digital-investor-web-app.prod.kea.ifdsfs.com
Issued by R3
About this certificate
This digital certificate with serial number 04:bd:42:50:5d:61:f1:23:2e:29:28:0d:3a:51:88:da:d7:5b was issued on by Let's Encrypt.
With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=digital-investor-web-app.prod.kea.ifdsfs.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:bd:42:50:5d:61:f1:23:2e:29:28:0d:3a:51:88:da:d7:5bSerial Number (int): 412850657400592696736143014113755449186139
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cf:27:63:c1:d7:35:33:c9:29:ae:4b:3b:7e:3f:1e:32:d1:fd:75:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a6:86:b6:b1:38:83:3e:83:6f:3f:57:ad:b2:ed:18:e9:04:7e:1d:99
Fingerprint (sha256): 19:43:e4:10:54:48:a2:0b:1d:51:a9:9b:c1:63:4e:55:48:cd:b5:70:a7:12:2d:7b:f2:36:23:13:89:60:69:08
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate digital-investor-web-app.prod.kea.ifdsfs.com
46
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for digital-investor-web-app.prod.kea.ifdsfs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aberdeen-standard.prod.kea.ifdsfs.com
abrdn.prod.kea.ifdsfs.com
artemis.prod.kea.ifdsfs.com
aviva.prod.kea.ifdsfs.com
axa-im-investing.co.uk
axa.prod.kea.ifdsfs.com
castlefield.direct
castlefield.prod.kea.ifdsfs.com
columbiathreadneedle.prod.kea.ifdsfs.com
crux.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital.bmogam.com
digital.columbiathreadneedle.co.uk
fundrock.prod.kea.ifdsfs.com
fundsmith.prod.kea.ifdsfs.com
investwith.cruxam.com
jpmorgan.myaccountonline.co.uk
jpmorgan.prod.kea.ifdsfs.com
jupiter.prod.kea.ifdsfs.com
myaccount.aberdeenstandard.com
myaccount.abrdn.com
myaccount.artemisfunds.com
myaccount.jupiteram.com
myaccount.mandg.com
myaccount.whebgroup.com
myinvestment.avivainvestors.com
natwestinvestmentsonline.com
rbs.prod.kea.ifdsfs.com
sanford-deland.direct
sanford-deland.prod.kea.ifdsfs.com
wesleyan.prod.kea.ifdsfs.com
wutm.wesleyan.co.uk
www.axa-im-investing.co.uk
www.castlefield.direct
www.digital.bmogam.com
www.investwith.cruxam.com
www.jpmorgan.myaccountonline.co.uk
www.myaccount.aberdeenstandard.com
www.myaccount.artemisfunds.com
www.myaccount.jupiteram.com
www.myaccount.mandg.com
www.myaccount.whebgroup.com
www.myinvestment.avivainvestors.com
www.natwestinvestmentsonline.com
www.sanford-deland.direct
www.wutm.wesleyan.co.uk
abrdn.prod.kea.ifdsfs.com
artemis.prod.kea.ifdsfs.com
aviva.prod.kea.ifdsfs.com
axa-im-investing.co.uk
axa.prod.kea.ifdsfs.com
castlefield.direct
castlefield.prod.kea.ifdsfs.com
columbiathreadneedle.prod.kea.ifdsfs.com
crux.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital.bmogam.com
digital.columbiathreadneedle.co.uk
fundrock.prod.kea.ifdsfs.com
fundsmith.prod.kea.ifdsfs.com
investwith.cruxam.com
jpmorgan.myaccountonline.co.uk
jpmorgan.prod.kea.ifdsfs.com
jupiter.prod.kea.ifdsfs.com
myaccount.aberdeenstandard.com
myaccount.abrdn.com
myaccount.artemisfunds.com
myaccount.jupiteram.com
myaccount.mandg.com
myaccount.whebgroup.com
myinvestment.avivainvestors.com
natwestinvestmentsonline.com
rbs.prod.kea.ifdsfs.com
sanford-deland.direct
sanford-deland.prod.kea.ifdsfs.com
wesleyan.prod.kea.ifdsfs.com
wutm.wesleyan.co.uk
www.axa-im-investing.co.uk
www.castlefield.direct
www.digital.bmogam.com
www.investwith.cruxam.com
www.jpmorgan.myaccountonline.co.uk
www.myaccount.aberdeenstandard.com
www.myaccount.artemisfunds.com
www.myaccount.jupiteram.com
www.myaccount.mandg.com
www.myaccount.whebgroup.com
www.myinvestment.avivainvestors.com
www.natwestinvestmentsonline.com
www.sanford-deland.direct
www.wutm.wesleyan.co.uk
Other certificates including the domain name ifdsfs.com
(limited to 100 certificates)
*.uat.iam.ifdsfs.com
*.dev.iam.ifdsfs.com
