p11csrrest.tgms.gxs.com

- Open Text Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 48:40:7a:5a:bb:24:bb:7a:b1:bf:3d:30:ec:f8:66:8e was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Open Text Corporation

Organization: Open Text Corporation
Organization unit: Business Networks
Organization unit: Hosted by Open Text Corporation
Organization unit: EliteSSL
Address: 275 Frank Tompa Dr
Postal code: N2L 0A1
State / Province: ON
Locality: Waterloo
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 48:40:7a:5a:bb:24:bb:7a:b1:bf:3d:30:ec:f8:66:8e
Serial Number (int): 96039204337884547116822916352519464590
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ab:a3:0f:e2:25:42:4d:44:db:7e:97:1c:a6:8b:a6:33:b6:bf:02:11
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 63:54:f4:12:ee:a6:e1:71:5a:d3:b4:ff:39:a3:9d:97:d9:8a:e9:dd
Fingerprint (sha256): 09:91:5c:75:88:01:05:d8:03:fd:8d:9e:28:a2:64:19:9e:1b:04:78:c0:01:e5:58:a1:10:85:97:57:3f:c0:06

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate p11csrrest.tgms.gxs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p11csrrest.tgms.gxs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p11csrrest.tgms.gxs.com
www.p11csrrest.tgms.gxs.com

Other certificates including the domain name gxs.com

(limited to 100 certificates)
betagrid-eu.gxs.com
peztrade.ms.gxs.com
bsmg-nesao.ms.gxs.com
web-modp.p12smgws.tgms.gxs.com
pbwipap.eu.gxs.com
test.b2b.rbs.gxs.com
stpws-uat.gxs.com
web.smg.ms1.eu.gxs.com
viewsslt.dcts.us.gxs.com
as2bizlinkp12.ics.eu.gxs.com
vpn-prep-ftf.cp.gxs.com
www.gxs.com
viewssl.dcts.us.gxs.com
smg.ms.gxs.com
ws-vpn-pe2-ftf.cp.gxs.com
bas2-jpn.ms.gxs.com
pauth-citi.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pci.betagrid.eu.gxs.com
pweb-nesam.ms.gxs.com
p12ftps.tgms.gxs.com
b2b2-ca.rbs.gxs.com
b2b.rbs.gxs.com
as2bizlinkp11.tgms.gxs.com
elitelibrary.ypa.us.gxs.com
naesb.peco.us.gxs.com
as2b.bmomft.gxs.com
www.gxs.com
*.gxs.com
*.gxs.com
b2b.accessbulkchannel.abnamro.gxs.com
account.rs.gxs.com
as2p.bmomft.gxs.com
p10csrrest.tgms.gxs.com
uweb-citi.ms.gxs.com
p11csrrest.tgms.gxs.com
bronet-jpctr.ms.gxs.com
viewssl-test.dcts.us.gxs.com
b11csrrest.tgms.gxs.com
b10csrrest-d.tgms.gxs.com
crm-adamdev.internal.gxs.com
cas2-citi.ms.gxs.com
gxs.com
ROSETTANET_PREPROD.ECSC.US.GXS.COM
b10ftps.tgms.gxs.com
pweb-nesrt.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pciportal.gxs.com
bizlinkp11.tgms.gxs.com
discover-wam-cert.dfs.eu.gxs.com
pweb-citi.ms.gxs.com
nestlemobile.gxs.com
*.rs.cp.gxs.com
beta.mercportals.db.eu.gxs.com
dcts.staging.glaxo.eu.gxs.com
wam.ypima.us.gxs.com
bdcts01.eu.gxs.com
vpn-prod-ftf.cp.gxs.com
ssl2.tradinggrid.gxs.com
viewssl-test.dcts.us.gxs.com
icnet.gxs.com
novartis.gxs.com
intel.ma.smg.tradinggrid.gxs.com
bizlinkb.nestlemft.gxs.com
bizlinkb10.tgms.gxs.com
bdcts01.eu.gxs.com
bweb.smg.ms.eu.gxs.com
beta-smg-ca.tradinggrid.gxs.com
cataloguebeta.gxs.com
staging.dafne.eu.gxs.com
staging.oilex.eu.gxs.com
impmq.gxs.com
orderapp.ms.gxs.com
bweb-jpctr.ms.gxs.com
betagrid.gxs.com
as2bizlinkp12.tgms.gxs.com
b12csrrest-d.tgms.gxs.com
b12oftp.tgms.gxs.com
b11csrrest-d.tgms.gxs.com
as2b.nestlemft.gxs.com
vendorportal.gxs.com
ebics.baml.gxs.com
lv.gxs.com
as2bizlinkp11.tgms.gxs.com
p14ronet.ms.gxs.com
as2.rbs.gxs.com
as2bizlinkp12.ics.eu.gxs.com
campbells.gxs.com
vendorportal.gxs.com
lvbeta.gxs.com
as2.rbs.gxs.com
*.gxs.com
viewssl.dcts.us.gxs.com
pbwipap.eu.gxs.com
www.arla.eu.gxs.com
test.ebics.rbs.gxs.com
bizlinkb12.ics.eu.gxs.com
as2sslauthtgbizp12.app.gxs.com
rdgw.opentext.com
nestlemobile.gxs.com

Certificate

The complete raw certificate details for p11csrrest.tgms.gxs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwwBXJgIv/+F5Px/lCtN
sqzk+v+xh8NsXD4xcIjctressc6Y53/FuEEuYJpog2FxizQksr4yWHX/pm8L2DDc
Cci3VbCvpQVdGt3TU911EOJPMBIxYSNExdbKIXzrUoFDTksVxlVdyCmvC4Q56Q6i
4KPF6b+RxxKGcCEUJRlbHPP6QzVenHJoErcDGFJSv7jgCIyIrkhAaYNz4UjogUMr
e6V7XMxZc8TRkcODKSgI6hEpKWzKlsAxsJcFLNto91nkGftcOrGsa5IZQ4opuK3U
mCCZ4f9wXnl25CgC7Jg8oDWFIkd3sFw8ImZUdA9P/3dlftGL1kuR4SG+w3btwPL/
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96039204337884547116822916352519464590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'N2L 0A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '275 Frank Tompa Dr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Networks'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EliteSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p11csrrest.tgms.gxs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24117436292018576569335848899733790060351251322547809365936830845278818647726490083607234493844296895104015522945431229810918425982887563736348911332086524878735807268565707188231061736124160990357365123826968479444107119284211494822713033754278839532922902463607805431291498517530982142571162437530079381133550684896888807937676032710232507274875441111773173234622245674521343326953612967478246493344072551905751350883361342675529626395170238802860101537088958039692906543973446093535394966215932404824383733734748435346647970609909018093912470341164754852811648049514674329056194699153844207804408879198958831992779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aba30fe225424d44db7e971ca68ba633b6bf0211
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p11csrrest.tgms.gxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p11csrrest.tgms.gxs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:19|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String 'ÎuH+�ֳ�u�U����6J��W<S���8xp%/�����c�ː����F0D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26866558396826613830913691250885662614317131801313438136709298052632470022826
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 40396400931085088596632963494417140472733568151446065558587688023310225813235
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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