prod1.dotcom.apps.mnscorp.net

- Marks and Spencer P.L.C. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:64:72:7c:36:02:32:3e:32:a5:80:05:32:2c:fc:13 was issued on by DigiCert Inc.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Marks and Spencer P.L.C.

Organization: Marks and Spencer P.L.C.
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:64:72:7c:36:02:32:3e:32:a5:80:05:32:2c:fc:13
Serial Number (int): 8496919696264791707145686435299654675
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:2c:f7:12:cb:bb:42:f4:62:39:3a:4e:6a:bf:d9:5e:6b:b1:c8:30
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 9e:a6:75:86:c8:c1:6d:af:a9:dd:1b:1c:e3:99:f6:39:11:0d:bc:83
Fingerprint (sha256): 12:4e:22:96:66:85:79:24:42:12:49:46:be:a5:46:0a:49:dc:32:65:f9:a9:f2:e3:9b:f9:37:6e:86:13:b3:94

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate prod1.dotcom.apps.mnscorp.net

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod1.dotcom.apps.mnscorp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod1.dotcom.apps.mnscorp.net
www.marksandspencer.com
int-asset1.marksandspencer.com
int-asset2.marksandspencer.com
cs.marksandspencer.com
store.marksandspencer.com
commerce-api.marksandspencer.com
www.check.marksandspencer.com
int-asset1.check.marksandspencer.com
int-asset2.check.marksandspencer.com
cs.check.marksandspencer.com
store.check.marksandspencer.com
commerce-api.check.marksandspencer.com
int-asset1.cxnmarksandspencer.com
int-asset2.cxnmarksandspencer.com
int-asset1.check.cxnmarksandspencer.com
int-asset2.check.cxnmarksandspencer.com
preview.marksandspencer.com
prod1-asset1.dotcom.apps.mnscorp.net
prod1-asset2.dotcom.apps.mnscorp.net
prod1-commerce-api.dotcom.apps.mnscorp.net
prod1-cs.dotcom.apps.mnscorp.net
prod1-store.dotcom.apps.mnscorp.net
prod1-mc.dotcom.apps.mnscorp.net
prod1-admin.dotcom.apps.mnscorp.net
prod1-orgadmin.dotcom.apps.mnscorp.net
prod1-guestwas.dotcom.apps.mnscorp.net
prod1-assistwas.dotcom.apps.mnscorp.net
prod1-apiwas.dotcom.apps.mnscorp.net
prod1-batchwas.dotcom.apps.mnscorp.net
prod1auth.dotcom.apps.mnscorp.net
prod1auth-mc.dotcom.apps.mnscorp.net
prod1auth-admin.dotcom.apps.mnscorp.net
prod1auth-orgadmin.dotcom.apps.mnscorp.net
prod1auth-guestwas.dotcom.apps.mnscorp.net
prod1auth-batchwas.dotcom.apps.mnscorp.net
christmasfood.marksandspencer.com
christmasfood.marksandspencer.ie
commerce-api.beta.marksandspencer.com
cs.beta.marksandspencer.com
int-asset1.beta.marksandspencer.com
int-asset2.beta.marksandspencer.com
store.beta.marksandspencer.com
www.beta.marksandspencer.com

