www.nspa.nato.int

- NATO Support and Procurement Agency -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 68:29:cb:37:f6:38:a6:7c:b5:85:86:44 was issued on by GlobalSign nv-sa.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NATO Support and Procurement Agency

Organization: NATO Support and Procurement Agency
Organization unit: IT Division
State / Province: Capellen
Locality: Capellen
Country: LU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 68:29:cb:37:f6:38:a6:7c:b5:85:86:44
Serial Number (int): 32236966652733147322121553476
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f8:1c:dc:f2:07:e2:08:97:9f:ca:29:2f:18:e5:c2:f7:7d:5a:68:55
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): e2:04:b9:9c:10:55:85:33:af:2a:04:06:42:87:5c:64:85:45:3e:23
Fingerprint (sha256): 05:db:6f:f7:00:c7:6e:bf:d2:91:0f:4a:43:11:6a:d8:56:11:50:82:27:72:3f:66:8d:60:67:ec:24:e1:b3:d6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.nspa.nato.int

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nspa.nato.int

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nspa.nato.int
ALPS.nspa.nato.int
ALPSINT.nspa.nato.int
ALPSTEST.nspa.nato.int
ALPSTRAIN.nspa.nato.int
ALPSTRAININT.nspa.nato.int
Afd.nspa.nato.int
NAP.nspa.nato.int
NAPTEST.nspa.nato.int
NEMSIS.nspa.nato.int
NEMSISINT.nspa.nato.int
NEMSISTEST.nspa.nato.int
NEMSISTRAIN.nspa.nato.int
NEMSISTRAININT.nspa.nato.int
NMBSBIZTEST3.nspa.nato.int
NMBSPRODBIZ1.nspa.nato.int
Nrh.nspa.nato.int
Queryaithub.nspa.nato.int
Rds.nspa.nato.int
Srv11.nspa.nato.int
Srv21.nspa.nato.int
ctt.nspa.nato.int
eportal.nspa.nato.int
eportalbi.nspa.nato.int
eportalbitest.nspa.nato.int
eportaltest.nspa.nato.int
haw.nspa.nato.int
hawtest.nspa.nato.int
infohub.nspa.nato.int
nfmsitv.nspa.nato.int
nmbs.nspa.nato.int
nmbsint.nspa.nato.int
nmbstest.nspa.nato.int
nmbstestint.nspa.nato.int
nmcrlomtws.nspa.nato.int
nmcrlomtwstest.nspa.nato.int
nmcrlws.nspa.nato.int
nmcrlwstest.nspa.nato.int
scagews.nspa.nato.int
scagewstest.nspa.nato.int
server2.nspa.nato.int
server3.nspa.nato.int
tracker.nspa.nato.int
nspa.nato.int

