ibt.hmrc.gov.uk

- HM Revenue & Customs -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:4a:36:8a:0f:ea:62:7c:6f:d2:4b:17:f5:99:09:f4 was issued on by DigiCert Inc.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HM Revenue & Customs

Organization: HM Revenue & Customs
Locality: Wolverhampton
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:4a:36:8a:0f:ea:62:7c:6f:d2:4b:17:f5:99:09:f4
Serial Number (int): 17665300101266136627421400445205678580
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:85:18:e2:f9:78:20:c8:d7:1a:15:6e:cf:8a:7a:e4:3e:3b:d1:a8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 2f:1e:07:a1:ff:e8:77:7f:46:99:7f:50:33:ff:74:43:50:36:ae:a3
Fingerprint (sha256): 1a:fd:94:b3:6a:05:28:43:01:7c:82:10:42:11:9f:5e:fc:61:38:2a:80:a1:72:28:2f:89:ce:13:0f:d4:e1:9e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ibt.hmrc.gov.uk

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ibt.hmrc.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ibt.hmrc.gov.uk
account-np.hmrc.gov.uk
apis.ws.ibt.hmrc.gov.uk
bankwizard.ws.ibt.hmrc.gov.uk
cccfcalculator-ibt.hmrc.gov.uk
ccincalculator-ibt.hmrc.gov.uk
ccn.conf.hmrc.gov.uk
ccn.ws.ibt.hmrc.gov.uk
chris.ws.ibt.hmrc.gov.uk
companieshouse-ibt.hmrc.gov.uk
companieshouse-online.ibt.hmrc.gov.uk
content.ws.ibt.hmrc.gov.uk
customs.ws.ibt.hmrc.gov.uk
des.ws.ibt.hmrc.gov.uk
digital.ws.ibt.hmrc.gov.uk
dps.ws.ibt.hmrc.gov.uk
ecwtest.hmrc.gov.uk
emcs.ws.ibt.hmrc.gov.uk
exchange.ws.ibt.hmrc.gov.uk
hods.ws.ibt.hmrc.gov.uk
iasspx.ws.ibt.hmrc.gov.uk
ibt-akprod.hmrc.gov.uk
ics.ws.ibt.hmrc.gov.uk
if.ws.ibt.hmrc.gov.uk
ifs.ws.ibt.hmrc.gov.uk
io-services.ws.ibt.hmrc.gov.uk
ist3.hmrc.gov.uk
ist3.ibt.hmrc.gov.uk
ita-ext.tlb.hmrc.gov.uk
ita.ws.ibt.hmrc.gov.uk
ldccalculator-ibt.hmrc.gov.uk
mrrcalculator-ibt.hmrc.gov.uk
nicdcalculator-ibt.hmrc.gov.uk
nicecalculator-ibt.hmrc.gov.uk
ntc-ibt.hmrc.gov.uk
online.ibt.hmrc.gov.uk
online.ps.ibt.hmrc.gov.uk
online.qa.ibt.hmrc.gov.uk
online.stg.ibt.hmrc.gov.uk
payecalculator-ibt.hmrc.gov.uk
pensionschemes.ibt.hmrc.gov.uk
preprod.guidance.hmrc.gov.uk
public-ibt.hmrc.gov.uk
sdccalculator-ibt.hmrc.gov.uk
sdes-dev.hmrc.gov.uk
sdes-qa.hmrc.gov.uk
sdes-test.hmrc.gov.uk
slc.ws.ibt.hmrc.gov.uk
soae.ws.ibt.hmrc.gov.uk
stccalculator-ibt.hmrc.gov.uk
tpvs.hmrc.gov.uk
ws.ibt.hmrc.gov.uk
www.tpvs.hmrc.gov.uk