Other certificates including the domain name mnscorp.net

(limited to 100 certificates)
wcsguest.solitarysnowflake.pulp.devops.mnscorp.net
prod.prod.supergraph.api.mnscorp.net
cssm-lcsimporter-prod.rtl.apps.mnscorp.net
foodsgraphicsviewer.mnscorp.net
remoteaccess.mnscorp.net
food-ordering-mvp.rtl.apps.mnscorp.net
*.sit2.loyalty.devops.mnscorp.net
dev.nonprod.customer-profile-orchestration.api.mnscorp.net
dev.nonprod.stock-domain-api.api.mnscorp.net
sit2.loyalty.env.devops.mnscorp.net
pigw-imagery-service.itl.apps.mnscorp.net
dev.nonprod.yggdrasil.gql.mnscorp.net
*.dev.services.mnscorp.net
preview.origin.mnscorp.net
stage.auth.devops.mnscorp.net
brightcloud.engineering.mnscorp.net
portal.muziris.cloud.mnscorp.net
cqauthor.att.mnscorp.net
preprod-slot.prod.my-account.web.engineering.mnscorp.net
prometheus.dotcomdr.platform.mnscorp.net
jenkins.quantum.foods.devops.mnscorp.net
cqpublish.att.mnscorp.net
prod.prod.fastin.test.mnscorp.net
tms.chl.apps.mnscorp.net
dev.nonprod.pnx-jarvis.web.engineering.mnscorp.net
eucvpn-gw2.mnscorp.net
portal.muziris.cloud.mnscorp.net
preprod-slot.prod.location.web.engineering.mnscorp.net
graphql.engineering.mnscorp.net
SCCM-CLISUP.MNSCORP.NET
ctxaccesscag.mnscorp.net
em.dotcomst.platform.mnscorp.net
remote.mnscorp.net
dev.nonprod.jaeger-mock.web.engineering.mnscorp.net
egiftcard.env.devops.mnscorp.net
HODCzech.mnscorp.net
registry.pulp.devops.mnscorp.net
oraworkbench.att.mnscorp.net
preprod-slot.prod.candh-ordering-core.api.mnscorp.net
sts.mnscorp.net
*.perf.loyalty.devops.mnscorp.net
*.engineering.mnscorp.net
prod.prod.yggdrasil.gql.mnscorp.net
ifo-catalogue-orchestrationapi.itl.apps.mnscorp.net
CSSMGM.mnscorp.net
preprodsplunk.dotcom.platform.mnscorp.net
omsapps.dotcom.platform.mnscorp.net
preview.att.mnscorp.net
portal.muziris.cloud.mnscorp.net
st.marksandspencer.com
appointments.rtl.apps.mnscorp.net
ifo-catalogue-coreapi.itl.apps.mnscorp.net
cssm-food-prod.rtl.apps.mnscorp.net
dev.nonprod.pnx-recs.web.engineering.mnscorp.net
wcsguest.testymctestface.pulp.devops.mnscorp.net
reporter.mnscorp.net
oms.sit2.att.mnscorp.net
*.fesk-test.engineering.mnscorp.net
brightcloud.engineering.mnscorp.net
*.dotcom.platform.mnscorp.net
*.shsrv.platform.mnscorp.net
storecollections-service.env.devops.mnscorp.net
*.dotcomft.platform.mnscorp.net
*.fesk-prod-neu.engineering.mnscorp.net
pre-dev-slot.nonprod.customerorder.api.mnscorp.net
preprod-slot.prod.yggdrasil.gql.mnscorp.net
*.az.mnscorp.net
*.dp.mnscorp.net
intl-pricing-core.itl.apps.mnscorp.net
mobile.engineering.mnscorp.net
prod.prod.onyxaprt.web.engineering.mnscorp.net
prod.prod.jaeger.web.engineering.mnscorp.net
BPMWebProd.mnscorp.net
ctxaccesscag.mnscorp.net
cnh-domainservices-sapoutbound.cah.apps.mnscorp.net
stage.auth.devops.mnscorp.net
prod.prod.jaeger.web.engineering.mnscorp.net
dev.nonprod.tms-paragon-server-core.api.mnscorp.net
dr-pim.dotcom.apps.mnscorp.net
prod.prod.browse.web.engineering.mnscorp.net
foodsgraphics.mnscorp.net
oms.att.mnscorp.net
support.rda.devops.mnscorp.net
wcsguest.bankruptbulldog.pulp.devops.mnscorp.net
52.31.55.113.pulp.devops.mnscorp.net
*.dev.platform.mnscorp.net
rpc.mnscorp.net
preview.origin.mnscorp.net
prod.prod.spkscom.web.engineering.mnscorp.net
dev.nonprod.pnx-session-ingest.api.mnscorp.net
stocklocator.env.devops.mnscorp.net
*.cicd.mac.apps.mnscorp.net
adminconsole.att.mnscorp.net
prod.prod.sparks-charity.web.engineering.mnscorp.net
prod.prod.pnx-recs.web.engineering.mnscorp.net
auth.att.mnscorp.net
pacific.b2b.mnscorp.net
locust-assimilation.engineering.mnscorp.net
dr062011.mnscorp.net
*.cicd.data.apps.mnscorp.net