Other certificates including the domain name nato.int

(limited to 100 certificates)
shared.napma.nato.int
meet.nahema.nato.int
ims.nato.int
npc.ncia.nato.int
www.natoschool.nato.int
*.nc3a.nato.int
www.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
ap.ndc.nato.int
ncia.nato.int
apx.ndc.nato.int
elearning.natoschool.nato.int
*.ncia.nato.int
mail.cmre.nato.int
ndcmail.ndc.nato.int
www.asc.nato.int
awds.ndc.nato.int
mdm.napma.nato.int
mail.hrf.tr.nato.int
verity.hq.nato.int
extranet.napma.nato.int
ism.hq.nato.int
captiveportal.nahema.nato.int
msiac.nato.int
guest.napma.nato.int
gss.ncia.nato.int
servicedesk.thwaites.co.uk
ssc.nato.int
ncio.nato.int
dnbl.ncia.nato.int
acquia-sites.com
coi.nato.int
*.nc3a.nato.int
cmre.nato.int
itsupport.valeosnackfoods.com
www.ncia.nato.int
iocore.ivv.ncia.nato.int
www.nspa.nato.int
dnbl.ncia.nato.int
shared.napma.nato.int
awacs.nato.int
*.nacc.nato.int
*.ims.nato.int
redirect.napma.nato.int
nexus.dev.nato.int
acquia-sites.com
iocore-cwix.ivv.ncia.nato.int
*.nciss.nato.int
*.reach.nato.int
acquia-sites.com
emm.hq.nato.int
lldb.jallc.nato.int
apx.ndc.nato.int
ndccds.ndc.nato.int
apy.ndc.nato.int
www.ssc.nato.int
guest.napma.nato.int
sts.reach.nato.int
meet.nahema.nato.int
NSOVPN.natoschool.nato.int
ndccds.ndc.nato.int
skypeaccess.shape.nato.int
labs.academy.ncia.nato.int
shared.napma.nato.int
dev.nato.int
www.ssc.nato.int
amdc2-iss.ncia.nato.int
mail.cmre.nato.int
e-isaf.act.nato.int
*.nshq.nato.int
mdm.napma.nato.int
servicedesk.usspeaking.com
webmail.pia.nato.int
acquia-sites.com
diana.nato.int
jftc.nato.int
ticketing.alphamead.com
selfservice.act.nato.int
verity.hq.nato.int
acquia-sites.com
gp.csp.nato.int
mobile.pan.nato.int
meet.nahema.nato.int
redirect.napma.nato.int
acquia-sites.com
napma.nato.int
msiac.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
guest.napma.nato.int
webmail.cmre.nato.int
haivision.hq.nato.int
*.ndss.nato.int
ssc.nato.int
www.msiac.nato.int
ithelpdesk.dccoilireland.com
servicedesk.thwaites.co.uk
eportal.nspa.nato.int
www.nspa.nato.int

Certificate

The complete raw certificate details for www.nspa.nato.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ+axnQSYg58fmCVrB78
RV6LdmtM3XOjs9Zo7nxJ4QuSAQSxai0wvQE2orVpMxWREIa5LO6bNqZJrr6U9ZSC
zg+/oAGfgYHcM/YHtF6x/sv9G+EgG32vNIPNLBlYS5/ilJbTzHnzRFQ53EStXyyX
9cdG94c4bATkUlLd5Rom/ALRF209+okqlKJFijy8OYqNWvW2qJOgVtw/5bJU1H2W
s/hGhel1oYmpoUZP+xePF0NoNZPVRF88fen5cSD6JRp15K2oXAXUe5z0S7cM4NS9
+xh4001xkADIJeLkP2Y28hXldJkwM7MINve/u1liMUGoimM3MXmjHF1TNLyC/x3+
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32236966652733147322121553476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-20 15:39:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 16:29:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Capellen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Capellen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NATO Support and Procurement Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nspa.nato.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23866734549032101425846238577531594221601194870083249853060206927678747874130760926480358173590270786793607661373246255298717067303927505971783115490644757991831955308540517327046673558813053684241142727928089968421868432323434784586487505623201016468962169559168021893262360009279751151893707904141461550102835548187598854889371123746188819745736295235007558368215804656139325271942663822432034710709144436751180400482303749197838146359774141940432041311215695844587398604473889063506968419627770545034622695987004270028098371727721592139835930068553800476180419873569027349003878998004131709883154124241115134426861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1042 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ALPS.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ALPSINT.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ALPSTEST.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ALPSTRAIN.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ALPSTRAININT.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Afd.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NAP.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NAPTEST.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NEMSIS.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NEMSISINT.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NEMSISTEST.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NEMSISTRAIN.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NEMSISTRAININT.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NMBSBIZTEST3.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NMBSPRODBIZ1.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Nrh.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Queryaithub.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Rds.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Srv11.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Srv21.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctt.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportal.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportalbi.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportalbitest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportaltest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haw.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawtest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infohub.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfmsitv.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmbs.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmbsint.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmbstest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmbstestint.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcrlomtws.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcrlomtwstest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcrlws.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcrlwstest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scagews.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scagewstest.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.nspa.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nspa.nato.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81cdcf207e208979fca292f18e5c2f77d5a6855
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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