stg-entitlement-api.mobility.mercer.com

- Mercer -

Issued by Digi-Sign CA Digi-SSL

About this certificate

This digital certificate with serial number 7e:fa:38:e9:b7:10:c8:88:63:aa:6c:ea:1c:b9:be:e5 was issued on by Digi-Sign Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mercer

Organization: Mercer
Organization unit: Provided by Digi-Sign Limited
Organization unit: Digi-SSL Xp
State / Province: Massachusetts
Locality: Franklin
Country: US

Digi-Sign Limited

Organization: Digi-Sign Limited
State / Province: County Dublin
Locality: Dublin
Country: IE

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:fa:38:e9:b7:10:c8:88:63:aa:6c:ea:1c:b9:be:e5
Serial Number (int): 168781956015288823809802135924968636133
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4e:91:6b:7a:ee:5e:82:89:0c:d8:41:d8:77:89:b1:52:1e:8f:00:f5
AuthorityKeyId: 78:29:0f:ae:cd:90:2c:c0:dc:d2:7a:d4:9b:5f:9c:45:e0:88:a8:2c

Fingerprint (sha1): 2d:10:4d:7d:e1:1a:14:eb:48:7f:e1:f8:99:32:1e:d6:f0:b7:a2:19
Fingerprint (sha256): 07:3e:c3:cb:e2:1f:73:a4:fa:39:37:62:88:da:71:ce:9b:8e:57:85:5f:bd:61:bb:b1:4c:6d:e6:6d:86:76:c7

Issuing Certificate URL: http://crt.usertrust.com/DigiSignCADigiSSL.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/DigiSignCADigiSSL.crl

Check the revocation status for certificate stg-entitlement-api.mobility.mercer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg-entitlement-api.mobility.mercer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg-entitlement-api.mobility.mercer.com
www.stg-entitlement-api.mobility.mercer.com