*.perf.sjp.ifdsfs.com
api.test.ifdsfs.com
*.dev.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.prod.inst.ifdsfs.com
*.perf.sjp.ifdsfs.com
kubenav.prod.kea.sydney.ifdsfs.com
*.dev.kea.ifdsfs.com
new-investor-ui.dev.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.uat.data.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.iam.sydney.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.dev.datalake.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.data.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.dev.aa.ifdsfs.com
*.dev.sequoia.ifdsfs.com
audit-api-ui.dev.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.uat.iam.sydney.ifdsfs.com
*.prod.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
mattermost.mgmt.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.demo.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.mgmt.ifdsfs.com
kubenav.prod.data.sydney.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.datalake.ifdsfs.com
*.build.ifdsfs.com
signin.mgmt.ifdsfs.com
*.uat.inst.ifdsfs.com
mattermost.mgmt.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tableau.randd.ifdsfs.com
*.prod.inst.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
harness-admin-ui.dev.kea.ifdsfs.com
*.uat.data.ifdsfs.com
*.prod.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
uob-gmo.dev.kea.ifdsfs.com
signin.mgmt.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.kea.ifdsfs.com
api.dev.ifdsfs.com
*.uat.iam.ifdsfs.com
*.playground.ifdsfs.com
*.dev.data.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
grafana.playground.ifdsfs.com
*.dev.blockchain.ifdsfs.com
*.dev.inst.ifdsfs.com
*.dev.iam.ifdsfs.com
*.perf.sjp.ifdsfs.com
api.test.ifdsfs.com
*.dev.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.prod.inst.ifdsfs.com
*.perf.sjp.ifdsfs.com
kubenav.prod.kea.sydney.ifdsfs.com
*.dev.kea.ifdsfs.com
new-investor-ui.dev.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.uat.data.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.iam.sydney.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.dev.datalake.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.data.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.dev.aa.ifdsfs.com
*.dev.sequoia.ifdsfs.com
audit-api-ui.dev.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.uat.iam.sydney.ifdsfs.com
*.prod.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
mattermost.mgmt.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.demo.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.mgmt.ifdsfs.com
kubenav.prod.data.sydney.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.datalake.ifdsfs.com
*.build.ifdsfs.com
signin.mgmt.ifdsfs.com
*.uat.inst.ifdsfs.com
mattermost.mgmt.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tableau.randd.ifdsfs.com
*.prod.inst.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
harness-admin-ui.dev.kea.ifdsfs.com
*.uat.data.ifdsfs.com
*.prod.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
uob-gmo.dev.kea.ifdsfs.com
signin.mgmt.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.kea.ifdsfs.com
api.dev.ifdsfs.com
*.uat.iam.ifdsfs.com
*.playground.ifdsfs.com
*.dev.data.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
grafana.playground.ifdsfs.com
*.dev.blockchain.ifdsfs.com
*.dev.inst.ifdsfs.com
Certificate
