www.vp.marksandspencer.com

- Marks and Spencer P.L.C. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:b8:32:88:ed:4f:42:30:81:0a:fe:b3:12:3f:1c:24 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Marks and Spencer P.L.C.

Organization: Marks and Spencer P.L.C.
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:b8:32:88:ed:4f:42:30:81:0a:fe:b3:12:3f:1c:24
Serial Number (int): 18236371536128364193208659545698540580
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f9:4d:14:62:52:4c:ab:e9:b5:9f:fd:40:50:18:15:c2:13:40:e6:fd
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 34:24:b2:8a:1c:61:dd:28:1d:0d:d0:8f:a2:d0:43:ac:12:3e:d2:92
Fingerprint (sha256): 0c:fa:28:07:ee:ab:46:3b:37:a8:93:eb:d2:52:b5:4f:2b:55:fc:6c:74:29:77:7c:74:ee:b4:25:78:b6:8d:b6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.vp.marksandspencer.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vp.marksandspencer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vp.marksandspencer.com
int-asset2.check.migration.marksandspencer.com
int-asset1.vp.migration.marksandspencer.com
int-asset1.vp.marksandspencer.com
int-asset1.vp.cxnmarksandspencer.com
int-asset1.stagecheck.marksandspencer.com
int-asset1.stage.marksandspencer.com
int-asset1.stage.cxnmarksandspencer.com
int-asset1.sit2.migration.marksandspencer.com
int-asset1.sit2.migration.cxnmarksandspencer.com
int-asset1.migration.marksandspencer.com
int-asset1.migration.cxnmarksandspencer.com
int-asset1.check.migration.marksandspencer.com
ibt.stage.apps.mnscorp.net
ibt.apps.mnscorp.net
failover.sit2.migration.marksandspencer.com
failover.migration.marksandspencer.com
cuis.apps.mnscorp.net
cs.vp.migration.marksandspencer.com
cs.vp.marksandspencer.com
cs.stagecheck.marksandspencer.com
cs.stage.marksandspencer.com
cs.sit2.migration.marksandspencer.com
cs.migration.marksandspencer.com
cs.check.migration.marksandspencer.com
commerce-api.vp.migration.marksandspencer.com
commerce-api.vp.marksandspencer.com
commerce-api.stagecheck.marksandspencer.com
commerce-api.stage.marksandspencer.com
commerce-api.sit2.migration.marksandspencer.com
commerce-api.migration.marksandspencer.com
commerce-api.check.migration.marksandspencer.com
cnh-rtm-api.apps.mnscorp.net
christmasfood.vp.marksandspencer.ie
christmasfood.vp.marksandspencer.com
christmasfood.sit2.migration.marksandspencer.ie
christmasfood.sit2.migration.marksandspencer.com
christmasfood.migration.marksandspencer.ie
christmasfood.migration.marksandspencer.com
build.vp.giftcard.marksandspencer.services
build.stage.giftcard.marksandspencer.services
assist.store.stage.marksandspencer.com
assist.store.sit2.marksandspencer.com
assist.store.marksandspencer.com
assist-till.store.marksandspencer.com
assist-mvp.store.marksandspencer.com
assist-innovation.store.marksandspencer.com
aso-ui.apps.mnscorp.net
api.vp.loyalty.marksandspencer.services
api.stage.loyalty.marksandspencer.services
api.stage.loyalty.marksandspencer.com
www.vp.migration.marksandspencer.com
www.stagecheck.marksandspencer.com
www.stage.marksandspencer.com
www.sit2.migration.marksandspencer.com
www.migration.marksandspencer.com
www.christmasfood.sit2.migration.marksandspencer.ie
www.christmasfood.sit2.migration.marksandspencer.com
www.christmasfood.migration.marksandspencer.ie
www.christmasfood.migration.marksandspencer.com
www.christmasfood.marksandspencer.ie
www.christmasfood.marksandspencer.com
www.check.migration.marksandspencer.com
wpt.apps.mnscorp.net
store.vp.migration.marksandspencer.com
store.vp.marksandspencer.com
store.stagecheck.marksandspencer.com
store.stage.marksandspencer.com
store.sit2.migration.marksandspencer.com
store.migration.marksandspencer.com
store.check.migration.marksandspencer.com
sparks-events.apps.mnscorp.net
scrd-ui.apps.mnscorp.net
orca.sit2.apps.mnscorp.net
orca.apps.mnscorp.net
orca-bulkupload-api.sit2.apps.mnscorp.net
orca-bulkupload-api.apps.mnscorp.net
orca-api.sit2.apps.mnscorp.net
orca-api.apps.mnscorp.net
int-asset2.vp.migration.marksandspencer.com
int-asset2.vp.marksandspencer.com
int-asset2.vp.cxnmarksandspencer.com
int-asset2.stagecheck.marksandspencer.com
int-asset2.stagecheck.cxnmarksandspencer.com
int-asset2.stage.marksandspencer.com
int-asset2.stage.cxnmarksandspencer.com
int-asset2.sit2.migration.marksandspencer.com
int-asset2.sit2.migration.cxnmarksandspencer.com
int-asset2.migration.marksandspencer.com
int-asset2.migration.cxnmarksandspencer.com

