qa1-fiori.lafargeholcim.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 79:49:e7:ec:c6:45:da:7c:89:ec:57:9a:06:43:11:bb was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qa1-fiori.lafargeholcim.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 79:49:e7:ec:c6:45:da:7c:89:ec:57:9a:06:43:11:bbSerial Number (int): 161220329156475139539902662957317951931
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 59:bc:fe:a0:a5:89:e1:dd:e6:c0:de:80:8e:6e:47:47:43:d7:14:d1
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): c0:95:cb:68:d1:92:1e:dc:fb:14:2b:6f:e7:37:8c:21:cb:07:82:a7
Fingerprint (sha256): 22:3b:b8:d2:aa:ad:48:5e:6a:6c:54:55:4f:ee:9a:46:04:b4:5a:95:94:64:bf:a1:c8:2e:bc:ea:63:2c:42:08
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate qa1-fiori.lafargeholcim.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa1-fiori.lafargeholcim.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa1-fiori.lafargeholcim.com
www.qa1-fiori.lafargeholcim.com
www.qa1-fiori.lafargeholcim.com
Other certificates including the domain name lafargeholcim.com
(limited to 100 certificates)
indwebiz.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
Certificate
The complete raw certificate details for qa1-fiori.lafargeholcim.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXzCCBkegAwIBAgIQeUnn7MZF2nyJ7FeaBkMRuzANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIxMTIwNjAwMDAwMFoXDTIzMDEwNjIzNTk1OVowJjEkMCIGA1UEAxMbcWEx LWZpb3JpLmxhZmFyZ2Vob2xjaW0uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAueEIRvCliNcbna9SPCIT7cg4GRv6CqH3mVjrivp/JIsiUP15NzEf 3nCkrPcdVRQkUxtYTmsW3KR2vHgd0/4zBA2rY+nwK4nHtF5270GvbQ43Q8u57tKV +dMmggYHRlPK0wxL68WtLVCJPRVrrNXY1NUsOt0JgMHbwD8nZPvMraI3ovrbgdQZ UzGX+CNctrb++TKNqlnJJLAnuzI4nU5Ajl2TLpSS11RHsnY9F1sutGyM0KtVdiuL SQtltXFQp/wPQqwtHDAQAsEWFZNRWHGWgxUcLZaWHhIqfUaq92JGMJtFVqEMpOBN 93RFGT9grt4jz1Iy8mhEzYJpFcBVHauSPaKusTdmcI8AwjnvwZrDsDErvvceIgba M7kcrjtOX5zojX4Ip3TLcJkzi0gNLUPgIhqIe/BNHdH32pCg74WZXkj4DoqHU6HI arc3Y/UgATRXhMptBItGz3n5zHVyzShGmPh1S2sPCqanAYHAAoX7K37I/zcxP8pD NOZz7NU4jQaSEhaQ8Na9z9jUX/1kcekxZl+GcCM/IgRJnVwdhtn9L7aKbCiDAZbR NDpPCQJxnR9HMnuK+GUgevgtv5SRBuC6jnXPzstlFUgYSUdVSrKk+xU2layvknwd FRjUmHUfli5q9MnF4v5ifmW5959obK7BUFyNK3xa5C7zEtAp4GCgL4cCAwEAAaOC Ax0wggMZMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQW BBRZvP6gpYnh3ebA3oCObkdHQ9cU0TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/ BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0 BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29t L0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0 cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNl Y3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln by5jb20wRwYDVR0RBEAwPoIbcWExLWZpb3JpLmxhZmFyZ2Vob2xjaW0uY29tgh93 d3cucWExLWZpb3JpLmxhZmFyZ2Vob2xjaW0uY29tMIIBfQYKKwYBBAHWeQIEAgSC