ras-ghc.soprasteria.com

- SOPRA STERIA GROUP -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ef:45:2f:70:94:2e:c3:44:70:53:fa:ec:d2:a7:b6:40 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOPRA STERIA GROUP

Organization: SOPRA STERIA GROUP
Organization unit: 0002 326820065
Organization unit: PremiumSSL Legacy
Address: PAE DES GLAISINS
Address: 3 RUE DU PRE FAUCON
Address: ANNECY LE VIEUX
Postal code: 74940
State / Province: Haute-Savoie
Locality: ANNECY
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ef:45:2f:70:94:2e:c3:44:70:53:fa:ec:d2:a7:b6:40
Serial Number (int): 318044721668499684121692416208190027328
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1f:a9:ad:b6:66:ba:25:ef:45:30:3f:0f:43:43:94:b0:2a:09:ad:1e
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): e0:4a:c4:51:5b:27:33:1e:5c:87:c1:f1:67:1f:d3:46:aa:09:39:cb
Fingerprint (sha256): 1a:5d:e7:de:b6:d8:24:e0:ba:3d:83:24:d0:97:20:3c:f0:b7:56:23:57:c8:eb:ab:e4:7f:d2:fc:50:a8:8d:29

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ras-ghc.soprasteria.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras-ghc.soprasteria.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras-ghc.soprasteria.com
www.ras-ghc.soprasteria.com

Other certificates including the domain name soprasteria.com

(limited to 100 certificates)
svs.soprasteria.com
soprasteria.com
blog.soprasteria.com
innersource.soprasteria.com
soprasteria.com
blog.soprasteria.com
blog.soprasteria.com
webext.soprasteria.com
soprasteria.com
soprahr.tn.web.soprasteria.com
via22latam.workspace.training
agenciasur.soprasteria.com
go.soprasteria.com
rpa.soprasteria.com
soprasteria.com
blog.soprasteria.com
www.soprasteria.com
soprasteria.com
active3d.soprasteria.com
cdn.soprasteria.com
soprasteria.com
mgw08.soprasteria.com
solpm.sciforma.soprasteria.com
soprasteria.com
vpn-in.soprasteria.com
www.soprasteria.com
svncassiopae.soprasteria.com
soprasteria.com
digitaldesk.soprasteria.com
ras-ghc.soprasteria.com
svs.soprasteria.com
www.isacampillo.com.mx
*.sbs.msuk.soprasteria.com
vpn-uk.soprasteria.com
soprasteria.com
soprasteria.com
preprod.digitaldesk.soprasteria.com
videoconferencing.soprasteria.com
mgw02.soprasteria.com
speed.soprasteria.com
cci-paris-idf-a3d-rec.soprasteria.com
gda-grs.soprasteria.com
www.soprasteria.com
soprasteria.com
soprasteria.com
parici.soprasteria.com
parici.soprasteria.com
blogtech.soprasteria.com
soprasteria.com
agenciasur.soprasteria.com
soprasteria.com
portal.restricted.soprasteria.com
blogtech.soprasteria.com
www.soprasteria.com
digibox.soprasteria.com
webext.soprasteria.com
app.ameicontabilidadeonline.com.br
soprasteria.com
soprasteria.com
slnxoccitaniekeycloak01.soprasteria.com
*.sit.fes.soprasteria.com
worktime.soprasteria.com
klif.f2fmobile.soprasteria.com
digitaldesk.soprasteria.com
svs.soprasteria.com
soprasteria.com
soprasteria.com
svs.soprasteria.com
digibox.soprasteria.com
ras-ghc.soprasteria.com
soprasteria.com
blog.soprasteria.com
quill.morishin.me
*.dev.fes.soprasteria.com
*.trn.fes.soprasteria.com
livingactor.soprasteria.com
soprasteria.com
uat.digitaldesk.soprasteria.com
api.cicd.arcus.soprasteria.com
staff.soprasteria.com
soprasteria.com
soprasteria.com
dev.digitaldesk.soprasteria.com
csadeo-wekan.soprasteria.com
soprasteria.com
soprasteria.com
blog.soprasteria.com
portal.soprasteria.com
uat.digitaldesk.soprasteria.com
soprasteria.com
remote.siiecome.soprasteria.com
soprasteria.com
blog.soprasteria.com
staff.soprasteria.com
blog.soprasteria.com
*.apps.cicd.arcus.soprasteria.com
diwocs.soprasteria.com
klif.vpn.soprasteria.com
blog.soprasteria.com
soprasteria.com

Certificate

The complete raw certificate details for ras-ghc.soprasteria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkXvel3w5g9QDcjfC5sv
3zf629QnOVqMRuxKn0JZszSBZVuyx59RAaO7YV55RVqFyPoNxg8EEJhOM+jPTfqe
6T8v9yEObEou9UOB5Nzvan1n0eUXZND0IeCLbjvJzqPL+7fG9vL3aX5yxef4zqu4
YBhb/JTxp6ClMbOEOinZCSDU2lnIBiyWA7QD+wtSbEednWwCnXrCwveMywSLoO5p
3g6h1tORBMpf0o7xNiuN/OX4mm8+Wn0PexQAc7R12+o3Y0WgdBAPlebX7wGjNjmz
v0AGJn+PFWbab4Cfy86QmswT2VfYmIsX1VRPuIffJAiPBJB21O6nySBgVH4Ur08Q
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318044721668499684121692416208190027328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74940'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haute-Savoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANNECY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PAE DES GLAISINS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3 RUE DU PRE FAUCON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANNECY LE VIEUX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOPRA STERIA GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 326820065'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL Legacy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras-ghc.soprasteria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18970232206017235026208966752960438602572574854950473583865984635359661471006917860747802433154677428395751276746092902371010544954923379670330412611598499294274766375391333191044683021595752135462113045842311731080560614159627537167146100164439470206507164678230325218328563342002681790180037936087251045731505876636284340389124171343186314126719234410666821821960658841629622540137355395780131638082011880411704312838463449779818163412476365830110280199492010710141985518924028931610513239793662457015310173329070536384652170464333512071044016527388303298247912966416742403098044921255137110156889527433381274390619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fa9adb666ba25ef45303f0f434394b02a09ad1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-ghc.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ras-ghc.soprasteria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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