Other certificates including the domain name marksandspencer.com

(limited to 100 certificates)
corporate.marksandspencer.com
va.marksandspencer.com
auth.ciam.marksandspencer.com
www7.marksandspencer.com
INDISSDIQA.MANDSINDIA.marksandspencer.com
p1escp21.unix.marksandspencer.com
flowersubscriptions.marksandspencer.com
help.marksandspencer.com
marksintime.marksandspencer.com
dev.comshub-msb.marksandspencer.com
adriatic.b2b.marksandspencer.com
msib-fileservice.marksandspencer.com
msib-fileservice.marksandspencer.com
webforms.marksandspencer.com
api-test.marksandspencer.com
dressipi-staging.marksandspencer.com
akamai-san7.exacttarget.com
stg1.dotcom.apps.mnscorpcate.net
sendgrid.trytuesday.com
msib-fileservice.marksandspencer.com
help.marksandspencer.com
dev.comshub-msb.marksandspencer.com
qa.dotcom.apps.mnscorpcate.net
mands.uk
alumni.marksandspencer.com
st.marksandspencer.com
foodmagazine.marksandspencer.com
suppliers.marksandspencer.com
www5.marksandspencer.com
esb.marksandspencer.com
corporder.marksandspencer.com
bra-fit-calculator-uat.marksandspencer.com
capture.marksandspencer.com
api-test.marksandspencer.com
api-sit1.marksandspencer.com
bra-fit-booking.marksandspencer.com
jobs.marksandspencer.com
auth-stage.ciam.marksandspencer.com
www7.marksandspencer.com
mci.bank.marksandspencer.com
cftobrochure.marksandspencer.com
jobs.marksandspencer.com
dev.comshub-msb.marksandspencer.com
comshub-msb.marksandspencer.com
api-stage.marksandspencer.com
alumni.marksandspencer.com
creditcardeligibilitycheck.marksandspencer.com
inforights.marksandspencer.com
webchat2.marksandspencer.com
sparkslive.marksandspencer.com
st.marksandspencer.com
auth-stage.ciam.marksandspencer.com
uat.comshub-msb.marksandspencer.com
sparkslive.marksandspencer.com
auth.ciam.marksandspencer.com
corporder.marksandspencer.com
mshsvn.marksandspencer.com
banklive.marksandspencer.com
supplierexchange1.marksandspencer.com
msib-fileservice.marksandspencer.com
hlxp00m0011.unix.marksandspencer.com
hkhmnshk2k8ftp1.marksandspencer.com
cdntm.marksandspencer.com
marksandspencer.app
flowersubscriptions.marksandspencer.com
flowersubscriptions.marksandspencer.com
mands.uk
www.vp.marksandspencer.com
www7.marksandspencer.com
archive.marksandspencer.com
dev.comshub-msb.marksandspencer.com
CSSMWPC.webapps.marksandspencer.com
akamai-san7.exacttarget.com
www.marksandspencer.com
bw-a-hbp.webapps.marksandspencer.com
partners.ruckusdev.ruckuswireless.com
dressipi-staging.marksandspencer.com
personalisedloanquote.marksandspencer.com
secure.scene7.com
marksandspencer.brandactif.com
mshfmmswebp0001.wintel.marksandspencer.com
BANK.MARKSANDSPENCER.COM
tracking.service.marksandspencer.com
personal-bank.marksandspencer.com
insuranceservicing.marksandspencer.com
stpaccess.marksandspencer.com
marksandspencer.app
personalised.marksandspencer.com
st.marksandspencer.com
mcp.dotcom.apps.mnscorpdev.net
lifeinsurance.marksandspencer.com
webforms.marksandspencer.com
auth-dev.ciam.marksandspencer.com
api-preprod.marksandspencer.com
prod1.dotcom.apps.mnscorp.net
alumni.marksandspencer.com
api.marksandspencer.com
www9.marksandspencer.com
mcp.dotcom.apps.mnscorp.net
bra-fit-booking.marksandspencer.com

