os-app-callback.1642.aws.thomsonreuters.com

- Thomson Reuters Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 2a:1a:63:37:2a:e3:47:5f:46:57:a1:0b:92:bc:dd:8e was issued on by COMODO CA Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Thomson Reuters Corporation

Organization: Thomson Reuters Corporation
State / Province: Ontario
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 2a:1a:63:37:2a:e3:47:5f:46:57:a1:0b:92:bc:dd:8e
Serial Number (int): 55964587870661205599290909292152806798
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8f:36:1a:08:62:cd:d7:7b:11:5c:ca:71:75:d6:5d:cb:f9:be:a3:91
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 7e:a1:4c:ab:cf:1d:3f:0e:49:7b:60:a7:ac:62:34:c8:74:72:d6:fc
Fingerprint (sha256): 02:0a:cb:05:f9:89:95:b0:56:43:d0:e5:29:13:cf:2f:29:88:f3:50:94:5c:ee:3c:83:5d:2d:30:36:c6:28:7d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate os-app-callback.1642.aws.thomsonreuters.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for os-app-callback.1642.aws.thomsonreuters.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

os-app-callback.1642.aws.thomsonreuters.com

Other certificates including the domain name thomsonreuters.com

(limited to 100 certificates)
qa.eunison.thomsonreuters.com
hk.remoteaccess.thomsonreuters.com
lab-dfci.int.thomsonreuters.com
inews-login.thomsonreuters.com
calendar-entity-sat-use1.tr-tax-prod.aws-int.thomsonreuters.com
andrei-test.stpg-personal.space
c423dvxixaped.intqa.thomsonreuters.com
pi.thomsonreuters.com
www.highq.com
security-irm-dev.int.thomsonreuters.com
eage-vcucm-lab-pub.ten.thomsonreuters.com
euem-lsl-a01.int.thomsonreuters.com
apidocs.edp.thomsonreuters.com
thomsonreuters.com
qa2.questionnaire.polling.int.thomsonreuters.com
*.jiveon.com
www.highq.com
aconex-status.oraclecloud.com
amers1.stream.ia.thomsonreuters.com
emea1.heartbeat.cp.thomsonreuters.com
brightcoveservices-dev.api.thomsonreuters.com
prod-euw1.tpri-204979.fr.aws.thomsonreuters.com
uat-use1-oxp.tr-tax-prod.aws-int.thomsonreuters.com
andrei-test.stpg-personal.space
amers2.bizcharts.cp.thomsonreuters.com
sftp-qa.ebs.thomsonreuters.com
htcn-d3mnagm01.int.thomsonreuters.com
amers1.views4static3.cp.thomsonreuters.com
amers2.streaming-eue.cp.thomsonreuters.com
c645tayfin21a.int.thomsonreuters.com
amers1.gateway.cp.thomsonreuters.com
mailin7-tr.thomsonreuters.com
aconex-status.oraclecloud.com
legal.thomsonreuters.com.au
tpri-204979.tr-fr-nonprod.aws-int.thomsonreuters.com
goldtier-shell.financial.thomsonreuters.com
wel-int.ewp.thomsonreuters.com
iw-chart1.ocb.iwealth.thomsonreuters.com
dftest.datafusion.thomsonreuters.com
EAGE-VCUCM-LAB-PUB.int.thomsonreuters.com
tms1.int.thomsonreuters.com
stgqa.tacss.thomsonreuters.com
orchwebvm01.int.thomsonreuters.com
qed.nextgen-apigw.9297.aws.thomsonreuters.com
dep-ci-services.tr-tax-nonprod.aws-int.thomsonreuters.com
admin-portal-alpha.collab.int.thomsonreuters.com
londontvcloud.rtv.thomsonreuters.com
oneauthentication.int.thomsonreuters.com
cpa-orchestrator-dev.tr-tax-nonprod.aws-int.thomsonreuters.com
stg.clk.iwealth.thomsonreuters.com
apps.cp.thomsonreuters.com
beta.blockoneiq.thomsonreuters.com
snowplow.projectne.thomsonreuters.com
www.practicetechnology.thomsonreuters.com
www.highq.com
globalproductcatalog.thomsonreuters.com
cms.insiderred.thomsonreuters.com
hhtrust.wellsky.com
qa.support.int.thomsonreuters.com
philips.cdb.thomsonreuters.com
ws.staging.1p.thomsonreuters.com
www.highq.com
license.prod.taxone.thomsonreuters.com
dev-billingsupport.checkpoint.thomsonreuters.com
emerald-ingest.0712.aws-int.thomsonreuters.com
*.thomsonreuters.com
serengeti.boomstickautoservices.int.thomsonreuters.com
corporates-status.thomsonreuters.com
www.highq.com
amers2.test.cp.thomsonreuters.com
prodw8.support.rg.thomsonreuters.com
c378wtgfin11a.int.thomsonreuters.com
mojito.thomsonreuters.com
build.aaa.int.thomsonreuters.com
3130e863.status.cleafy.cloud
AMERS1.BIZCHARTS.CP.THOMSONREUTERS.COM
businesssystems-htd.90719.aws.thomsonreuters.com
dev.eunison.thomsonreuters.com
transactions.thomsonreuters.com
leapfrog-ssl-7.gcs-web.com
mysitedev.thomsonreuters.com
5646535253557248-fe3.pantheonsite.io
c800hubqed.int.thomsonreuters.com
uatdante.int.thomsonreuters.com
amers2.admin.cp.thomsonreuters.com
updates.thomsonreuters.com
us2p-license-ime.int.thomsonreuters.com
sts.ocb.iwealth.thomsonreuters.com
dev-legaledcenter.thomsonreuters.com
eage-vcucm-lab-pub.ten.thomsonreuters.com
api.inferno-ci.int.thomsonreuters.com
graphics.thomsonreuters.com
www.highq.com
5646535253557248-fe3.pantheonsite.io
apac1.eikon.cp.thomsonreuters.com
os-app-callback.1642.aws.thomsonreuters.com
apac1.streaming-fxall.cp.thomsonreuters.com
*.eg.int.thomsonreuters.com
linsi-api-dev.tr-corporate-nonprod.aws-int.thomsonreuters.com
chat.thomsonreuters.com

