origin-azureapps.stg.ema.kpmg.com

- KPMG International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8f:c6:cf:a3:b8:8f:af:73:00:00:00:00:50:f1:c4:64 was issued on by Entrust, Inc..

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KPMG International

Organization: KPMG International
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:c6:cf:a3:b8:8f:af:73:00:00:00:00:50:f1:c4:64
Serial Number (int): 191111889605330258151400688005166515300
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 46:1a:d5:af:9b:71:f3:4b:1b:07:00:86:51:c3:d9:d2:4e:63:4f:fe
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 45:00:b2:05:28:a6:af:a2:8d:5d:39:47:8b:c7:7c:7b:20:88:b3:b6
Fingerprint (sha256): 02:90:e9:f0:f9:05:c9:63:f4:c4:da:77:f8:f3:34:46:94:49:df:61:65:e4:9d:3c:16:9a:23:5d:86:99:96:b1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate origin-azureapps.stg.ema.kpmg.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-azureapps.stg.ema.kpmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-azureapps.stg.ema.kpmg.com
kcw.stg.ema.kpmg.com
riskreporting.stg.ema.kpmg.com
platformapps.stg.ema.kpmg.com
solutions.jp.stg.kpmg.com
globaldashboardsdev.kworld.kpmg.com
globaldashboardpoc.stg.ema.kpmg.com
kpmg-peerbank.stg.kpmg.com
oos.stg.ema.kpmg.com
claraleadership.stg.ema.kpmg.com
www.dk-clientportal.stg.kpmg.com
claramarketplace.stg.ema.kpmg.com
fioriipadn1.stg.ema.kpmg.com
kpmgclaraonazure.stg.ema.kpmg.com
fioriipad.stg.ema.kpmg.com
bpa.stg.ema.kpmg.com
phapps.personal.stg.ema.kpmg.com
bpa.demo.stg.ema.kpmg.com
oos.stg.kpmg.com
personal2.stg.kpmg.com
personal.stg.kpmg.com
personal.stg.ema.kpmg.com
phapps.personal2.stg.ema.kpmg.com
platforms.stg.kpmg.com
phapps.personal.stg.kpmg.com
phapps.platforms.stg.ema.kpmg.com
apps.stg.ema.kpmg.com
apps2.stg.ema.kpmg.com
phapps.platforms.stg.kpmg.com
personal2.stg.ema.kpmg.com
keystone.train.ema.kpmg.com
phapps.personal2.stg.kpmg.com
dk-clientportal.stg.kpmg.com
gip.stg.ema.kpmg.com
keystone.stg.ema.kpmg.com
platforms.stg.ema.kpmg.com
bpa.stg.amr.kpmg.com
samglobal.stg.ema.kpmg.com
bpa.demo.stg.amr.kpmg.com
azureappsmutualssl.stg.ema.kpmg.com
ceomessageca.stg.ema.kpmg.com
claramarketplacestg.stg.ema.kpmg.com
kpmgclaraonazuresup.stg.ema.kpmg.com
clientready.stg.ema.kpmg.com
kris.stg.ema.kpmg.com
gms.stg.kpmg.com
gmsgcoadmin.stg.kpmg.com
kpmgkcwoa1.stg.ema.kpmg.com
accreditation.stg.kpmg.com
echo2test.stg.cz.ema.kpmg.com
stg.kosmos.kpmg.com
kcwoos.stg.ema.kpmg.com
globaldashboards.stg.kpmg.com
kcwperf.stg.ema.kpmg.com
kcwperfoos.stg.ema.kpmg.com
kcwtds.stg.ema.kpmg.com
kcwtdsoos.stg.ema.kpmg.com
auditchatbot.stg.ema.kpmg.com
kpmgclaraonazureoos.stg.ema.kpmg.com
kpmgkcwoa1oos.stg.ema.kpmg.com

Other certificates including the domain name kpmg.com

(limited to 100 certificates)
accounts.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com

