ws-vpn-pe2-ftf.cp.gxs.com

- IX -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 32:df:4d:1a:b6:03:95:81:29:a2:16:ca:25:22:67:65 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IX

Organization: IX
Organization unit: Core Infra
Organization unit: Hosted by Open Text Corporation
Organization unit: EliteSSL
Address: 275 Frank Tompa
Postal code: N2L0A1
State / Province: ON
Locality: Waterloo
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 32:df:4d:1a:b6:03:95:81:29:a2:16:ca:25:22:67:65
Serial Number (int): 67620845850501371336027639906272700261
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 72:b5:65:0b:8b:4c:e9:cb:be:ba:2a:02:b4:77:34:a4:05:2a:4a:2f
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 07:56:77:4e:57:07:3f:37:c5:7c:3a:82:78:a6:7a:24:f7:93:b0:bf
Fingerprint (sha256): 02:cd:0b:f0:b1:2d:fe:f6:cc:ef:d0:0e:66:64:ef:35:e1:ac:60:06:2a:7b:81:6b:1c:66:9e:44:d3:c9:75:a4

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ws-vpn-pe2-ftf.cp.gxs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws-vpn-pe2-ftf.cp.gxs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws-vpn-pe2-ftf.cp.gxs.com
www.ws-vpn-pe2-ftf.cp.gxs.com

Other certificates including the domain name gxs.com

(limited to 100 certificates)
betagrid-eu.gxs.com
peztrade.ms.gxs.com
bsmg-nesao.ms.gxs.com
web-modp.p12smgws.tgms.gxs.com
pbwipap.eu.gxs.com
test.b2b.rbs.gxs.com
stpws-uat.gxs.com
web.smg.ms1.eu.gxs.com
viewsslt.dcts.us.gxs.com
as2bizlinkp12.ics.eu.gxs.com
vpn-prep-ftf.cp.gxs.com
www.gxs.com
viewssl.dcts.us.gxs.com
smg.ms.gxs.com
ws-vpn-pe2-ftf.cp.gxs.com
bas2-jpn.ms.gxs.com
pauth-citi.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pci.betagrid.eu.gxs.com
pweb-nesam.ms.gxs.com
p12ftps.tgms.gxs.com
b2b2-ca.rbs.gxs.com
b2b.rbs.gxs.com
as2bizlinkp11.tgms.gxs.com
elitelibrary.ypa.us.gxs.com
naesb.peco.us.gxs.com
as2b.bmomft.gxs.com
www.gxs.com
*.gxs.com
*.gxs.com
b2b.accessbulkchannel.abnamro.gxs.com
account.rs.gxs.com
as2p.bmomft.gxs.com
p10csrrest.tgms.gxs.com
uweb-citi.ms.gxs.com
p11csrrest.tgms.gxs.com
bronet-jpctr.ms.gxs.com
viewssl-test.dcts.us.gxs.com
b11csrrest.tgms.gxs.com
b10csrrest-d.tgms.gxs.com
crm-adamdev.internal.gxs.com
cas2-citi.ms.gxs.com
gxs.com
ROSETTANET_PREPROD.ECSC.US.GXS.COM
b10ftps.tgms.gxs.com
pweb-nesrt.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pciportal.gxs.com
bizlinkp11.tgms.gxs.com
discover-wam-cert.dfs.eu.gxs.com
pweb-citi.ms.gxs.com
nestlemobile.gxs.com
*.rs.cp.gxs.com
beta.mercportals.db.eu.gxs.com
dcts.staging.glaxo.eu.gxs.com
wam.ypima.us.gxs.com
bdcts01.eu.gxs.com
vpn-prod-ftf.cp.gxs.com
ssl2.tradinggrid.gxs.com
viewssl-test.dcts.us.gxs.com
icnet.gxs.com
novartis.gxs.com
intel.ma.smg.tradinggrid.gxs.com
bizlinkb.nestlemft.gxs.com
bizlinkb10.tgms.gxs.com
bdcts01.eu.gxs.com
bweb.smg.ms.eu.gxs.com
beta-smg-ca.tradinggrid.gxs.com
cataloguebeta.gxs.com
staging.dafne.eu.gxs.com
staging.oilex.eu.gxs.com
impmq.gxs.com
orderapp.ms.gxs.com
bweb-jpctr.ms.gxs.com
betagrid.gxs.com
as2bizlinkp12.tgms.gxs.com
b12csrrest-d.tgms.gxs.com
b12oftp.tgms.gxs.com
b11csrrest-d.tgms.gxs.com
as2b.nestlemft.gxs.com
vendorportal.gxs.com
ebics.baml.gxs.com
lv.gxs.com
as2bizlinkp11.tgms.gxs.com
p14ronet.ms.gxs.com
as2.rbs.gxs.com
as2bizlinkp12.ics.eu.gxs.com
campbells.gxs.com
vendorportal.gxs.com
lvbeta.gxs.com
as2.rbs.gxs.com
*.gxs.com
viewssl.dcts.us.gxs.com
pbwipap.eu.gxs.com
www.arla.eu.gxs.com
test.ebics.rbs.gxs.com
bizlinkb12.ics.eu.gxs.com
as2sslauthtgbizp12.app.gxs.com
rdgw.opentext.com
nestlemobile.gxs.com

Certificate

The complete raw certificate details for ws-vpn-pe2-ftf.cp.gxs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwucisy+W8XHRC2rPuzW
NZqUGw/G3v4X7ifZ2dxAxPMCwcv3HIkb68alBZT4SBRGEuIllNjuuq1akDF+C+fT
f7PBk9k8aEPVDGSl/ufDPan9QuvuzSboaVwwo8gZVyqpNb32fWQlYOl+4yCGKH+I
ne+mJMwYVZzaVWlxQuHCTvHs1WMFIjbL13FgX1g5+7/n2CoGa1Ng6mLcLSbvFRAv
BjZEA+BySImMd+FLCooxO/mfpGZsHQOj5p09e7PbhTToSBOuHC7hZ6osEpLJTuHk
pDFi88BnwUOCDhlOwZP/0b5vJ7vNn6CuC/M4KNzyh34hC+i2C6UmtKq1Gq/ko7tD
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67620845850501371336027639906272700261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'N2L0A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '275 Frank Tompa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Core Infra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EliteSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws-vpn-pe2-ftf.cp.gxs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21592475989758180115313616661535253766302400100313339174930394216989901136426594019854600344338897851661351153998332320275617160033165874079620412508743000451956360363750549130168707805357097897246922613295066080869676204043814560136072060270981039504949935726716154738565255921733245880255262180238733540613946048927745209919049530608738680695971210963699415435079188104660832592766909576256414895731572900462955210697006353434311419721019948307139897191539440036629430948795148955825032766844996608978846516723391793556718209661594083836485427731642093456291090498356439720510149268751736348211157919965248214483941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72b5650b8b4ce9cbbeba2a02b47734a4052a4a2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-vpn-pe2-ftf.cp.gxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws-vpn-pe2-ftf.cp.gxs.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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