uaa.cf.sapcp.cloud.ibm.com
cfapps.sapcp.cloud.ibm.com
iot-sap.cfapps.sapcp.cloud.ibm.com
sb-iot-sap.cfapps.sapcp.cloud.ibm.com
ci-iot-sap.cfapps.sapcp.cloud.ibm.com
perf-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
flp-iot-sap.cfapps.sapcp.cloud.ibm.com
ci-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
sb-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
perf-iot-sap.cfapps.sapcp.cloud.ibm.com
demo-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
demo-iot-sap.cfapps.sapcp.cloud.ibm.com
sh-iot-sap.cfapps.sapcp.cloud.ibm.com
sh-flp-iot-sap.cfapps.sapcp.cloud.ibm.com
engine-tt-sap.cfapps.sapcp.cloud.ibm.com
engine-tt-hf-sap.cfapps.sapcp.cloud.ibm.com
cng-sap.cfapps.sapcp.cloud.ibm.com
app-tt-sap.cfapps.sapcp.cloud.ibm.com
app-tt-hf-sap.cfapps.sapcp.cloud.ibm.com
qual-hcp-sap.cfapps.sapcp.cloud.ibm.com
telemetry.sapcp.cloud.ibm.com

Other certificates including the domain name ibm.com

(limited to 100 certificates)
sasvpn03.pok.ibm.com
webdk.dst.ibm.com
eventstreams.cloud.ibm.com
*.admin.cfapps.sapcp.cloud.ibm.com
eu-de-2-0.eu-de.apiconnect.test.cloud.ibm.com
www-919.ibm.com
*.cau.ibm.com
w3-501.ibm.com
statuspage.io
iespccu.sras.ibm.com
devops.test.cloud.ibm.com
prod-0.eu-de.apiconnect.cloud.ibm.com
sni.cloudflaressl.com
ssl515828.cloudflaressl.com
statuspage.io
iha01wdc.private.us-south.websphereappsvr.cloud.ibm.com
el01.podc.sl.edst.ibm.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mhasportal.mhas.ibm.com
ssl965152.cloudflaressl.com
watsonwork.ibm.com
gbnh2is220sdmxm.uk.ibm.com
gbsjira.in.edst.ibm.com
sni.cloudflaressl.com
ssl942376.cloudflaressl.com
ic-prestage-1-1.eu-de.apiconnect.test.cloud.ibm.com
sni.cloudflaressl.com
*.us-south.db2oncloud.cloud.ibm.com
ssl965007.cloudflaressl.com
*.cloudantnosqldb.cloud.ibm.com
statuspage.io
www.ess5.de.smi.ibm.com
download3.boulder.ibm.com
statuspage.io
dev-api-us.sec.ibm.com
web-chat.assistant.watson.cloud.ibm.com
containers.cloud.ibm.com
eu.smi.ibm.com
d24bml09.br.ibm.com
*.swg.usma.ibm.com
ssl748572.cloudflaressl.com
statuspage.io
mea.newsroom.ibm.com
frgr11ng23008.ng2.mop.ssm.sdc.gts.ibm.com
*.resource-controller.preprod.cloud.ibm.com
sni.cloudflaressl.com
ssl944689.cloudflaressl.com
resource-controller.cloud.ibm.com
sni.cloudflaressl.com
sni.cloudflaressl.com
domino.research.ibm.com
www.ibm.com
appflow.test.saas.ibm.com
staples.us-east.apiconnect.cloud.ibm.com
sni.cloudflaressl.com
ssl903019.cloudflaressl.com
ssl875348.cloudflaressl.com
service5.boulder.ibm.com
confluence-dev.wce.ibm.com
*.iacs.ibm.com
*.tools.ibm.com
alertmanager-mcsp.core.ibm.us-east.platform.test.saas.ibm.com
w3.tap.ibm.com
ssl439395.cloudflaressl.com
sni.cloudflaressl.com
ssl876250.cloudflaressl.com
sni.cloudflaressl.com
status-beta.cloud.tenable.com
ssl505185.cloudflaressl.com
sni.cloudflaressl.com
hostedb2-scale-fyp.eu-de.db2oncloud.cloud.ibm.com
*.bastionx.cloud.ibm.com
ssoqa-mssiam.sec.ibm.com
ocp-550002y9v5-qx16.cloud.techzone.ibm.com
ssl389895.cloudflaressl.com
*.sandbox.maximomro.ibmiot.ibm.com
eventstreams.cloud.ibm.com
www.ibm.com
statuspage.io
isrvce.ibm.com
sni.cloudflaressl.com
eu-gb.monitoring.test.cloud.ibm.com
sni.cloudflaressl.com
ctl-remote-access-ps.boulder.us.sni.ibm.com
sni.cloudflaressl.com
msciftpgw.im-ies.ibm.com
hub.8b6a-441cd40b.eu-de.apiconnect.cloud.ibm.com
sni.cloudflaressl.com
*.rmc.test.cloud.ibm.com
sni.cloudflaressl.com
celsiusnetworkstatus.com
monitor.jumio.com
*.icds.ibm.com
ssl419666.cloudflaressl.com
ssl943434.cloudflaressl.com
sni.cloudflaressl.com
ssl942441.cloudflaressl.com
*.cf.sapcp.cloud.ibm.com
bpg-auth-tst.partnerworld.ibm.com

Certificate

The complete raw certificate details for *.cf.sapcp.cloud.ibm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9477753113328878458598667736624463253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Armonk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International Business Machines Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IBM Cloud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cf.sapcp.cloud.ibm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764380677997779682462468238039415703393909460469866585081076573174838445525158331029189839030030632078891402193898295985924239211475876614337154041194633269406403859666685090337703534153562498433614134712480055788291420574168240872734688653158135549058829497537836433836139691465545022530308441269229259271373369061365152352138731208722077195424291872620104965677671235652814225809186719712295088288339810982255355210546573129669945717868651628041666635226396849271320126456321046185159509895704351536587698620252454741252878290485655039706637496657045686815563893853893765347833416422467292759276099757323979939170322141923309324293855990041354962658981635265646027962450354233319840350954842054848088747169694502436863424201514608458349302046974188416435682622053986089935566234582127292338261634877949911410258460368040984929109215230689970191004011466863877301083813267404354553015952913071413775580306609482859805914835153683897051861646177552710649674354541967857224030289710196588796957367758683247052166696540887989535873295580033745807404342048490422185423822018301218880691918376260578297064508466547537391555495950780113495173396489555865388950787795168706597914478507118553287230073154340820490920645135617588735539191267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6063d8dc2305bb90cbe3302149873cd4e29c67c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2018 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.authentication.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uaa.cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ci-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sh-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sh-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engine-tt-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engine-tt-hf-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cng-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app-tt-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app-tt-hf-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qual-hcp-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telemetry.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsuaa-api.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsuaa-api.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaa.cf.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-flp-iot-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engine-tt-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engine-tt-hf-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cng-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-tt-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-tt-hf-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qual-hcp-sap.cfapps.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemetry.sapcp.cloud.ibm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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