ngsclient.ext.dev.kpmg.com

- KPMG International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4f:14:9a:f0:fe:6c:38:e7:00:00:00:00:50:dd:d1:9a was issued on by Entrust, Inc..

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KPMG International

Organization: KPMG International
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:14:9a:f0:fe:6c:38:e7:00:00:00:00:50:dd:d1:9a
Serial Number (int): 105116000188757041489518627151335510426
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 47:7a:17:f7:61:12:16:3c:a5:7c:f1:1f:1d:c7:1d:45:a8:f7:ad:dc
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fd:3b:ce:16:ef:5d:1b:e2:c4:77:6a:0d:29:0e:b8:75:34:e2:54:51
Fingerprint (sha256): 01:dc:f7:40:aa:ae:e0:b1:94:5d:73:d4:78:89:8e:6e:4f:aa:fc:e2:2e:3d:20:52:88:63:e2:92:6f:9c:95:12

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ngsclient.ext.dev.kpmg.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngsclient.ext.dev.kpmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ngsclient.ext.dev.kpmg.com
www.ngsclient.ext.dev.kpmg.com
kpmgclaraonazure.dev.kpmg.com
retainmobileappsaspac.dev.kpmg.com
fiorimobileappsaspac.dev.kpmg.com
kpmganywhere.dev.kpmg.com
advrcoqa.dev.kpmg.com
strategy.dev.kpmg.com
advrcint.dev.kpmg.com
www.kpmgspectrum.dev.kpmg.com
advrcpre.dev.kpmg.com
fiorimobileappsema.dev.kpmg.com
retainmobileappsema.dev.kpmg.com
applications.dev.kpmg.com
advrc.preview.kpmg.com
kcentral.ext.dev.kpmg.com
advrc.dev.kpmg.com
scorecard.preview.kpmg.com
deliverybackbone.dev.kpmg.com
ngsapi.ext.dev.kpmg.com
scorecard.dev.kpmg.com
kcint.dev.kpmg.com
kcext.dev.kpmg.com
fiorimobileapps.dev.kpmg.com
apps2.dev.kpmg.com
deliverybackbone2.dev.kpmg.com
deliverybackbone.dev.amr.kpmg.com
intra.dev.kpmg.com
offwebapps.dev.kpmg.com
retainmobileapps.dev.kpmg.com
kcentral.int.dev.kpmg.com
deliverybackbone2.dev.amr.kpmg.com
gdrm.dev.kpmg.com
mpp.dev.kpmg.com
fioriapps.dev.kpmg.com
kpmgspectrum.dev.kpmg.com
oos.dev.kpmg.com
sharedservices.dev.kpmg.com
alexcit.dev.kpmg.com
fioriappsaspac.dev.kpmg.com
fioriappsema.dev.kpmg.com
phapps.personal.dev.kpmg.com
knoema.dev.kpmg.com
sf-fiori.dev.kpmg.com
platforms.dev.kpmg.com
phapps.platforms.dev.kpmg.com
personal.dev.kpmg.com
modeling.deliverybackbone2.dev.kpmg.com
phapps.personal2.dev.kpmg.com
ngsmobile.dev.kpmg.com
fiori-sf.dev.kpmg.com
gip.dev.kpmg.com
gripapi.dev.kpmg.com
personal2.dev.kpmg.com
bpa.dev.kpmg.com
ngsint.dev.kpmg.com
alexmobile.dev.kpmg.com
dk-clientportal.dev.kpmg.com
portal15.dev.kpmg.com
clp.dev.kpmg.com
kcaudit.dev.kpmg.com
survey.dev.kpmg.com
gripclient.dev.kpmg.com
fioriappsn1.dev.kpmg.com
publisher.kpmgspectrum.dev.kpmg.com
fioriappseman1.dev.kpmg.com
author.kpmgspectrum.dev.kpmg.com
portal.dev.kpmg.com
webmail.dev.kpmg.com
modeling.deliverybackbone.dev.kpmg.com
samglobal.dev.kpmg.com
apps.dev.kpmg.com