Certificate

The complete raw certificate details for origin-azureapps.stg.ema.kpmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiQuYIqOwbME+QwXrl6+
NqlSipWHK/SZaCHj8orY2Ugb/NC5yfo7iKdxNWcGi1PFhaqyg47pLcK0pRG3x3Cw
pAiHIoPbdsApKQue/HpHsir8QqPuPUHLayB0EMQ35MAaSS+Cvb+qshhamQ5Qtdh2
3M7f7hnXWEdL3G34yqz5KJ1rwGjqqIwOOte6RRmk6nBOJM/9Xt3QiQgoaH1nVIFf
rDqngeajvSfvPz/Ql9OuxjzJlMy0x1JbNXnusvOKEMOSXpRC5dW//ZL0eCmt6uae
Ke8h4vYAzhG9fjhu0Iz2uqG+xBUS1zKbi8q24s5UtUe5Lz9zbu1yCJd/NU/cA21U
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191111889605330258151400688005166515300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 14:20:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 14:50:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin-azureapps.stg.ema.kpmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25013025978538026700893304809020908611057498923347473097838472238230114226428942397651849863958495656389006592183908521660908259677840405865043195880698713700748734132781853387802644312166970296908841097498942249807059938549492336829707781631872116428035403956327425194195291317278015395319097718536259823721973711287608089671700772760294580856583705789072677560403064435122360163075725555856011020338792752446738749199082397260378985744178175282746757872042139652517703259609318923675629944356023763331204679216424210680531822289906664400301104865571577986703264251187670328517512134982031648708684572053290984756407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1735 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-azureapps.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcw.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskreporting.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformapps.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.jp.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldashboardsdev.kworld.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldashboardpoc.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg-peerbank.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claraleadership.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dk-clientportal.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claramarketplace.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriipadn1.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgclaraonazure.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioriipad.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpa.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpa.demo.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal2.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal2.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platforms.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.platforms.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.platforms.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal2.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.train.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phapps.personal2.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk-clientportal.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gip.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platforms.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpa.stg.amr.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samglobal.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpa.demo.stg.amr.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azureappsmutualssl.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceomessageca.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claramarketplacestg.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgclaraonazuresup.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientready.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kris.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmsgcoadmin.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgkcwoa1.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echo2test.stg.cz.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.kosmos.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwoos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldashboards.stg.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwperf.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwperfoos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwtds.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwtdsoos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditchatbot.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgclaraonazureoos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmgkcwoa1oos.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ac11f8d020000040300483046022100d899f51ef46b9f101286751fbd06cda0f31de2b007ce1581a6fcedabe3da032a0221008419c2e2ccf6e9460efccbb10737868d7a162d79337d84e25abfdeae6f545fb40076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016ac11f8d3b0000040300473045022100a54b35e07a52774cacabe62e89f4c53bf5f23112124fdd207a2630dd3396e7620220508e35a138c4ec93f6b8e8eef3125c3916bcae6743bd50605b307deedb9f16f6007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ac11f8d1e00000403004830460221008543206d0d37d732d78e9a27a69c87ae9afecb7d6635a4fd9694a7a176be022c02210086bebc204309d19ab05ef2776ab7553c7aa6f31556c5ae91137353ba62d494c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							461ad5af9b71f34b1b07008651c3d9d24e634ffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027d2395a61b4d7edfc71478859bee8673079a6c3d52e28160a7af17f7e91f146c2cd7527162ab075fa5c80456efc2126f2fd0c441bf3b3f02e42556e2d3c0424b356773f8d86c668b11e270baabdb5036c683905648267dae572868428e4407039e8b8e43d471465f243a5d2ecbab8634ab12f808dfb5f1335e39457ce307bcb5b03de900ac7d30c5c59ab148898245ee0767119dca418f5a09beb9f384896d38ee1c2571c418ed07a0c2972cbfd060edf51e69c03e534b2c9b4d2c971bc503cf8eb57096cfaba1a72557f5f538ef7329b71d300d1b2fc6c85cccea9e9d2b40b2670c4e1209c2b717e884fbd1d5ed8744d7f8fa2b92a84b2ed4e5d1cdfa0d78c