The complete raw certificate details for digital-investor-web-app.prod.kea.ifdsfs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJdzCCCF+gAwIBAgISBL1CUF1h8SMuKSgNOlGI2tdbMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MzEwMjU5NDRaFw0yMjExMjkwMjU5NDNaMDcxNTAzBgNVBAMT LGRpZ2l0YWwtaW52ZXN0b3Itd2ViLWFwcC5wcm9kLmtlYS5pZmRzZnMuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtO4uc6TbpoAx99oFE76EOId u59OcR0aGm5Ux9iS7jpTbW6OnLV41YFMJxqqk1kyEUoxPH8mOHCivW5iJaFC89C1 /UOUyD9GvNcwY8KK8H6uchHGbOrGfffu1iT8ycQD+JncGFKuHozCkO4FfXJv6axP BRGi0/w5ME//GZjVq+ZyksSTskI5Qte/vD82a+/WKnEE5VFYN19JOQjVtKewIsOt J1N1LREqoVoqNfpiR65vy2F3AOcDdk8v0ChDFpAqKqvdXf5Hmu5FueszaUkJARFs 9ACWmwyGribum/K2K0joS4usPQShaC/m+BllfH/sQDKUZ9gzDXWok9EVWhKsCQID AQABo4IGgDCCBnwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTPJ2PB1zUzySmuSzt+ Px4y0f11QTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEF BQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggr BgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBUEGA1UdEQSCBTgwggU0 giVhYmVyZGVlbi1zdGFuZGFyZC5wcm9kLmtlYS5pZmRzZnMuY29tghlhYnJkbi5w cm9kLmtlYS5pZmRzZnMuY29tghthcnRlbWlzLnByb2Qua2VhLmlmZHNmcy5jb22C GWF2aXZhLnByb2Qua2VhLmlmZHNmcy5jb22CFmF4YS1pbS1pbnZlc3RpbmcuY28u dWuCF2F4YS5wcm9kLmtlYS5pZmRzZnMuY29tghJjYXN0bGVmaWVsZC5kaXJlY3SC H2Nhc3RsZWZpZWxkLnByb2Qua2VhLmlmZHNmcy5jb22CKGNvbHVtYmlhdGhyZWFk bmVlZGxlLnByb2Qua2VhLmlmZHNmcy5jb22CGGNydXgucHJvZC5rZWEuaWZkc2Zz LmNvbYIsZGlnaXRhbC1pbnZlc3Rvci13ZWItYXBwLnByb2Qua2VhLmlmZHNmcy5j b22CEmRpZ2l0YWwuYm1vZ2FtLmNvbYIiZGlnaXRhbC5jb2x1bWJpYXRocmVhZG5l ZWRsZS5jby51a4IcZnVuZHJvY2sucHJvZC5rZWEuaWZkc2ZzLmNvbYIdZnVuZHNt aXRoLnByb2Qua2VhLmlmZHNmcy5jb22CFWludmVzdHdpdGguY3J1eGFtLmNvbYIe anBtb3JnYW4ubXlhY2NvdW50b25saW5lLmNvLnVrghxqcG1vcmdhbi5wcm9kLmtl YS5pZmRzZnMuY29tghtqdXBpdGVyLnByb2Qua2VhLmlmZHNmcy5jb22CHm15YWNj b3VudC5hYmVyZGVlbnN0YW5kYXJkLmNvbYITbXlhY2NvdW50LmFicmRuLmNvbYIa bXlhY2NvdW50LmFydGVtaXNmdW5kcy5jb22CF215YWNjb3VudC5qdXBpdGVyYW0u Y29tghNteWFjY291bnQubWFuZGcuY29tghdteWFjY291bnQud2hlYmdyb3VwLmNv bYIfbXlpbnZlc3RtZW50LmF2aXZhaW52ZXN0b3JzLmNvbYIcbmF0d2VzdGludmVz dG1lbnRzb25saW5lLmNvbYIXcmJzLnByb2Qua2VhLmlmZHNmcy5jb22CFXNhbmZv cmQtZGVsYW5kLmRpcmVjdIIic2FuZm9yZC1kZWxhbmQucHJvZC5rZWEuaWZkc2Zz LmNvbYIcd2VzbGV5YW4ucHJvZC5rZWEuaWZkc2ZzLmNvbYITd3V0bS53ZXNsZXlh bi5jby51a4Iad3d3LmF4YS1pbS1pbnZlc3RpbmcuY28udWuCFnd3dy5jYXN0bGVm aWVsZC5kaXJlY3SCFnd3dy5kaWdpdGFsLmJtb2dhbS5jb22CGXd3dy5pbnZlc3R3 aXRoLmNydXhhbS5jb22CInd3dy5qcG1vcmdhbi5teWFjY291bnRvbmxpbmUuY28u dWuCInd3dy5teWFjY291bnQuYWJlcmRlZW5zdGFuZGFyZC5jb22CHnd3dy5teWFj Y291bnQuYXJ0ZW1pc2Z1bmRzLmNvbYIbd3d3Lm15YWNjb3VudC5qdXBpdGVyYW0u Y29tghd3d3cubXlhY2NvdW50Lm1hbmRnLmNvbYIbd3d3Lm15YWNjb3VudC53aGVi Z3JvdXAuY29tgiN3d3cubXlpbnZlc3RtZW50LmF2aXZhaW52ZXN0b3JzLmNvbYIg d3d3Lm5hdHdlc3RpbnZlc3RtZW50c29ubGluZS5jb22CGXd3dy5zYW5mb3JkLWRl bGFuZC5kaXJlY3SCF3d3dy53dXRtLndlc2xleWFuLmNvLnVrMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBDvzPZafmW8r0KfdSQzBtYsZPfTOpdYV7MEKoulUG8wQEyGzqK hTImpJMCNUscdJpdr8gviOalGmYOohCS6uxsWB+gf9ZwzLNRq1YobAJE8vh9mbL1 U1sSJl4uGQQYXFGrj/MR+pVD+4qbVw6W1X3TcXVvTgUeWVS6m+JWOstU3C6CbstJ 8Nq3lGHubDtNkNVwQuFtw4UhA+wdZ8Seco4W+t6dQYHf1JIvHvTDPVmhWXjekaPI tqpzJLuxSfMFPqJTV1Ul0QTGxMNnuzaefVx2X5TK4R/Llwh5+I767rNh+OYho7i6 sGvEKPei/+gvA+Qr5J5KuVLnBzG/1c3U4EbT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtO4uc6TbpoAx99oFE76 EOIdu59OcR0aGm5Ux9iS7jpTbW6OnLV41YFMJxqqk1kyEUoxPH8mOHCivW5iJaFC 89C1/UOUyD9GvNcwY8KK8H6uchHGbOrGfffu1iT8ycQD+JncGFKuHozCkO4FfXJv 6axPBRGi0/w5ME//GZjVq+ZyksSTskI5Qte/vD82a+/WKnEE5VFYN19JOQjVtKew IsOtJ1N1LREqoVoqNfpiR65vy2F3AOcDdk8v0ChDFpAqKqvdXf5Hmu5FueszaUkJ ARFs9ACWmwyGribum/K2K0joS4usPQShaC/m+BllfH/sQDKUZ9gzDXWok9EVWhKs CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412850657400592696736143014113755449186139 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 02:59:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 