idp.int.idaas.uk.experian.com

- Experian Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 29:94:06:05:ec:a5:8a:4b:25:b3:84:ff:46:13:ae:13 was issued on by Entrust, Inc..

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Experian Limited

Company registration number: 00653331
Organization: Experian Limited
Locality: Nottingham
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 29:94:06:05:ec:a5:8a:4b:25:b3:84:ff:46:13:ae:13
Serial Number (int): 55266929926081727910293787383738641939
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e6:da:17:e1:da:1a:21:f1:aa:29:6d:3d:ef:99:54:65:b3:9d:2d:cf
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 14:03:c3:80:9d:37:76:b0:03:20:ad:a9:af:fd:92:50:69:b7:d6:c5
Fingerprint (sha256): 04:16:af:f1:69:10:9c:f4:84:09:2e:4e:f4:93:75:ae:f6:9e:6b:8a:7b:f8:7f:67:4e:b7:6e:37:12:49:00:e0

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate idp.int.idaas.uk.experian.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.int.idaas.uk.experian.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp.int.idaas.uk.experian.com
www.idp.int.idaas.uk.experian.com
account.int.idaas.uk.experian.com
samplesp.int.idaas.uk.experian.com
helpdeskapi.int.idaas.uk.experian.com
samplemse.int.idaas.uk.experian.com
helpdesk.int.idaas.uk.experian.com
api.int.idaas.uk.experian.com
account1.int.idaas.uk.experian.com
idp1.int.idaas.uk.experian.com
helpdesk1.int.idaas.uk.experian.com
samplesp1.int.idaas.uk.experian.com
samplemse1.int.idaas.uk.experian.com
api1.int.idaas.uk.experian.com
helpdesk2.int.idaas.uk.experian.com
account2.int.idaas.uk.experian.com
helpdeskapi1.int.idaas.uk.experian.com
idp2.int.idaas.uk.experian.com
samplemse2.int.idaas.uk.experian.com
samplesp2.int.idaas.uk.experian.com
api2.int.idaas.uk.experian.com
helpdeskapi2.int.idaas.uk.experian.com
idp3.int.idaas.uk.experian.com
account3.int.idaas.uk.experian.com
helpdesk3.int.idaas.uk.experian.com
samplesp3.int.idaas.uk.experian.com
samplemse3.int.idaas.uk.experian.com
api3.int.idaas.uk.experian.com
helpdeskapi3.int.idaas.uk.experian.com
account4.int.idaas.uk.experian.com
idp4.int.idaas.uk.experian.com
helpdesk4.int.idaas.uk.experian.com
samplesp4.int.idaas.uk.experian.com
samplemse4.int.idaas.uk.experian.com
helpdeskapi4.int.idaas.uk.experian.com
idp5.int.idaas.uk.experian.com
api4.int.idaas.uk.experian.com
account5.int.idaas.uk.experian.com
helpdesk5.int.idaas.uk.experian.com
samplesp5.int.idaas.uk.experian.com
samplemse5.int.idaas.uk.experian.com
helpdeskapi5.int.idaas.uk.experian.com
api5.int.idaas.uk.experian.com
idp6.int.idaas.uk.experian.com
account6.int.idaas.uk.experian.com
helpdesk6.int.idaas.uk.experian.com
samplesp6.int.idaas.uk.experian.com
samplemse6.int.idaas.uk.experian.com
api6.int.idaas.uk.experian.com
helpdeskapi6.int.idaas.uk.experian.com
idp7.int.idaas.uk.experian.com
account7.int.idaas.uk.experian.com
helpdesk7.int.idaas.uk.experian.com
samplesp7.int.idaas.uk.experian.com
samplemse7.int.idaas.uk.experian.com
api7.int.idaas.uk.experian.com
idp8.int.idaas.uk.experian.com
helpdeskapi7.int.idaas.uk.experian.com
samplesp8.int.idaas.uk.experian.com
account8.int.idaas.uk.experian.com
helpdesk8.int.idaas.uk.experian.com
samplemse8.int.idaas.uk.experian.com
api8.int.idaas.uk.experian.com
helpdeskapi8.int.idaas.uk.experian.com
idp9.int.idaas.uk.experian.com
account9.int.idaas.uk.experian.com
helpdesk9.int.idaas.uk.experian.com
samplesp9.int.idaas.uk.experian.com
helpdeskapi9.int.idaas.uk.experian.com
api9.int.idaas.uk.experian.com
samplemse9.int.idaas.uk.experian.com