Other certificates including the domain name hmrc.gov.uk

(limited to 100 certificates)
developer.service.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
ira74832.hmrc.gov.uk
sourcing.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
*.ws.clone.hmrc.gov.uk
ibt.cmec.hmrc.gov.uk
online.hmrc.gov.uk
directgov-customs.hmrc.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
T2VDL.CORP.hmrc.gov.uk
ecw.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
crest.hmrc.gov.uk
gitlab.sysman.corp.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
public-online.hmrc.gov.uk
directgov-paye.online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
api.service.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
st.online.hmrc.gov.uk
*.hmrc.gov.uk
paye.online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
sap-pi.preprod.hmrc.gov.uk
cmec.ws.hmrc.gov.uk
ibt.hmrc.gov.uk
online.hmrc.gov.uk
*.dev.cloudcentre.corp.hmrc.gov.uk
www.acumen.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
www.acumen.hmrc.gov.uk
businesslink-customs.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
aeoi.apps.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
rti-l-proxy1.hmrc.gov.uk
*.sysman.corp.hmrc.gov.uk
CloudGate.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.test.cdg.corp.hmrc.gov.uk
patch.staging.cdg.corp.hmrc.gov.uk
online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
subscriptions.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
cgec.hmrc.gov.uk
OSMonitor.sysman.corp.hmrc.gov.uk
disclosures.hmrc.gov.uk
www.acumen.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
aka.hmrc.gov.uk
public-online.hmrc.gov.uk
online.hmrc.gov.uk
tfc-client-dwp.test.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
online.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
online.hmrc.gov.uk
fs.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
community-origin.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk
cbs-browser.cbs.ns1p.corp.hmrc.gov.uk
bts.ibt.hmrc.gov.uk
ira74836.hmrc.gov.uk
businesslink-cis.online.hmrc.gov.uk
tfc.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
*.alm.corp.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
test-api.service.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
ira74832.hmrc.gov.uk
ndo.hmrc.gov.uk
mailgate.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk

Certificate

The complete raw certificate details for ibt.hmrc.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P1f64wYilI31Dd3RfQw
WaTI0RiSAhAnuuB5R9XOAY70QhK53BqafrudQcgPsYKPAxMei5uxs2k+wVrbYs8/
/MTzXT3k2q6M/S9fl8vrD7Pa9Lstsy2AT23fAcZWPpUk3UO/t+1r+9PxcHOS4V5t
JFheJoJmL6y6w79GUJu+0lZ1/zw3mY8MUjCQ8AsoFoJtWGh3aVwSLsuiv6tsPF7T
lLbEDU6UrFWfoA2GfsyWqo3znLPNf3gyhV2c1NMvcw4ExhBDXK7oWFj+5z/tYDXV
Qa7qEBZ5tyZVEv8XjAvsjtgWhFckc5G1ultZ2AIDc+RUQx89U1CEyOLNdklB0JjK
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17665300101266136627421400445205678580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wolverhampton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HM Revenue & Customs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ibt.hmrc.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26887464368131747814082164463302101745438901197648104757105999279065041843036663232991806500076742561539994744779425884587228956797146201264094439218585370983564219526882433678207613377982501356832833992971968962491925227558519312251640025285164008086884408793481870833606995626647820218134800161604743775891586817891186875201766982923009995792215094971081663065492154210335251199505293526059338397242006258913739829952950770027240255562542487667935273505353974943407226903067669138315694132708654840338583806341329190329047506729305630120536145816509750406244473200357407446177984901803301570940216496102331322518233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							028518e2f97820c8d71a156ecf8a7ae43e3bd1a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-np.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankwizard.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccfcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccincalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccn.conf.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccn.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chris.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecwtest.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hods.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iasspx.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-services.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ita-ext.tlb.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ita.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrrcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicdcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntc-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ps.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.qa.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.stg.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionschemes.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.guidance.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdes-dev.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdes-qa.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdes-test.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slc.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soae.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpvs.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpvs.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008192cf0736cd46c9d4e6be11b3c9face88ccacfb0d251d07b73124e192f386c005c16cd17b52e0ccd31b55c09676d88eafb03efbf91c17b577928d00a2da61f7333a91d1a10ed8bb47507b5d1cef82e2be5cd23217f9c841713a8cd6d67ec4a617e422482919d83a3e233045d13a4ec2607ee66a5d2652b283b22361b1ef452ff2c61c9ecb3e12e69025fa383efff4733aab12864b00d72a07a36936230fb9702cd9c21c3b6e8209197fad93bb6f913e7ddd19de18dd735baeb15155909bdc7249c1351bc5b33cb67a0730fc3903914409afbde6cfbf5f09159261776df3c36343fd561bd2761a4ff6a4b1901095506cd8a4207d0419f1667cf6d26792a42edd