b12oftp.tgms.gxs.com

- Open Text Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 3f:2d:ec:3d:ab:2c:76:43:65:4f:f6:e8:93:52:9b:a7 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Open Text Corporation

Organization: Open Text Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:2d:ec:3d:ab:2c:76:43:65:4f:f6:e8:93:52:9b:a7
Serial Number (int): 83979808627643830298558568882016263079
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 59:56:d9:81:6e:75:e9:41:86:e1:fc:e7:69:73:63:84:9f:dc:95:7d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 5b:85:8c:6f:42:bb:54:64:e8:de:98:26:9f:fe:f9:6f:fb:49:1b:11
Fingerprint (sha256): 13:f5:df:7f:be:cf:0b:f7:ef:87:3f:91:63:5f:0e:e4:9f:d0:70:39:c6:89:9a:47:ce:2f:e5:d4:1b:99:45:38

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate b12oftp.tgms.gxs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b12oftp.tgms.gxs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b12oftp.tgms.gxs.com
www.b12oftp.tgms.gxs.com

Other certificates including the domain name gxs.com

(limited to 100 certificates)
betagrid-eu.gxs.com
peztrade.ms.gxs.com
bsmg-nesao.ms.gxs.com
web-modp.p12smgws.tgms.gxs.com
pbwipap.eu.gxs.com
test.b2b.rbs.gxs.com
stpws-uat.gxs.com
web.smg.ms1.eu.gxs.com
viewsslt.dcts.us.gxs.com
as2bizlinkp12.ics.eu.gxs.com
vpn-prep-ftf.cp.gxs.com
www.gxs.com
viewssl.dcts.us.gxs.com
smg.ms.gxs.com
ws-vpn-pe2-ftf.cp.gxs.com
bas2-jpn.ms.gxs.com
pauth-citi.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pci.betagrid.eu.gxs.com
pweb-nesam.ms.gxs.com
p12ftps.tgms.gxs.com
b2b2-ca.rbs.gxs.com
b2b.rbs.gxs.com
as2bizlinkp11.tgms.gxs.com
elitelibrary.ypa.us.gxs.com
naesb.peco.us.gxs.com
as2b.bmomft.gxs.com
www.gxs.com
*.gxs.com
*.gxs.com
b2b.accessbulkchannel.abnamro.gxs.com
account.rs.gxs.com
as2p.bmomft.gxs.com
p10csrrest.tgms.gxs.com
uweb-citi.ms.gxs.com
p11csrrest.tgms.gxs.com
bronet-jpctr.ms.gxs.com
viewssl-test.dcts.us.gxs.com
b11csrrest.tgms.gxs.com
b10csrrest-d.tgms.gxs.com
crm-adamdev.internal.gxs.com
cas2-citi.ms.gxs.com
gxs.com
ROSETTANET_PREPROD.ECSC.US.GXS.COM
b10ftps.tgms.gxs.com
pweb-nesrt.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pciportal.gxs.com
bizlinkp11.tgms.gxs.com
discover-wam-cert.dfs.eu.gxs.com
pweb-citi.ms.gxs.com
nestlemobile.gxs.com
*.rs.cp.gxs.com
beta.mercportals.db.eu.gxs.com
dcts.staging.glaxo.eu.gxs.com
wam.ypima.us.gxs.com
bdcts01.eu.gxs.com
vpn-prod-ftf.cp.gxs.com
ssl2.tradinggrid.gxs.com
viewssl-test.dcts.us.gxs.com
icnet.gxs.com
novartis.gxs.com
intel.ma.smg.tradinggrid.gxs.com
bizlinkb.nestlemft.gxs.com
bizlinkb10.tgms.gxs.com
bdcts01.eu.gxs.com
bweb.smg.ms.eu.gxs.com
beta-smg-ca.tradinggrid.gxs.com
cataloguebeta.gxs.com
staging.dafne.eu.gxs.com
staging.oilex.eu.gxs.com
impmq.gxs.com
orderapp.ms.gxs.com
bweb-jpctr.ms.gxs.com
betagrid.gxs.com
as2bizlinkp12.tgms.gxs.com
b12csrrest-d.tgms.gxs.com
b12oftp.tgms.gxs.com
b11csrrest-d.tgms.gxs.com
as2b.nestlemft.gxs.com
vendorportal.gxs.com
ebics.baml.gxs.com
lv.gxs.com
as2bizlinkp11.tgms.gxs.com
p14ronet.ms.gxs.com
as2.rbs.gxs.com
as2bizlinkp12.ics.eu.gxs.com
campbells.gxs.com
vendorportal.gxs.com
lvbeta.gxs.com
as2.rbs.gxs.com
*.gxs.com
viewssl.dcts.us.gxs.com
pbwipap.eu.gxs.com
www.arla.eu.gxs.com
test.ebics.rbs.gxs.com
bizlinkb12.ics.eu.gxs.com
as2sslauthtgbizp12.app.gxs.com
rdgw.opentext.com
nestlemobile.gxs.com