Certificate

The complete raw certificate details for prod1.dotcom.apps.mnscorp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILhjCCCm6gAwIBAgIQBmRyfDYCMj4ypYAFMiz8EzANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
NzE5MDAwMDAwWhcNMjQwODE0MjM1OTU5WjBpMQswCQYDVQQGEwJHQjEPMA0GA1UE
BxMGTG9uZG9uMSEwHwYDVQQKExhNYXJrcyBhbmQgU3BlbmNlciBQLkwuQy4xJjAk
BgNVBAMTHXByb2QxLmRvdGNvbS5hcHBzLm1uc2NvcnAubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLb556gMBIGbqEaDNnLcx6vQGLUUR9Ath04J
laUUIbZulOsmYn2QVF2MVYE0CB03nukJ3erLPYZQf3NmKQSAD5DtwD18UJs3Hk/U
fa2hiCU/brXYOs2Sztd0sCl1turOVcwzeDu3db8XAZT+zd4pKtYGq/Vxo9duQRF4
Pe8zGPfGx1sRon9taR0hDKLqAQUgd6DUSnwM9HYlSkPdiKJp4NOfUWP6uHz4UTMr
drza5zjBt1YMbopjEtMtjlMFjfzGo1jK65ayJsP7I+xQqpw2wYQvbAjP7xEfvdHT
WkjSmg0LffFyq5Ht/bRhdnUh+OECYbtyBPdNGmeZ0Ri6x/XoPwIDAQABo4IIODCC
CDQwHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7tzRcwHQYDVR0OBBYEFP8s
9xLLu0L0Yjk6Tmq/2V5rscgwMIIGNQYDVR0RBIIGLDCCBiiCHXByb2QxLmRvdGNv
bS5hcHBzLm1uc2NvcnAubmV0ghd3d3cubWFya3NhbmRzcGVuY2VyLmNvbYIeaW50
LWFzc2V0MS5tYXJrc2FuZHNwZW5jZXIuY29tgh5pbnQtYXNzZXQyLm1hcmtzYW5k
c3BlbmNlci5jb22CFmNzLm1hcmtzYW5kc3BlbmNlci5jb22CGXN0b3JlLm1hcmtz
YW5kc3BlbmNlci5jb22CIGNvbW1lcmNlLWFwaS5tYXJrc2FuZHNwZW5jZXIuY29t
gh13d3cuY2hlY2subWFya3NhbmRzcGVuY2VyLmNvbYIkaW50LWFzc2V0MS5jaGVj
ay5tYXJrc2FuZHNwZW5jZXIuY29tgiRpbnQtYXNzZXQyLmNoZWNrLm1hcmtzYW5k
c3BlbmNlci5jb22CHGNzLmNoZWNrLm1hcmtzYW5kc3BlbmNlci5jb22CH3N0b3Jl
LmNoZWNrLm1hcmtzYW5kc3BlbmNlci5jb22CJmNvbW1lcmNlLWFwaS5jaGVjay5t
YXJrc2FuZHNwZW5jZXIuY29tgiFpbnQtYXNzZXQxLmN4bm1hcmtzYW5kc3BlbmNl
ci5jb22CIWludC1hc3NldDIuY3hubWFya3NhbmRzcGVuY2VyLmNvbYInaW50LWFz
c2V0MS5jaGVjay5jeG5tYXJrc2FuZHNwZW5jZXIuY29tgidpbnQtYXNzZXQyLmNo
ZWNrLmN4bm1hcmtzYW5kc3BlbmNlci5jb22CG3ByZXZpZXcubWFya3NhbmRzcGVu
Y2VyLmNvbYIkcHJvZDEtYXNzZXQxLmRvdGNvbS5hcHBzLm1uc2NvcnAubmV0giRw
cm9kMS1hc3NldDIuZG90Y29tLmFwcHMubW5zY29ycC5uZXSCKnByb2QxLWNvbW1l
cmNlLWFwaS5kb3Rjb20uYXBwcy5tbnNjb3JwLm5ldIIgcHJvZDEtY3MuZG90Y29t
LmFwcHMubW5zY29ycC5uZXSCI3Byb2QxLXN0b3JlLmRvdGNvbS5hcHBzLm1uc2Nv
cnAubmV0giBwcm9kMS1tYy5kb3Rjb20uYXBwcy5tbnNjb3JwLm5ldIIjcHJvZDEt
YWRtaW4uZG90Y29tLmFwcHMubW5zY29ycC5uZXSCJnByb2QxLW9yZ2FkbWluLmRv
dGNvbS5hcHBzLm1uc2NvcnAubmV0giZwcm9kMS1ndWVzdHdhcy5kb3Rjb20uYXBw
cy5tbnNjb3JwLm5ldIIncHJvZDEtYXNzaXN0d2FzLmRvdGNvbS5hcHBzLm1uc2Nv
cnAubmV0giRwcm9kMS1hcGl3YXMuZG90Y29tLmFwcHMubW5zY29ycC5uZXSCJnBy
b2QxLWJhdGNod2FzLmRvdGNvbS5hcHBzLm1uc2NvcnAubmV0giFwcm9kMWF1dGgu
ZG90Y29tLmFwcHMubW5zY29ycC5uZXSCJHByb2QxYXV0aC1tYy5kb3Rjb20uYXBw
cy5tbnNjb3JwLm5ldIIncHJvZDFhdXRoLWFkbWluLmRvdGNvbS5hcHBzLm1uc2Nv
cnAubmV0gipwcm9kMWF1dGgtb3JnYWRtaW4uZG90Y29tLmFwcHMubW5zY29ycC5u
ZXSCKnByb2QxYXV0aC1ndWVzdHdhcy5kb3Rjb20uYXBwcy5tbnNjb3JwLm5ldIIq
cHJvZDFhdXRoLWJhdGNod2FzLmRvdGNvbS5hcHBzLm1uc2NvcnAubmV0giFjaHJp
c3RtYXNmb29kLm1hcmtzYW5kc3BlbmNlci5jb22CIGNocmlzdG1hc2Zvb2QubWFy
a3NhbmRzcGVuY2VyLmllgiVjb21tZXJjZS1hcGkuYmV0YS5tYXJrc2FuZHNwZW5j
ZXIuY29tghtjcy5iZXRhLm1hcmtzYW5kc3BlbmNlci5jb22CI2ludC1hc3NldDEu
YmV0YS5tYXJrc2FuZHNwZW5jZXIuY29tgiNpbnQtYXNzZXQyLmJldGEubWFya3Nh
bmRzcGVuY2VyLmNvbYIec3RvcmUuYmV0YS5tYXJrc2FuZHNwZW5jZXIuY29tghx3
d3cuYmV0YS5tYXJrc2FuZHNwZW5jZXIuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZC
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FT
SEEyNTYyMDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5j
b20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwPgYD
VR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0Ex
LTEuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN
AQELBQADggEBABGX0NQUl8ogdsyD8kinx+LRS8HBmvgqWNYZC9qUdvyy/gYgJGhz
047oTkJUSdnxDHiKeomyfjPctS6Y3s5fGoNHj9GH7yfTuWi4YWj2aNCcikRyA+AW
vyxRehId5T59+MezpngDOt+nsz7ehpijT7yAk2oWK7H6x6Fs5PXrD4LTDAEyDLRR
BeC+e8Gty+T8TDQnkf0Wmwswxbg237A5i3EQAUJXUbYIbv0y5Vx5hgOtnLonEno8
