soprasteria.com

- SOPRA STERIA GROUP -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bd:d4:30:a1:74:a6:14:92:c3:48:6b:c9:64:25:ea:5f was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOPRA STERIA GROUP

Organization: SOPRA STERIA GROUP
Organization unit: 0002 326820065
Address: ANNECY LE VIEUX
Address: 3 RUE DU PRE FAUCON
Address: PAE DES GLAISINS
Postal code: 74940
State / Province: Haute-Savoie
Locality: ANNECY LE VIEUX
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bd:d4:30:a1:74:a6:14:92:c3:48:6b:c9:64:25:ea:5f
Serial Number (int): 252325844484854663492764665761424075359
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:e7:4c:84:5e:93:42:d9:d5:32:f0:29:8c:8d:62:13:6f:08:4b:c8
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 1b:76:d8:9e:2e:80:e8:8f:d2:e8:e3:92:86:5a:21:7e:8f:6d:3e:b1
Fingerprint (sha256): 0b:fd:a1:a9:d2:70:e7:fe:30:f0:1e:b7:bb:f6:0e:d4:02:4f:3b:9f:31:ef:81:31:ef:ad:91:91:06:46:99:a3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate soprasteria.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soprasteria.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soprasteria.com
*.soprasteria.com
vpn.in.sopragroup.com

Other certificates including the domain name soprasteria.com

(limited to 100 certificates)
svs.soprasteria.com
soprasteria.com
blog.soprasteria.com
innersource.soprasteria.com
soprasteria.com
blog.soprasteria.com
blog.soprasteria.com
webext.soprasteria.com
soprasteria.com
soprahr.tn.web.soprasteria.com
via22latam.workspace.training
agenciasur.soprasteria.com
go.soprasteria.com
rpa.soprasteria.com
soprasteria.com
blog.soprasteria.com
www.soprasteria.com
soprasteria.com
active3d.soprasteria.com
cdn.soprasteria.com
soprasteria.com
mgw08.soprasteria.com
solpm.sciforma.soprasteria.com
soprasteria.com
vpn-in.soprasteria.com
www.soprasteria.com
svncassiopae.soprasteria.com
soprasteria.com
digitaldesk.soprasteria.com
ras-ghc.soprasteria.com
svs.soprasteria.com
www.isacampillo.com.mx
*.sbs.msuk.soprasteria.com
vpn-uk.soprasteria.com
soprasteria.com
soprasteria.com
preprod.digitaldesk.soprasteria.com
videoconferencing.soprasteria.com
mgw02.soprasteria.com
speed.soprasteria.com
cci-paris-idf-a3d-rec.soprasteria.com
gda-grs.soprasteria.com
www.soprasteria.com
soprasteria.com
soprasteria.com
parici.soprasteria.com
parici.soprasteria.com
blogtech.soprasteria.com
soprasteria.com
agenciasur.soprasteria.com
soprasteria.com
portal.restricted.soprasteria.com
blogtech.soprasteria.com
www.soprasteria.com
digibox.soprasteria.com
webext.soprasteria.com
app.ameicontabilidadeonline.com.br
soprasteria.com
soprasteria.com
slnxoccitaniekeycloak01.soprasteria.com
*.sit.fes.soprasteria.com
worktime.soprasteria.com
klif.f2fmobile.soprasteria.com
digitaldesk.soprasteria.com
svs.soprasteria.com
soprasteria.com
soprasteria.com
svs.soprasteria.com
digibox.soprasteria.com
ras-ghc.soprasteria.com
soprasteria.com
blog.soprasteria.com
quill.morishin.me
*.dev.fes.soprasteria.com
*.trn.fes.soprasteria.com
livingactor.soprasteria.com
soprasteria.com
uat.digitaldesk.soprasteria.com
api.cicd.arcus.soprasteria.com
staff.soprasteria.com
soprasteria.com
soprasteria.com
dev.digitaldesk.soprasteria.com
csadeo-wekan.soprasteria.com
soprasteria.com
soprasteria.com
blog.soprasteria.com
portal.soprasteria.com
uat.digitaldesk.soprasteria.com
soprasteria.com
remote.siiecome.soprasteria.com
soprasteria.com
blog.soprasteria.com
staff.soprasteria.com
blog.soprasteria.com
*.apps.cicd.arcus.soprasteria.com
diwocs.soprasteria.com
klif.vpn.soprasteria.com
blog.soprasteria.com
soprasteria.com

Certificate

The complete raw certificate details for soprasteria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyqwungiQ5EhHkGre8gG
9kC7ANaFeVGaOJ2RYE+Slg+G8c6aN2q+eGVKvHZ+yzHwrq/9icdrUaJk1SkrcLO3
tDfTq9UXylJ27h5n2CyhFeAsztjt1T2phugRH/lzfkI7VYLF+nJujwvM9AGvfXmf
OjpDL5PaJWteUABsmAYf+Z0A+MAQ03XaEVGwuzewWVnQYk7T+v07UttjRoU3YSTG
0Q41frPpWFmN0BADscwPG59F2hevA+3lYh8aFMe/a4d2Q7zdUbqa1auqJv0fSOra
xA3FJHdj2xFpHzmC0WbzOnSE+QOBh2TQfQk7kN9e1YN+DMp0vbo9N9UdV2E3jUdJ
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252325844484854663492764665761424075359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74940'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haute-Savoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANNECY LE VIEUX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANNECY LE VIEUX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3 RUE DU PRE FAUCON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PAE DES GLAISINS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOPRA STERIA GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 326820065'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soprasteria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26152380521835441507405202411134382433532626338617382275385085972632764343456592201075929201459782871116466801242744286488757867718197595192022919239847116918342342945947981296205176011548831833340784158093302794511033477677457682471698509784387917023032995575608013539537718829707682797553774919910638299410373767198242554533105949767785611568506932191102067646345413842472239971904799392995223835353134461549585000215696573401486013669609535707776595373767074631231634351741737943813660141213426317709070300440729141137927091462617526509562642675907622549269048080373288254955864665379564199650963926505481426127281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7e74c845e9342d9d532f0298c8d62136f084bc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.in.sopragroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c48db42d30000040300473045022100a2fef2673771de6f892f1b6d217d0d3b60b81473ed02a2f8fbc0bdf396b21e0c02207db0f307fd7cf0299484d038582b9a045174a3d74b0cac6338549bbfc22243460076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016c48db42f00000040300473045022100803262be33596ef862290bdc59b428a6232642bdebfaf79aca5ea4d9ddad9ede02206d712823a4b59f4c96a6fecfde813e9b5d3c974b94a6bc9cdb61c07b92859670
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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