Certificate

The complete raw certificate details for www.vp.marksandspencer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O2eComs4UaRr7w7j1TD
ZpZNogk8ItWj16BJ3APfkJn+BxpXZog1ja3ngnK+pfb6EpXSPwY66rLSJoMX5/8A
OA77NRYWgSzFfYAIFSEOODJoZBWXlwMo82Fl3Fjxx44h3mKIPtnYT7NR32WvYitj
ovipl8FfyH7cg8pjz38pHK71jnn5T0LpzBZsEHYWNubu50UP+hhTQDaL49YVrf+r
LA04WIYEQl212aLT2j5XDBPpSL3xaHKKRLixVqkyweXlE6u/Cs4ADZu3YOwcZ9NY
LFUvPr8/8skciYLbOWxCc9Jrciitq7ISKibkYjQvZvBwJ29So5QO0DPgb1tKlYgW
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18236371536128364193208659545698540580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marks and Spencer P.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vp.marksandspencer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26879694134363652353563329511892393757949124664585225292354677555618470346594452783538182384437963968093712806188595284058908895131528068726824591756235407770161020983401502563319662277647587396772911395602469739319849655367638014425394401894214355042226108878444516719303515825391350642796237312812834066479773823043375795830378378525293044009847024312584105178411831095139600566073821987169668677044857937212640283423500858272381291805222232636452038153909895713694439183011316619231850499880289542712378077969595970042893519809171406766951339611147625201700632865729569107653100682145400085775489417397667881293427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f94d1462524cabe9b59ffd40501815c21340e6fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3538 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.vp.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.stage.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.sit2.migration.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.migration.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt.stage.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuis.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh-rtm-api.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.vp.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.sit2.migration.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.migration.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.vp.giftcard.marksandspencer.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.stage.giftcard.marksandspencer.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.store.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.store.sit2.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.store.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist-till.store.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist-mvp.store.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist-innovation.store.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aso-ui.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vp.loyalty.marksandspencer.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.loyalty.marksandspencer.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.loyalty.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.sit2.migration.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.migration.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmasfood.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpt.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.check.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparks-events.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrd-ui.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca.sit2.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-bulkupload-api.sit2.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-bulkupload-api.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-api.sit2.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-api.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.vp.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.vp.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.vp.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.stagecheck.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.stagecheck.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.stage.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.stage.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.sit2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.sit2.migration.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.migration.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.migration.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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