sandlro.bakerhughes.com

- Baker Hughes Company -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b3:16:cd:ea:0d:e5:52:4a:a0:0d:9d:16:86:fe:16:fa was issued on by Sectigo Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Baker Hughes Company

Organization: Baker Hughes Company
Organization unit: IOS
State / Province: Texas
Locality: Houston
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b3:16:cd:ea:0d:e5:52:4a:a0:0d:9d:16:86:fe:16:fa
Serial Number (int): 238050218214047022138913980465912092410
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4c:32:48:ac:2c:29:7e:62:12:59:47:6e:06:9c:b4:31:3f:41:29:bb
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): bb:26:57:92:e2:37:1d:fb:71:fe:eb:64:8e:b3:08:8e:c1:0f:48:0b
Fingerprint (sha256): 02:ed:96:25:f5:b6:52:61:26:37:16:9a:b8:e2:80:5d:d9:fa:79:a0:71:d1:f3:e6:f7:f4:81:d3:f0:f5:a7:37

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sandlro.bakerhughes.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandlro.bakerhughes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandlro.bakerhughes.com
alfresco-api.bakerhughes.com
alfresco.bakerhughes.com
imo2020analyzer.bakerhughes.com
qa-alfresco-api.bakerhughes.com
qa-alfresco.bakerhughes.com
solvwebchat.bakerhughes.com
xsight.bakerhughes.com

Other certificates including the domain name bakerhughes.com

(limited to 100 certificates)
wlrtwh.welllink.bakerhughes.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com

Certificate

The complete raw certificate details for sandlro.bakerhughes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JBUM5ihp63/BL4jRJ7T
/QvzqAbYyH/yFWK3HK7O06qNPOiN0b2zgoVZWlAf7Tf56mUlzs9zbdfVAjJIsAkY
MsXMJk0ikWc/Taj9VoPmEpUeKov1xG+waiZJ2XkMpUC+SUbLSWpLgiK1ghvXYPcA
LF/A9+Z+a3GR+7Pxj1+4ln4oR0Yq1Z3pzVW8/1FkvHeb+/BE7izjwv5sNaaAwCHT
AQRUQKNsp7yQyROJo51DM18aWb1atTDmZyZRd1nbOwIbXULEQCvDbF9WC1+9c8OO
RfhxwLGv0bFEzUNjkM0yZD3TKxi9+vPHy9a/d8GLS5bOl919W47Z1PL6DrtFnAkg
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238050218214047022138913980465912092410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baker Hughes Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IOS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandlro.bakerhughes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30873317650959768737913787579160523593002836527040754624627166535412163128644844387189440919616133366084929629740850855497906289043906157118103540317810362599976666570630085068335419046620713076374369286238074565643828429623334395073997591424003826770146459909510147955649840524047802946286271815878200026709648492077790068241842010102791766452178673426793557809091736617339861146296085284017601970043431482068099065940121211463897443814085269253578170810716543894310976478046391340782096102802560084611331509883887611780731816711563914995099090789494124420314703206564799226388211211274077136712940139777142188220577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c3248ac2c297e621259476e069cb4313f4129bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandlro.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfresco-api.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfresco.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imo2020analyzer.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-alfresco-api.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-alfresco.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solvwebchat.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsight.bakerhughes.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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