02:59:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital-investor-web-app.prod.kea.ifdsfs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21564915649069687189485247489736834487857973993584969630536869409527258607585449004234303191045376374800374006144981900792298097923309657028965583609274584392513326917433419129706466323359207270964422479695306817587454424834754653991921694226734217434658000444969032134336442865180415907434865372860528900139893242753880921782571759401367239310972801789643593410912169571163445079144388219076484673614916761935902865897078709128946156317766104922469042333355919313065160712920049484969557566746620317515973093302022062437308091381815796702318180046167088205282814911453828579838145162994967799599644397948983682706441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf2763c1d73533c929ae4b3b7e3f1e32d1fd7541 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberdeen-standard.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abrdn.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artemis.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axa-im-investing.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axa.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlefield.direct' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlefield.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiathreadneedle.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crux.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-investor-web-app.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.bmogam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.columbiathreadneedle.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundrock.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsmith.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investwith.cruxam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpmorgan.myaccountonline.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpmorgan.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jupiter.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.aberdeenstandard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.abrdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.artemisfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.jupiteram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.mandg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.whebgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinvestment.avivainvestors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natwestinvestmentsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbs.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanford-deland.direct' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanford-deland.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesleyan.prod.kea.ifdsfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wutm.wesleyan.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axa-im-investing.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castlefield.direct' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital.bmogam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investwith.cruxam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpmorgan.myaccountonline.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.aberdeenstandard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.artemisfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.jupiteram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.mandg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.whebgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinvestment.avivainvestors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natwestinvestmentsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanford-deland.direct' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wutm.wesleyan.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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