Other certificates including the domain name mercer.com

(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com

Certificate

The complete raw certificate details for stg-entitlement-api.mobility.mercer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIQfvo46bcQyIhjqmzqHLm+5TANBgkqhkiG9w0BAQsFADBy
MQswCQYDVQQGEwJJRTEWMBQGA1UECBMNQ291bnR5IER1YmxpbjEPMA0GA1UEBxMG
RHVibGluMRowGAYDVQQKExFEaWdpLVNpZ24gTGltaXRlZDEeMBwGA1UEAxMVRGln
aS1TaWduIENBIERpZ2ktU1NMMB4XDTE4MDgyMTAwMDAwMFoXDTIwMDgyMDIzNTk1
OVowgbkxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMREwDwYD
VQQHEwhGcmFua2xpbjEPMA0GA1UEChMGTWVyY2VyMSYwJAYDVQQLEx1Qcm92aWRl
ZCBieSBEaWdpLVNpZ24gTGltaXRlZDEUMBIGA1UECxMLRGlnaS1TU0wgWHAxMDAu
BgNVBAMTJ3N0Zy1lbnRpdGxlbWVudC1hcGkubW9iaWxpdHkubWVyY2VyLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJV3at4tAqxLKeab711XlpgP
OrqiU2DhIdvsMmoFmDOST3I9ra/WoJRwFlH/FtsXg0OpkK2vwsbpWMgY2kohAfDh
o6alPUqXjJzfaIzFUvKY3pnsN5fmzsuJNyNfjWfjJ8nfU3E4sc6/Vi08iwyaGcjd
SKvgux5Trbm/DI+D8TFHmpENmbLilufGaGRTmSsTKhMHvA7xlENbCtzDrNVyEMpH
vpYlAWHBJTo2KOLTywJNVRuFOnj+vIorIIo80fKd9isEpvrlxOGYYfKQ9pliKClH
6neRqehW0NyLD6EYQ7GVTSpse4AIdLVJm1jWpmQwNiTID9YqKDagSIzdbyQEXBEC
AwEAAaOCA2YwggNiMB8GA1UdIwQYMBaAFHgpD67NkCzA3NJ61JtfnEXgiKgsMB0G
A1UdDgQWBBROkWt67l6CiQzYQdh3ibFSHo8A9TAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0g
BEQwQjA2BgsrBgEEAbIxAQICCTAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51
c2VydHJ1c3QuY29tMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v
Y3JsLnVzZXJ0cnVzdC5jb20vRGlnaVNpZ25DQURpZ2lTU0wuY3JsMHEGCCsGAQUF
BwEBBGUwYzA6BggrBgEFBQcwAoYuaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0Rp
Z2lTaWduQ0FEaWdpU1NMLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNl
cnRydXN0LmNvbTBfBgNVHREEWDBWgidzdGctZW50aXRsZW1lbnQtYXBpLm1vYmls
aXR5Lm1lcmNlci5jb22CK3d3dy5zdGctZW50aXRsZW1lbnQtYXBpLm1vYmlsaXR5
Lm1lcmNlci5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AO5Lvbd1zmC6
4UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABZV1Vy+QAAAQDAEcwRQIhAI6oGwVt
0xcPXmLl5UfLFMLE4Oka1MlL0dbxNaIBT4pwAiAbbje6y5E5c4aEsegByoYK9Qm+
EcprWix+irOED4QC9AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVY
AAABZV1VzDUAAAQDAEcwRQIgFxT+n4v5/YMDgiz2GCVDfef5NIOPffxcIjxfl02i
TfECIQDi4l7a/cdlUZ1QPIfAS7vT0LdMNqYYGFpJwb7tM4XJDQB3AFWB1MIWkDYB
SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZV1VzY4AAAQDAEgwRgIhAIqz+AZV
aB7vBMJT6/jQ8KammeduC7vAb5p3QeIRoly0AiEAlJihj4190aTYlGQkC0Une9dK
wMujtuvqW6I8g7BVAzUwDQYJKoZIhvcNAQELBQADggEBABYYpwcLAwggxGlriUVN
CRdJcBsfWvXrprHnpe2GEy1VLCbz2pMs89VH2U51FguhkwX7kIupvRWW8Hqhejnb
C1OeulApthJuxs3hlTXoAQnKcgZz1y3ruVXYIxjHnGsRADeIZAa6/TG3kd8g1FUQ
rdV86KACaHkPQdi3T1Up9NOU4ml6XaC3u7rQgP2tt8g4HLPRe12hzWyG3qzRocA2
HXxZYBoUzNhOB60UKpuQ0/S53mfXjboaKwq4O3/Z+XTCwhOWLL5bka5aKpjx7uKS
UqjVT7cL6mQFHgzVR2zbNycpH/zNH3lWqUG5+zMnb9orb3KxjsB5HFpt+PtQNSAo
S3E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXdq3i0CrEsp5pvvXVeW
mA86uqJTYOEh2+wyagWYM5JPcj2tr9aglHAWUf8W2xeDQ6mQra/CxulYyBjaSiEB
8OGjpqU9SpeMnN9ojMVS8pjemew3l+bOy4k3I1+NZ+Mnyd9TcTixzr9WLTyLDJoZ
yN1Iq+C7HlOtub8Mj4PxMUeakQ2ZsuKW58ZoZFOZKxMqEwe8DvGUQ1sK3MOs1XIQ
yke+liUBYcElOjYo4tPLAk1VG4U6eP68iisgijzR8p32KwSm+uXE4Zhh8pD2mWIo
KUfqd5Gp6FbQ3IsPoRhDsZVNKmx7gAh0tUmbWNamZDA2JMgP1iooNqBIjN1vJARc
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168781956015288823809802135924968636133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign CA Digi-SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Franklin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Digi-Sign Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-SSL Xp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg-entitlement-api.mobility.mercer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18868394380582895510734292941866360845633022255603319577134928056063379908185960775263954134382738755275498345985770207388041907378770079150303057002515637041694397915002589500551185353510314238406226636806163064204822831896589010144390048295396533975694614037335556167321030482453691811111302261967791845274820575942218457658992960599321812824260977747794131642980297289002171712399278801373418754854961618614838900109030918483868122423200126127905987334395726796876873448212707509912501317204182213405160204356257394819178728670247179760966276667818083028151509432626017989752446998495322084620151675848760181939217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78290faecd902cc0dcd27ad49b5f9c45e088a82c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e916b7aee5e82890cd841d87789b1521e8f00f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DigiSignCADigiSSL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DigiSignCADigiSSL.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-entitlement-api.mobility.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-entitlement-api.mobility.mercer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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