mail.tsagroup.com.au

- Telco Services Australia Pty Ltd -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 52:ff:fb:50:d4:68:06:94:9f:a3:7e:65:0d:bc:25:77 was issued on by The USERTRUST Network.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Telco Services Australia Pty Ltd

Organization: Telco Services Australia Pty Ltd
Organization unit: Unified Communications
Address: 650 Murray Street
Postal code: 6005
State / Province: Western Australia
Locality: West Perth
Country: AU

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:ff:fb:50:d4:68:06:94:9f:a3:7e:65:0d:bc:25:77
Serial Number (int): 110325828642089581776996146726957753719
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3c:71:6e:ec:00:6c:d0:fe:2d:95:0c:8c:0b:ba:58:9e:ed:45:69:a5
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 3b:8f:bf:78:47:53:67:bf:68:4f:11:dc:cc:77:c5:11:60:d6:63:ce
Fingerprint (sha256): 15:7b:76:c6:18:29:21:bb:53:10:69:09:78:46:36:e0:a7:75:45:72:a6:20:75:f4:9c:89:8a:e4:a3:5c:a8:e6

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate mail.tsagroup.com.au

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.tsagroup.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tsagroup.com.au
autodiscover.tsa.local
legacy.tsagroup.com.au
mail.tsa.local
per1svr6.tsa.local

Other certificates including the domain name tsagroup.com.au

(limited to 100 certificates)
tsagroup.com.au
helpdesk.benedict.com.au
extranet.tsagroup.com.au
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
telstra.tsagroup.com.au
mail.tsagroup.com.au
harmonyc.tsagroup.com.au
servicedesk.mcson.com.au
helpdesk.essencegp.com.au
tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.mstglobal.com
helpdesk.sureway.com.au
harmony.tsagroup.com.au
helpdesk.sureway.com.au
mail.tsagroup.com.au
extranet.tsagroup.com.au
servicedesk.aqwest.com.au
*.tsagroup.com.au
harmony.tsagroup.com.au
support.tsagroup.com.au
crm.tsagroup.com.au
tsagroup.com.au
tsagroup.com.au
tsagroup.com.au
servicedesk.stgiles.org.au
itservicedesk.windsor.co.nz
helpdesk.benedict.com.au
helpdesk.sureway.com.au
helpdesk.benedict.com.au
servicedesk.aqwest.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.timberlinkaustralia.com.au
helpdesk.timberlinkaustralia.com.au
tsagroup.com.au
testtelstra.tsagroup.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
tsagroup.com.au
helpdesk.mccolls.com.au
testtelstra.tsagroup.com.au
helpdesk.timberlinkaustralia.com.au
telstra.tsagroup.com.au
helpdesk.mstglobal.com
helpdesk.benedict.com.au
remoteapp.tsagroup.com.au
harmonyd.tsagroup.com.au
*.tsagroup.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
tsagroup.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
telstra.tsagroup.com.au
*.tsagroup.com.au
crm.tsagroup.com.au
itservicedesk.windsor.co.nz
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
helpdesk.essencegp.com.au
servicedesk.4dmedical.com
support.tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.benedict.com.au
servicedesk.defencebank.com.au
helpdesk.essencegp.com.au
servicedesk.maib.tas.gov.au
tsagroup.com.au
helpdesk.benedict.com.au
support.tsagroup.com.au
harmony.tsagroup.com.au
tsavpn2.tsagroup.com.au
extranet.tsagroup.com.au
servicedesk.mcson.com.au
*.tsagroup.com.au
itservicedesk.windsor.co.nz
mail.tsagroup.com.au
*.tsagroup.com.au
tsagroup.com.au
helpdesk.mstglobal.com
mail.tsagroup.com.au
helpdesk.maitland.nsw.gov.au
helpdesk.benedict.com.au
noblecontactsvc.tsagroup.com.au
crm.tsagroup.com.au
helpdesk.mccolls.com.au
harmony.tsagroup.com.au
helpdesk.benedict.com.au
support.tsagroup.com.au
mail.tsagroup.com.au
helpdesk.sureway.com.au
*.tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.timberlinkaustralia.com.au
servicedesk.stgiles.org.au

Certificate

The complete raw certificate details for mail.tsagroup.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolry+KP4bO0UyfibDjTd
1hwE1REeYREdaOKRI2SvkSciLstjmCdfnDhqgAzQF6L9zpHlRrzJft1hC8znZw5P
Ktx+KPzzBGcYGdlEOCfaMUMWdhCiPTdKslkKpgUfITbIa9GQeLT036Nf6LHTN1se
B7JGvs7lgyc0AcZ76NbH5gETdUh7OdjpTnGFLyIij/32AcIXebChANSunWTg7we9
F7vvWU6muMOMv5oSX+RrX+rpjhl0eJwr7pZsxjRgo3RaLc9s+Eq7tb3J7Y8FpwnE
Y2Uu6LP94Owe3dD38babuxB6JsEuhoJGCn/o1ZA1ljlgGOyk+Y2YHizBfYdvuq/o
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110325828642089581776996146726957753719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6005'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Australia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Perth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '650 Murray Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telco Services Australia Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.tsagroup.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20495454080426556020313141862512668834720765760370500946858864661746899851928449380236731003776075167083186939740995048775842548859895047086079652762933523322887713620899242573237652357422819412600430680562654891341186343563357940508434827862681564127431439790923113266378279334745977454743209547064008488882853295640455379789062614385449997763171797354380157782486992952224134722475242226489597574433222998438512882758163714394464734606224642731671274195267418280988855801156724715176859322405476997056065096689753505699693413146044622777182455571210923468140428960954193672889865632075647408960246604661311486814213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c716eec006cd0fe2d950c8c0bba589eed4569a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tsagroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tsa.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.tsagroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tsa.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'per1svr6.tsa.local'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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