Certificate

The complete raw certificate details for os-app-callback.1642.aws.thomsonreuters.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ehVY7k0gj/WI4cUik1E
qF7SaNxHYqEJpqlMPp4ptwyDR5n8oJWiD+KlyjNGSEcHOaqYv/t9Y0CJVU3Ybi54
pBjKEt+eKoG4Ctc7UP3zM1aWSzW+rvElleYyQ/iHdQwwTaeOB9XBevDuKH7icj+t
fIisOl+yE0D0yJi1gc4y1qtlP3md5O0HxfAnqNc9bZQ6U/upNQePw5ejnCADw6rc
3DIhbzQSwKbGVzUeEymMrHvM69M0Rumy3dFFEhySakGLQnVDbqUxZjVfU58CZwPN
PMAZzWhV2hfGJXIYLyiwXFZb5avC6bjjk3KvCayoTnkVMgkicc8qiKtPr5hYIG2t
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55964587870661205599290909292152806798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'os-app-callback.1642.aws.thomsonreuters.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26498373682851563672650761371362844407230023939756495167744942347224870240980025323211619824369005704838812939611040787366044595364082767109050664176714913035680017163755754026733630199095604436560828401501929343319103011742805096565663466378417905087176199525089955780061478920254275255840340565342161266328999966447013943323684674827641247345320644409671409629769802079299493989571642287399049406142025041668040053157042415233100475621476002417717547658467174457106994893225919290223069321825109400039607101329481936791639747782502256886628409136934086528716442999845135207034773857075135642128559750195303798386107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f361a0862cdd77b115cca7175d65dcbf9bea391
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'os-app-callback.1642.aws.thomsonreuters.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003badb820e976bcb37428c56b37a20ee7d4b1b409f30f9824cd32093ad1086af8e7ab66813b2ac12dae9319df9d9602db713889e38ea8503fa7b950e4940641b8e6d362c40626612e5abe80073d62bb3ddbf42db08f7f75f551d123bfa23e535243ab084bb3ea709ff58fd2fbf39dea5052a82e679fee4716e25af17718b683c727b9102f91a29ecebaef10961949f2ff24261a03087dcd01ff42a8ee97be42546f5071c854c4a310cf14556b3732ffeb65cf5abb05ce04ec4520e038d0d6dba24d28cb6414804e8bbeb886f58cca260306aa28f5d1246849f09bdeab0bca9ccdcbdd29137b1e51f0eca8603fd2668cc76b9b69cdd0106b82e3aa87248a97df3d