mail.baxter.com

- Baxter Healthcare Corporation -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:20:cc:8d was issued on by Entrust, Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Baxter Healthcare Corporation

Organization: Baxter Healthcare Corporation
State / Province: Illinois
Locality: Deerfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:20:cc:8d
Serial Number (int): 1277217933
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: f1:e4:80:c6:ed:38:8d:e6:a7:bf:95:50:ea:01:d5:06:89:8a:74:8c
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): bd:d3:86:7f:19:d9:f9:88:e5:03:a1:8b:d1:4e:61:7e:90:38:8e:f1
Fingerprint (sha256): 06:79:17:b9:93:2e:ba:bf:09:fc:28:e7:83:64:14:57:db:6c:f5:34:ff:0c:1f:ec:18:7b:31:c7:9a:8f:d3:5c

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate mail.baxter.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.baxter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.baxter.com
clientsmtp.baxter.com
mail-1af.baxter.com
backupmail.baxter.com
archive.baxter.com
mail-1df.baxter.com
mail-1b.baxter.com
mail-1bf.baxter.com
securemail.baxter.com
backupsecuremail.baxter.com
026-smtp-out.baxter.com
mail-1c.baxter.com
mail-1cf.baxter.com
mail-1d.baxter.com
autodiscover.baxter.com
cmp.baxter.com
bas.baxter.com
mail-01.baxter.com
rms.026.d.office365.com
autodiscover.mgd.baxter.com
mail-1a.baxter.com
backup.mail.baxter.com
besma.baxter.com
portal.baxter.com
owa.baxter.com
backupowa.baxter.com

Other certificates including the domain name baxter.com

(limited to 100 certificates)
mail2.baxter.com
baxter.com
ctmsvalcro.baxter.com
tokens.baxter.com
qae.hcw.baxter.com
dev-itss.baxter.com
mpevents.baxter.com
www.ecomm.baxter.com
homecareservices.baxter.com
stsqa.baxter.com
adfs.baxter.com
eusurveys.baxter.com
cloudai.baxter.com
dev-itss.baxter.com
usbdeits901.baxter.com
driveralert.baxter.com
026dsn1l40se02.026d.mgd.msft.net
mail.baxter.com
usbdz2was103.baxter.com
stg-spapps.aws.baxter.com
learn.baxter.com
ctmscro.baxter.com
usbdz2was801.baxter.com
learn.baxter.com
kmail1.baxter.com
itss.baxter.com
renalnet.baxter.com
www.educa.baxter.com
bax-eu-exp-e1.uc.baxter.com
chat.homecareservices.baxter.com
gts.baxter.com
baxter.com
chat.eservices.baxter.com
spsites.aws.baxter.com
stg-mobility.baxter.com
mail1.baxter.com
cds2.cvent.com
usohdmsbrk901.aws.baxter.com
qae.hcw.baxter.com
renalnet.baxter.com
itss.baxter.com
b2b.baxter.com
chat-stg.homecareservices.baxter.com
www.educa.baxter.com
www.baxter.com
dev-itss.baxter.com
www.baxter-ecommerce.com
jobs.baxter.com
stg-ghcmobile.baxter.com
driveralert.baxter.com
staging.ecomm.baxter.com
Baxter Healthcare Corporation
usbdlwah121.global.baxter.com
bax-exp-e5.uc.baxter.com
cds2.cvent.com
staging-chat.homecareservices.baxter.com
cds2.cvent.com
connect.baxter.com
mail.baxter.com
stg-ghcmobile.baxter.com
chat.eservices.baxter.com
www.careers.baxter.com
sni.cloudflaressl.com
*.026dspoapp.com
usbdz2was800.baxter.com
adfs.baxter.com
www.baxter.com
chat.homecareservices.baxter.com
www.hcw.baxter.com
sni.cloudflaressl.com
*.doseiq.baxter.com
connect.inbaxter.com
investor.baxter.com
renalnet.baxter.com
eujira.baxter.com
baxter.com
sni.cloudflaressl.com
learn.baxter.com
www.educa.baxter.com
surveys.baxter.com
www.educa.baxter.com
www.hcw.baxter.com
www.careers.baxter.com
learn.baxter.com
bax-exp-e2.uc.baxter.com
*.baxter.com
cds2.cvent.com
euforms.baxter.com
jobs.baxter.com
mail4.baxter.com
www.baxter.com
learn.baxter.com
pml.baxter.com
jobs.baxter.com
bax-ap-exp-e1.uc.baxter.com
mpevents.baxter.com
gts.baxter.com
www.latinoamerica.baxter.com
nava.baxter.com
Guest-Wireless-EMEA.baxter.com

Certificate

The complete raw certificate details for mail.baxter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlrl7GDAm4gylFJqsJMb
jwBdIsVk73+t4UIAlxCGMUBU9u3ZGEBB1yTKoxOo4bU3X3ub6EZO7UygV/Mopfy/
NO15/XR/8an0arHYUyQVJpq0E5/mixwpU5wLRWWltW3U6VITc/eya0XPYN3TggZd
rCGNh9T7SeoxdcaAq76OB9XPqGX/SN9ab4fRODwtL6O40ASFOFUhc9KtDmiLUmr2
QgfBiLi4dNKHSIcEOVprnCnSuBoOmnkNKWNRFXjn9e+751durQV0uMzFNk4HcmDh
TT9e8ZFRIVXQBqJRREqwR5ALw9k4AvvIbZFc6S+yz4hSD3EYF2juYMKGd0RPama+
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277217933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-17 00:32:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-21 18:23:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deerfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baxter Healthcare Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.baxter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19485522507262060649117103544076706906599320110115353191752080415747499590364795044570861285717253270677841535095880422134204537006575191322509626901946906411257652981039892110585679189233143382250781334722473761542515094914767182587416702036664938121492499328033659333092786574473264971447065563396736493537064942004585408971624406820250594876460867308791773342277673638256892199024668318876449934487084626360401550728766963906883104910891880588308244637332984637832324030319630977937414697260301676867452932175558833386248557672415971909613664543332007050773017401044435969391215181137830360771388697993171500973801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (558 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsmtp.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1af.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backupmail.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1df.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1b.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1bf.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backupsecuremail.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '026-smtp-out.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1c.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1cf.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1d.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bas.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-01.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.026.d.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mgd.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-1a.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.mail.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besma.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.baxter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backupowa.baxter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1e480c6ed388de6a7bf9550ea01d506898a748c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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