federate.tmb.bakerhughes.com

- Baker Hughes Company -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 3d:90:dc:78:e1:eb:3f:fd:37:fe:6a:4a:8b:fb:da:11 was issued on by Sectigo Limited.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Baker Hughes Company

Organization: Baker Hughes Company
State / Province: Texas
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:90:dc:78:e1:eb:3f:fd:37:fe:6a:4a:8b:fb:da:11
Serial Number (int): 81835070197919715462415930708941593105
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b7:ea:1b:52:6f:ed:df:fd:96:0b:09:f5:03:33:c3:bc:2b:e9:f0:66
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 98:51:6e:02:4a:46:e7:01:da:cc:b5:61:83:17:da:4f:24:b1:2f:0e
Fingerprint (sha256): 13:14:3c:ad:66:f5:83:ac:c5:c9:ac:d8:39:b5:c1:09:60:15:30:27:03:f5:f7:5b:b4:b7:13:a9:0f:b8:1d:fe

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate federate.tmb.bakerhughes.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for federate.tmb.bakerhughes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

federate.tmb.bakerhughes.com
bes.dev.welllink.bakerhughes.com
federate.bakerhughes.com
qa-authnidp.welllink.bakerhughes.com
qa-bes.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
qa-wldsstg.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
qa-wlw-stage.welllink.bakerhughes.com
sign.federate.tmb.bakerhughes.com
wlds.dev.welllink.bakerhughes.com
wlw.dev.welllink.bakerhughes.com
www.bes.dev.welllink.bakerhughes.com
www.qa-bes.welllink.bakerhughes.com
www.qa-federate.welllink.bakerhughes.com
www.qa-wldsstg.welllink.bakerhughes.com
www.qa-wlrt.welllink.bakerhughes.com
www.sign.federate.tmb.bakerhughes.com
www.wlds.dev.welllink.bakerhughes.com
www.wlw.dev.welllink.bakerhughes.com

Other certificates including the domain name bakerhughes.com

(limited to 100 certificates)
wlrtwh.welllink.bakerhughes.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com

Certificate

The complete raw certificate details for federate.tmb.bakerhughes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcnAtEMoZXgTYUW09vLq
2ephmweJzeg2avFpbG+vG/tgOvIJZQnql5qPIUzSo/oCCNzOS7y5dscXiqDzZQNC
S88Of5s+D64XjmRdZoC7UaaO8OvZgU3YxMC8R9AfN+j2hgXH/sokXr83DnRefR7K
7ulJ5IOpoc+PIDU9nNAql0uR4SkIuDZzarEevz/VMynCYdCNNNaCvs41WB4pfZ4J
do2JIIBSC0P/pmoLP5wCpne31/toLJneIJIkTPVoOYY12IhZzh7lHT384tUN3XtJ
udCyYiZ+0FScsAooW8p/TQSSQFG5/ECejLRj18Vel2Mpu+ynLoyf0DZcUhylYK9g
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81835070197919715462415930708941593105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baker Hughes Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'federate.tmb.bakerhughes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21433761528545484596277689738023213724464114379857203353130429020813714393517349825639872532763494167785218074688143184118898249495302332534828941741522990745987221592661733392319653114379468589728239289886888505124982884803342533414239013676631098079875869499825437088385309429109307304801799338690487631585547366375215545804275992625633822387520515019433838399855726150485876739037753047999708663762531743103446090427514597126953606636419667438707756045911000318466965071971352453084119870279774541094443161309129425858926115099779489914822927467876238834259568899349866665079064800318040527404017050337866031259833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7ea1b526feddffd960b09f50333c3bc2be9f066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federate.tmb.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.dev.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federate.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-authnidp.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-bes.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-federate.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-wldsstg.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-wlrt.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-wlw-stage.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sign.federate.tmb.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlds.dev.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlw.dev.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bes.dev.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-bes.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-federate.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-wldsstg.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-wlrt.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sign.federate.tmb.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlds.dev.welllink.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlw.dev.welllink.bakerhughes.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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