Other certificates including the domain name kpmg.com

(limited to 100 certificates)
accounts.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com

Certificate

The complete raw certificate details for ngsclient.ext.dev.kpmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMmjCCC4KgAwIBAgIQTxSa8P5sOOcAAAAAUN3RmjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
NzA4MjQxMDE3MDNaFw0xOTA4MjQxMDQ2NTlaMHwxCzAJBgNVBAYTAk5MMRYwFAYD
VQQIEw1Ob29yZC1Ib2xsYW5kMRMwEQYDVQQHEwpBbXN0ZWx2ZWVuMRswGQYDVQQK
ExJLUE1HIEludGVybmF0aW9uYWwxIzAhBgNVBAMTGm5nc2NsaWVudC5leHQuZGV2
LmtwbWcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiQLwK79
OhG7Mlmkf5FfFLN89BQ5pOKnZs8NxTi0ufwmy+0KCt5Qmy25fS2N5Wp1BQ22PNsX
XWSh/1bXTKpMPTONumvN/qWHqbbdklnbGlpQLX65JExU87fo7NglbzroYo/DkTKL
iVfogL/MpwR8cGs6XJV+vFbCoXJuO/y1sCjx1+duY4soNgSH+qQkEvWTtKQ8m3XU
Lp5iMWD4PF7m3VdNmpZGt2q7QLr+0RGcmdCtUWAH1xiic2vqJ+5k66krFidGjSPp
4hrNusk0+C4ByIMpDBagQy3EmOJIiAkrUUiUxGbrLY+IpbmnZMcBCqjgME69WGC7
Tr1mfgJ5z7YjfwIDAQABo4II1zCCCNMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8v
Y3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6
bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAI
BgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5l
dC9sMWstY2hhaW4yNTYuY2VyMIIHaQYDVR0RBIIHYDCCB1yCGm5nc2NsaWVudC5l
eHQuZGV2LmtwbWcuY29tgh53d3cubmdzY2xpZW50LmV4dC5kZXYua3BtZy5jb22C
HWtwbWdjbGFyYW9uYXp1cmUuZGV2LmtwbWcuY29tgiJyZXRhaW5tb2JpbGVhcHBz
YXNwYWMuZGV2LmtwbWcuY29tgiFmaW9yaW1vYmlsZWFwcHNhc3BhYy5kZXYua3Bt
Zy5jb22CGWtwbWdhbnl3aGVyZS5kZXYua3BtZy5jb22CFWFkdnJjb3FhLmRldi5r
cG1nLmNvbYIVc3RyYXRlZ3kuZGV2LmtwbWcuY29tghVhZHZyY2ludC5kZXYua3Bt
Zy5jb22CHXd3dy5rcG1nc3BlY3RydW0uZGV2LmtwbWcuY29tghVhZHZyY3ByZS5k
ZXYua3BtZy5jb22CH2Zpb3JpbW9iaWxlYXBwc2VtYS5kZXYua3BtZy5jb22CIHJl
dGFpbm1vYmlsZWFwcHNlbWEuZGV2LmtwbWcuY29tghlhcHBsaWNhdGlvbnMuZGV2
LmtwbWcuY29tghZhZHZyYy5wcmV2aWV3LmtwbWcuY29tghlrY2VudHJhbC5leHQu
ZGV2LmtwbWcuY29tghJhZHZyYy5kZXYua3BtZy5jb22CGnNjb3JlY2FyZC5wcmV2
aWV3LmtwbWcuY29tgh1kZWxpdmVyeWJhY2tib25lLmRldi5rcG1nLmNvbYIXbmdz
YXBpLmV4dC5kZXYua3BtZy5jb22CFnNjb3JlY2FyZC5kZXYua3BtZy5jb22CEmtj
aW50LmRldi5rcG1nLmNvbYISa2NleHQuZGV2LmtwbWcuY29tghxmaW9yaW1vYmls
ZWFwcHMuZGV2LmtwbWcuY29tghJhcHBzMi5kZXYua3BtZy5jb22CHmRlbGl2ZXJ5
YmFja2JvbmUyLmRldi5rcG1nLmNvbYIhZGVsaXZlcnliYWNrYm9uZS5kZXYuYW1y
LmtwbWcuY29tghJpbnRyYS5kZXYua3BtZy5jb22CF29mZndlYmFwcHMuZGV2Lmtw
bWcuY29tgh1yZXRhaW5tb2JpbGVhcHBzLmRldi5rcG1nLmNvbYIZa2NlbnRyYWwu
aW50LmRldi5rcG1nLmNvbYIiZGVsaXZlcnliYWNrYm9uZTIuZGV2LmFtci5rcG1n
LmNvbYIRZ2RybS5kZXYua3BtZy5jb22CEG1wcC5kZXYua3BtZy5jb22CFmZpb3Jp
YXBwcy5kZXYua3BtZy5jb22CGWtwbWdzcGVjdHJ1bS5kZXYua3BtZy5jb22CEG9v
cy5kZXYua3BtZy5jb22CG3NoYXJlZHNlcnZpY2VzLmRldi5rcG1nLmNvbYIUYWxl
eGNpdC5kZXYua3BtZy5jb22CG2Zpb3JpYXBwc2FzcGFjLmRldi5rcG1nLmNvbYIZ
ZmlvcmlhcHBzZW1hLmRldi5rcG1nLmNvbYIccGhhcHBzLnBlcnNvbmFsLmRldi5r
cG1nLmNvbYITa25vZW1hLmRldi5rcG1nLmNvbYIVc2YtZmlvcmkuZGV2LmtwbWcu
Y29tghZwbGF0Zm9ybXMuZGV2LmtwbWcuY29tgh1waGFwcHMucGxhdGZvcm1zLmRl
di5rcG1nLmNvbYIVcGVyc29uYWwuZGV2LmtwbWcuY29tgidtb2RlbGluZy5kZWxp
dmVyeWJhY2tib25lMi5kZXYua3BtZy5jb22CHXBoYXBwcy5wZXJzb25hbDIuZGV2
LmtwbWcuY29tghZuZ3Ntb2JpbGUuZGV2LmtwbWcuY29tghVmaW9yaS1zZi5kZXYu
a3BtZy5jb22CEGdpcC5kZXYua3BtZy5jb22CFGdyaXBhcGkuZGV2LmtwbWcuY29t
ghZwZXJzb25hbDIuZGV2LmtwbWcuY29tghBicGEuZGV2LmtwbWcuY29tghNuZ3Np
bnQuZGV2LmtwbWcuY29tghdhbGV4bW9iaWxlLmRldi5rcG1nLmNvbYIcZGstY2xp
