bsuitesp.uat.mercer.com

- Mercer Health And Benefits -

Issued by Digi-Sign CA Digi-SSL Xp

About this certificate

This digital certificate with serial number 5c:50:a2:f2:08:58:80:47:26:18:50:8e:b3:f7:bf:ec was issued on by Digi-Sign Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Mercer Health And Benefits

Organization: Mercer Health And Benefits
Organization unit: Mercer Human Resource Consulting
Organization unit: Provided by Digi-Sign Limited
Organization unit: Digi-SSL Xp
State / Province: TX
Locality: Dallas
Country: US

Digi-Sign Limited

Organization: Digi-Sign Limited
Organization unit: Terms and Conditions of use: http://www.digi-sign.com/repository
State / Province: Dublin
Locality: Dublin
Country: IE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:50:a2:f2:08:58:80:47:26:18:50:8e:b3:f7:bf:ec
Serial Number (int): 122707664287049037866081583356328787948
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b5:f3:34:9a:e3:04:06:36:e7:42:93:01:2f:de:58:1f:ee:f2:ff:ca
AuthorityKeyId: 33:5a:0b:4e:35:da:b8:8e:87:05:64:5f:d8:ec:7d:25:98:da:ba:3f

Fingerprint (sha1): 7e:21:4b:99:64:c6:24:ee:56:f2:16:a3:57:fb:67:b2:41:dd:00:3f
Fingerprint (sha256): 07:01:b1:86:d9:f0:1b:af:f5:7f:b6:b7:e0:4f:c2:67:a8:b1:7a:44:24:cc:7d:79:8d:ed:aa:3c:c1:24:91:d0


Revocation information

CRL Distribution Point: http://crl.digi-sign.com/DigiSignCADigiSSLXp.crl
CRL Distribution Point: http://crl2.digi-sign.com/DigiSignCADigiSSLXp.crl

Check the revocation status for certificate bsuitesp.uat.mercer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsuitesp.uat.mercer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsuitesp.uat.mercer.com
www.bsuitesp.uat.mercer.com

Other certificates including the domain name mercer.com

(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com

Certificate

The complete raw certificate details for bsuitesp.uat.mercer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA294wMEAUJOne9OIvgiZq
4cgRbzlPudrcqDkmL4IwpWPTs2sOdlYqVdvD865uXRcsCZ9Fc2AR935ctZCwM7hk
FlhsM6I5lNdnLItaijk5Z4UHtVeSf+sea8XUtkMeOnJZbKyAxQoQd0xun0N3buVJ
G7Cg1sr5y3dgjYe0ccqHZongiTsOBeN25Qf7XfIoqmspd9ZogMS6PpMplRx8NV53
ydKcoJxjEV+K12llhqfywmMsoC7CbVYGKlEUShGIFf4UQ8NQCaAD8OB4X4PZFRiQ
HEU14LwcFvq8qRfhXh7JwjlRzXnF/LWh2XkFDPFV95P5iQMQi6X6he1DNiBSqcSz
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122707664287049037866081583356328787948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms and Conditions of use: http://www.digi-sign.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign CA Digi-SSL Xp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer Health And Benefits'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer Human Resource Consulting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Digi-Sign Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-SSL Xp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsuitesp.uat.mercer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27755753890404710026954546447244494355777346295839600607561135483449822738423972839780959847964206965801567995884980139683577937750042847420531880150320767680559960090785878395988091052093711906267062676053305270621228845103610339907620916668052448699672122857979547139598475017111492894273858385437396036657158723238778579411910224741133461381838490795307645338444111128456344813529745340694207791332059498797914957008175639646235269074373309986271291731298506630447273478436492925928781267059844493747608726608785390982700143508545589200913316642141664837526368158618609180218177446024251921253399803653604719768377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 335a0b4e35dab88e8705645fd8ec7d2598daba3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5f3349ae3040636e74293012fde581feef2ffca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digi-sign.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digi-sign.com/DigiSignCADigiSSLXp.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.digi-sign.com/DigiSignCADigiSSLXp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsuitesp.uat.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsuitesp.uat.mercer.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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