Kcfcapi.stg.ema.kpmg.com

- KPMG International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 14:e8:24:cc:3a:77:0e:bb:29:d4:f2:95:e2:e0:f5:87 was issued on by Entrust, Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KPMG International

Organization: KPMG International
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 14:e8:24:cc:3a:77:0e:bb:29:d4:f2:95:e2:e0:f5:87
Serial Number (int): 27789919134263344145813705130732746119
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 49:17:77:b2:e4:c8:38:1e:29:94:bf:82:11:69:1b:6b:c9:e9:d4:17
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 62:48:a1:cf:9d:9a:1c:d1:70:3e:87:d0:34:07:9d:a1:d4:d7:d5:23
Fingerprint (sha256): 02:a2:c4:73:59:bb:65:9a:85:15:57:3a:d6:6a:ea:39:51:76:07:dc:42:e4:ee:fb:f4:46:0a:7a:37:5f:05:97

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate Kcfcapi.stg.ema.kpmg.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Kcfcapi.stg.ema.kpmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Kcfcapi.stg.ema.kpmg.com
audneustg-kcfc-funapp02.goapps.kpmg.com
audneustg-kcfc-funapp02.scm.goapps.kpmg.com
audneustg-kcfc-webapp02.goapps.kpmg.com
audneustg-kcfc-webapp02.scm.goapps.kpmg.com
audweustg-kcfc-funapp01.goapps.kpmg.com
audweustg-kcfc-funapp01.scm.goapps.kpmg.com
audweustg-kcfc-funapp02.goapps.kpmg.com
audweustg-kcfc-funapp02.scm.goapps.kpmg.com
audweustg-kcfc-webapp01.goapps.kpmg.com
audweustg-kcfc-webapp01.scm.goapps.kpmg.com
audweustg-kcfc-webapp02.goapps.kpmg.com
audweustg-kcfc-webapp02.scm.goapps.kpmg.com
Kcfcapi1.stg.ema.kpmg.com
kcfcapidr.stg.ema.kpmg.com
Kcfcint.stg.ema.kpmg.com
Kcfcint1.stg.ema.kpmg.com
kcfcintdr.stg.ema.kpmg.com
www.Kcfcapi.stg.ema.kpmg.com

Other certificates including the domain name kpmg.com

(limited to 100 certificates)
accounts.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com

Certificate

The complete raw certificate details for Kcfcapi.stg.ema.kpmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu91mT1NKdvzT2W775hKH
7IQhRYemiTv7MlU2uwI0IjsHZdXv5YqsbOUbg2BO/SBfbzg2jCljkmshv3NZRWaW
z6FVYK4lDALHSDKnocERg5O5iihrYlczOsQlk1iEkkWAsybRyshFyWzU+AHY8tFG
+b7ixIR3EaMKJ2hB2m0BjJ5+gNMwjZ7Z+FN9KG4Vq6tafC5S3c04rDhHDDr/riYT
p3gn4vdWJBp7jh4W4rIteuGga307MkuLJk/LBxmCnVe4TJEF9WFYXg2jln8z56Ye
vy/I2piT5vP9jPNykRUmtSrmZKH4Qb4Wn0sWsRGAPeI/pMwJY7sWIi3xCKZuMvFa
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27789919134263344145813705130732746119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-07 17:07:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 17:07:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kcfcapi.stg.ema.kpmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23715739264090839564385315827333302471633253389454032431758697612856124779146966362160517844820043940079790648637206920975777213889658352803870121965853329027193634322860200314769394103681146840324393516538480209486644530741555307325683496223036140305137523952311816123058793009917705531847455299518645978602215298370085523137805715460482142736100433873636033329073570172345592811014328581267716606625962984985911941329147850572001883197403455429032788262134557049505350149919329402799541516370165644707637218317830085369840195874386242261260594753065385180520654644377353379659766866083183943318376961241173573327381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							491777b2e4c8381e2994bf8211691b6bc9e9d417
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Kcfcapi.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audneustg-kcfc-funapp02.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audneustg-kcfc-funapp02.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audneustg-kcfc-webapp02.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audneustg-kcfc-webapp02.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-funapp01.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-funapp01.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-funapp02.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-funapp02.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-webapp01.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-webapp01.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-webapp02.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audweustg-kcfc-webapp02.scm.goapps.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Kcfcapi1.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcfcapidr.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Kcfcint.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Kcfcint1.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcfcintdr.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Kcfcapi.stg.ema.kpmg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187f72e6a580000040300473045022100e79dfa070462a7cca01ecd953c1d8493b651d80a49ca64c5d6df78c333c24c270220522f80ab8b38b33f78a951f0f96b2208b5cc91b4bcd2f1a207ea15a5740c1e0900740073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000187f72e6a8b000004030045304302201caaea517dcff03ed5bad5e4f250031b483c85d8e277a5c8a748d9e1b3bc551b021f374ecf4cf54041f8a5d2eabf4e709aa2f888141c448463ae6622d4686169750076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad41700000187f72e6a8c0000040300473045022100d77e4d65923533f03a7f9c4c3fdecebfeef9e36a79808cd45d9c39fcf27378d00220323d6a9dee1724ddc97a622027bbf89959e59a5c96babfbcf1ae687deec9a316
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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