Other certificates including the domain name experian.com

(limited to 100 certificates)
prext.unify.uk.experian.com
psn.secure.wasp.uk.experian.com
eic-image.uk.experian.com
secure.wiseconsumer.uk.experian.com
beta-in-api.experian.com
stg-gateway.secure.experian.com
poc-ss3.experian.com
ww2.experian.com
*.datafabricpreprod.cdsw.experian.com
crp.h4cs.wapp.hunter.uk.experian.com
stageservicedeliveryplatform.uk.experian.com
www.mchsecrp.it.wapp.hunter.uk.experian.com
ss3.experian.com
das.uk.experian.com
5672591746400256-fe3.pantheonsite.io
sandbox.experian.com
secure-aie.experian.com
uathosted.bankwizardabsolute.uk.experian.com
stg1-ss1.experian.com
pages.e.usa.experian.com
newdaypccms.uat.uk.experian.com
www.autocheck.uk.experian
usx2-lyn-rp01.us.experian.local
mdmreg1.experian.com
auth-eub-test.experian.com
retain.uk.experian.com
imperva.com
ug-sav.uk.experian.com
ukid.eih03.uk.experian.com
UKX2-ISE-Monitor01.uk.experian.com
identityiq.uat.uk.experian.com
www.mchse.wapp.hunter.uk.experian.com
permissions.irt.uk.experian.com
sandbox-uk-api.experian.com
ascendportal.experian.com
secure.wasp.uat.uk.experian.com
secure.e-series.uk.experian.com
hpes.experian.com
identityiq.qat.uk.experian.com
usmkpsynsc.experian.com
incapsula.com
emsevents.experian.com
bnpl.experian.com
u6aeh5cx.fraudnet.experian.com
permissions.prod.uk.experian.com
qat.crosscore.experian.com
newprod.ie.wsrv.hunter.uk.experian.com
dev-spla-api.experian.com
stg1-fed.experian.com
www.mchseuat.nl.wsrv.hunter.uk.experian.com
ss1-ectst001vc.ec.experian.com
imperva.com
secure.e-series.uk.experian.com
sit.login.crosscore.uk.experian.com
images.proveid.experian.com
stg1-ss1.experian.com
dm-sgw1-us.experian.com
itdr-webadmin.uk.experian.com
stm.experian.com
wynsz2kd.test.fraudnet.experian.com
data.nl.experian.com
Amex.PCCM.experian.com
ukx1rpad1-mgmt.uk.experian.com
postemobile-trs.uk.experian.com
idp.int.idaas.uk.experian.com
appsext.unify.uk.experian.com
ukid.eih02.uk.experian.com
wapp.hunter.eu.experian.com
uat-nec-data-link.experian.com
amrs.uk.experian.com
test-uk-api.experian.com
5672591746400256-fe3.pantheonsite.io
intelviz.experian.com
ukid.eih01.uk.experian.com
us-mdm1.experian.com
syncfs-nab.experian.com
www.mchsecrp.wsrv.hunter.uk.experian.com
nordic.experian.com
us-mail.experian.com
velocity.experian.com
irt.caisma.uk.experian.com
uat-ukbsproxy.uk.experian.com
cma.uk.experian.com
sandbox-eu-api.experian.com
pks.experian.com
bankwizardondemand.uk.experian.com
mtvhpccowe.uat.uk.experian.com
cr-securemail.experian.com
staging.bwonline.uk.experian.com
www.mchsecrp.wapp.hunter.uk.experian.com
MQPD.UK.EXPERIAN.COM
customerdataengine.experian.com
qa-smeservices.uk.experian.com
devautodoc.proveid.experian.com
ss2.experian.com
anjuna.status.polaris.synopsys.com
caisma.uk.experian.com
api-dataexchange.experian.com
uat-uk.intact.uk.experian.com
ww2.experian.com

Certificate

The complete raw certificate details for idp.int.idaas.uk.experian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmaHDkz0/1DRybAP77+s
gi8FeLR480ovCgINi21dmvr8HK8R9oP0/ijjDfvRBdYhnH4KuHmOLdKMIK41b8+x
lusgxd8KxtgGp8mTpBuEkP8P4+JaDpx+cgEcz/1fvc/x+INC6I14C+FL3+GdV14N
OrpJ7+k6LNRFDN4aftu9FZ1RO+eNFTTcgLET8toVACCzQ5o6sbJobBNuHA64/EP7
eHdn9/GbfqNggZRQHluY12tIud1U2TwfFIuz2ZpBq5Lv0xYP02afc9djQYb/vY86
UgYM9cKUmGVOrjPp1S4hnVF0yMnKU0Ei1HqWwn8ddOHbLsiV90/4LY3UHqhOE7lY
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55266929926081727910293787383738641939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 16:13:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 16:13:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00653331'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idp.int.idaas.uk.experian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18481350750177911778739369680677160891117267873738913232528389923051325771242389466937741456740608387454517619133891573641212986565479049843637498450900945243545832906977924126412126554444126623917143095102268655237499473149187279391956170501610434161768535158379488240023525246305744633657350985013676761092417159232860549257949598751197600637954414663488784288631476041525219470874252309691566922785877575977498088663685032091696582172769784334695027640060157946796328272587733193033126723292983946028697840959994520656432633021054532452994055152029710821032507272714535706524566562115741829149321385620176780220461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6da17e1da1a21f1aa296d3def995465b39d2dcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idp.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi1.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi2.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi3.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api4.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api5.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi6.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi7.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi8.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplesp9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskapi9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemse9.int.idaas.uk.experian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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