x7B9ftV1h7LKyX27vW9wTwWHav5P4l1w8L/CT9SBPXvYiv6w639dfbTlfOau/8Me
68gZiDoDfNprzZN2IKqmRSw25v58qINaTzY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLb556gMBIGbqEaDNnLc
x6vQGLUUR9Ath04JlaUUIbZulOsmYn2QVF2MVYE0CB03nukJ3erLPYZQf3NmKQSA
D5DtwD18UJs3Hk/Ufa2hiCU/brXYOs2Sztd0sCl1turOVcwzeDu3db8XAZT+zd4p
KtYGq/Vxo9duQRF4Pe8zGPfGx1sRon9taR0hDKLqAQUgd6DUSnwM9HYlSkPdiKJp
4NOfUWP6uHz4UTMrdrza5zjBt1YMbopjEtMtjlMFjfzGo1jK65ayJsP7I+xQqpw2
wYQvbAjP7xEfvdHTWkjSmg0LffFyq5Ht/bRhdnUh+OECYbtyBPdNGmeZ0Ri6x/Xo
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8496919696264791707145686435299654675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marks and Spencer P.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod1.dotcom.apps.mnscorp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25842843135759064561562523248709156235275748203908509454923982286344019547146258822998480396008690326790998470243808629425648014936037495186098823117514318041806582347616519389299199459492056404520669413568832654481562267799815018695109221584241123286579832495535364267084855266089304294567788159042212450904988541036798295141301209353758388991813238657250850720932186806875180014301005516824970921871132601102751684573461050408260377508827133950633885768289985468748546329188493396348617613456452751924311301761559192137983232487659126056019925180435116438276659839969116941829550026531582655469721632516064264185919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff2cf712cbbb42f462393a4e6abfd95e6bb1c830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.check.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.check.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.check.cxnmarksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-asset1.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-asset2.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-commerce-api.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-cs.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-store.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-mc.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-admin.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-orgadmin.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-guestwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-assistwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-apiwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-batchwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth-mc.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth-admin.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth-orgadmin.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth-guestwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1auth-batchwas.dotcom.apps.mnscorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmasfood.marksandspencer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-api.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset1.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-asset2.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.marksandspencer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001197d0d41497ca2076cc83f248a7c7e2d14bc1c19af82a58d6190bda9476fcb2fe0620246873d38ee84e425449d9f10c788a7a89b27e33dcb52e98dece5f1a83478fd187ef27d3b968b86168f668d09c8a447203e016bf2c517a121de53e7df8c7b3a678033adfa7b33ede8698a34fbc80936a162bb1fac7a16ce4f5eb0f82d30c01320cb45105e0be7bc1adcbe4fc4c342791fd169b0b30c5b836dfb0398b711001425751b6086efd32e55c798603ad9cba27127a3cc7b07d7ed57587b2cac97dbbbd6f704f05876afe4fe25d70f0bfc24fd4813d7bd88afeb0eb7f5d7db4e57ce6aeffc31eebc819883a037cda6bcd937620aaa6452c36e6fe7ca8835a4f36