ZW50cG9ydGFsLmRldi5rcG1nLmNvbYIVcG9ydGFsMTUuZGV2LmtwbWcuY29tghBj
bHAuZGV2LmtwbWcuY29tghRrY2F1ZGl0LmRldi5rcG1nLmNvbYITc3VydmV5LmRl
di5rcG1nLmNvbYIXZ3JpcGNsaWVudC5kZXYua3BtZy5jb22CGGZpb3JpYXBwc24x
LmRldi5rcG1nLmNvbYIjcHVibGlzaGVyLmtwbWdzcGVjdHJ1bS5kZXYua3BtZy5j
b22CG2Zpb3JpYXBwc2VtYW4xLmRldi5rcG1nLmNvbYIgYXV0aG9yLmtwbWdzcGVj
dHJ1bS5kZXYua3BtZy5jb22CE3BvcnRhbC5kZXYua3BtZy5jb22CFHdlYm1haWwu
ZGV2LmtwbWcuY29tgiZtb2RlbGluZy5kZWxpdmVyeWJhY2tib25lLmRldi5rcG1n
LmNvbYIWc2FtZ2xvYmFsLmRldi5rcG1nLmNvbYIRYXBwcy5kZXYua3BtZy5jb20w
HwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFEd6F/dh
EhY8pXzxHx3HHUWo963cMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBADFM
CXVEetEgnPKhTi/nHHllASZCQ0DARMZVB9SCGlhG+3kfPwPIWE3leXyfVCBlnu5k
J5XBl/tlHo7eOncV5i0bgA4Pt2R3QY1QZoD9U2CNdARYPp0/VsQfp1ORnz0NPYdS
EsRh+NQrKKhMzQWgacAqJAe6gvsLxQC2EHoUjf0uYggxi7HWKfx2wv+Pqbig3HOx
2Z1KtdiMz5/Ma8H2EOwbW7rjPIPeRawkGIw4/f9ZnyERCekj6/pfBsYf77me1q16
WCcFI+AqltBTUXcoaVp9AWsJJaVteeiwZ2sThuekpYdqZ0Pei2j4j53wgwIv2mn6
oH5AHrCJs//EexRwADw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiQLwK79OhG7Mlmkf5Ff
FLN89BQ5pOKnZs8NxTi0ufwmy+0KCt5Qmy25fS2N5Wp1BQ22PNsXXWSh/1bXTKpM
PTONumvN/qWHqbbdklnbGlpQLX65JExU87fo7NglbzroYo/DkTKLiVfogL/MpwR8
cGs6XJV+vFbCoXJuO/y1sCjx1+duY4soNgSH+qQkEvWTtKQ8m3XULp5iMWD4PF7m
3VdNmpZGt2q7QLr+0RGcmdCtUWAH1xiic2vqJ+5k66krFidGjSPp4hrNusk0+C4B
yIMpDBagQy3EmOJIiAkrUUiUxGbrLY+IpbmnZMcBCqjgME69WGC7Tr1mfgJ5z7Yj
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105116000188757041489518627151335510426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-24 10:17:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 10:46:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ngsclient.ext.dev.kpmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16933707765594102741202271181214381202300036815478909651181285055130275034047273220752656469409836276148120794536300879895151189287948770031445292893805425701833590618620373554600904984868398427644466661022895238228778158049210760276294695649620466710087780445231428288102499078574116244098295976392977418985286454973296732458995834383150822284776308983997070946430636855505332757927023596188142338237266848248858593558064223307373724409732668539128608459524329483862037693573144138681196887542225668669579625198660709868081759312886997654679215756027547821404377585282236248749708500329343648139407817323051625096063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngsclient.ext.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngsclient.ext.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgclaraonazure.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retainmobileappsaspac.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiorimobileappsaspac.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmganywhere.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advrcoqa.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advrcint.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kpmgspectrum.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advrcpre.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiorimobileappsema.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retainmobileappsema.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applications.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advrc.preview.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcentral.ext.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advrc.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.preview.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliverybackbone.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngsapi.ext.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcint.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcext.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiorimobileapps.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliverybackbone2.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliverybackbone.dev.amr.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intra.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offwebapps.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retainmobileapps.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcentral.int.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliverybackbone2.dev.amr.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdrm.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpp.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriapps.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgspectrum.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedservices.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexcit.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriappsaspac.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriappsema.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knoema.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-fiori.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platforms.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.platforms.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modeling.deliverybackbone2.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal2.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngsmobile.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiori-sf.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gip.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gripapi.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal2.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpa.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngsint.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexmobile.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk-clientportal.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal15.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clp.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcaudit.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gripclient.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriappsn1.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publisher.kpmgspectrum.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriappseman1.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.kpmgspectrum.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modeling.deliverybackbone.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samglobal.dev.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dev.kpmg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							477a17f76112163ca57cf11f1dc71d45a8f7addc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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