Certificate

The complete raw certificate details for b12oftp.tgms.gxs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIQPy3sPassdkNlT/bok1KbpzANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIyMTIyMDAwMDAwMFoXDTI0MDEyMDIzNTk1OVowXjELMAkGA1UE
BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xHjAcBgNVBAoTFU9wZW4gVGV4dCBDb3Jw
b3JhdGlvbjEdMBsGA1UEAxMUYjEyb2Z0cC50Z21zLmd4cy5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCird2jf7XtdQuqqqrsYLpVlN7bZmH5VQLT
tP+lkTL88TSn/U+EMPrI1fRVYBh95lPjewpgdu4+RDUfIx5o5p2XLv7ErL77pT/2
5xxa5ZERucrySRJpERQa0e0TUmvN17PXniW0Z5yZFTHMWOAExGLvqFk+Q/X1eehf
dZy8HkxMrQilCJ9GbyO8bo2O7Ic7gfu4A4oJuVfO3iS7iKr2AadjQjhyeLeiSUzj
bU0zCCb2VMOqd+QnOXJG96rMgkHR285n1xdXCp6BrSBGEuVBSjZUByZ0HziGQwe2
hUh3TP2cN0SuSoSJRuDgW6mTm6gJkjKNYUwrMNCJpA2UYYlSyILBAgMBAAGjggIG
MIICAjAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQU
WVbZgW516UGG4fznaXNjhJ/clX0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYM
KwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20v
Q1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3Rp
Z28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2Vy
dmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9j
cnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25T
ZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3Rp
Z28uY29tMDkGA1UdEQQyMDCCFGIxMm9mdHAudGdtcy5neHMuY29tghh3d3cuYjEy
b2Z0cC50Z21zLmd4cy5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN
AQELBQADggEBABcElBP0nMCRZfgeFfWa0qgoWMyO6LSZdZ8EtXYkNad+867ZIFcA
zzjO/wvkLo5xQkPBvFm0ki5EqiySN4y0NrfY9ioXN72mGZJuLgQ0WO7c2O77B30Q
S7B7XlFZsD8Q55lTNWGkxzx2fWz8jNwK7cyKac/xbfvvpAzHa7AKH7klTLbLeRIB
8+GwobvJQGilPOYDAvuC3dLeaUTANK2UAuiNJ6/0UzEsQOI/F/nOMUFY7R9qpzaP
eCL9ZaDpoi5nHaF1YIZuMSHM2BbSQT3EJkgNAVCYk5TXdoh0W2DOFuxzHgg4PgTS
JTElsTy0ctsX5SoM4F4ESRTPfcSdvP84C+I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq3do3+17XULqqqq7GC6
VZTe22Zh+VUC07T/pZEy/PE0p/1PhDD6yNX0VWAYfeZT43sKYHbuPkQ1HyMeaOad
ly7+xKy++6U/9uccWuWREbnK8kkSaREUGtHtE1Jrzdez154ltGecmRUxzFjgBMRi
76hZPkP19XnoX3WcvB5MTK0IpQifRm8jvG6NjuyHO4H7uAOKCblXzt4ku4iq9gGn
Y0I4cni3oklM421NMwgm9lTDqnfkJzlyRveqzIJB0dvOZ9cXVwqega0gRhLlQUo2
VAcmdB84hkMHtoVId0z9nDdErkqEiUbg4Fupk5uoCZIyjWFMKzDQiaQNlGGJUsiC
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83979808627643830298558568882016263079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b12oftp.tgms.gxs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20536341814108916895535868401947127905169882065667557298662011658488616450496779084602427534881021237895104471814277599091955254991891281382916687882143404158971254003851579604582182759876474769468124303223374282742646548535306160411781555266801116676264288328085391786412554690770212717037694577488456929925150896707224621777006941185104091621892786618255670701678543488814707447036761082981773426146644870558567751777051609938283674486826041529034487100388816542617398206432313697495814512210185406326754092234584128890327482181999737238988659594122620802067016239402495235915200491483152901876600560009571832726209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5956d9816e75e94186e1fce7697363849fdc957d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b12oftp.tgms.gxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b12oftp.tgms.gxs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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