AW0EggFpAWcAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAX2Q 9m85AAAEAwBHMEUCIQCL3Pw07tSHlKlc4gIPgRJj3sKqI065d8NliGoPBCOtiQIg PHLJvckZVR21RIrDj5KNXGDGMFLtHJ2Fg0HoJfuv6o0AdQB6MoxU2LcttiDqOOBS HumEFnAyE4VNO9IrwTpXo1LrUgAAAX2Q9m8cAAAEAwBGMEQCIAOgQWQphVdDpS9Z 60nmF1IUtzTT9chtwYyJryM9zB3gAiBGfy2gAW9kxJeTSIQXEC9R2jQMwpyztacJ hjHVvOsNgQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABfZD2 bu0AAAQDAEcwRQIhAI9pUfgg1UDpXPnr+TqRiVa+lhLD211EWRXpvvNxRiINAiBt 0/yaMwzyBGRGTwowtkZp3BsooTU8U8Z5NcQKLEBWgjANBgkqhkiG9w0BAQsFAAOC AQEAdh2XaRJMdVdCyDORX+QxRL2ZAGDhiz2QwMnJujl/16vzw6UwGO+6QFo2RMks LcMTpcWORYK8nLFI0euYl37dhtLyn3SS+pwxjN60eL1DqRk5nux6GPzh8FPoRM1Y F71lILcnz/qhdyAfBJxfcSvnQTHLJVErx2FjMBg36WgazmeXGM4gE0skRg2zVl4j tUIKokZnMDRjGL4o1xKRO00784gHyjs89GD9vh6YnPAl6di0KNHQmQ4PsO/QkfPY dchFPiBwXCT0nI83jMglK/Kj9qgleR8FFb8191aINPLX+H78LU8QageDWlAoiyiN 4i3i403KXND3uye/nnn+V1hkzg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAueEIRvCliNcbna9SPCIT 7cg4GRv6CqH3mVjrivp/JIsiUP15NzEf3nCkrPcdVRQkUxtYTmsW3KR2vHgd0/4z BA2rY+nwK4nHtF5270GvbQ43Q8u57tKV+dMmggYHRlPK0wxL68WtLVCJPRVrrNXY 1NUsOt0JgMHbwD8nZPvMraI3ovrbgdQZUzGX+CNctrb++TKNqlnJJLAnuzI4nU5A jl2TLpSS11RHsnY9F1sutGyM0KtVdiuLSQtltXFQp/wPQqwtHDAQAsEWFZNRWHGW gxUcLZaWHhIqfUaq92JGMJtFVqEMpOBN93RFGT9grt4jz1Iy8mhEzYJpFcBVHauS PaKusTdmcI8AwjnvwZrDsDErvvceIgbaM7kcrjtOX5zojX4Ip3TLcJkzi0gNLUPg IhqIe/BNHdH32pCg74WZXkj4DoqHU6HIarc3Y/UgATRXhMptBItGz3n5zHVyzShG mPh1S2sPCqanAYHAAoX7K37I/zcxP8pDNOZz7NU4jQaSEhaQ8Na9z9jUX/1kcekx Zl+GcCM/IgRJnVwdhtn9L7aKbCiDAZbRNDpPCQJxnR9HMnuK+GUgevgtv5SRBuC6 jnXPzstlFUgYSUdVSrKk+xU2layvknwdFRjUmHUfli5q9MnF4v5ifmW5959obK7B UFyNK3xa5C7zEtAp4GCgL4cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 161220329156475139539902662957317951931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa1-fiori.lafargeholcim.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758320292506491640558583263594757750334020683595454729365544319348869112786958756102434746298587875664370740666567934284442462094889022285754772304761479570895191302477267734762708911187326136544536410059108157739569366593576242348161966510041061450772824383962540651501046826686491782885079838355872623712287017294981482005791086550455568145973476661727853572015738159906232964521781458531036335083372155040452055460195945362954722685336567126067003076828679063772050588665960705514800234315536261875664980966022240118675421793019095244109499812785669543147073418900642219936968770009672742711471538012627741260150215563021451189486198643630318366911560539359192483869423893634010690132131840713213637295853378785030430984282462536397608959060237026097504403085474924960170839583506657766812853264964768248134101584604324378847590094648587444908566099740834961688708173331264261634523964497541661930483160699691787721921779179570924206033001324612100936680854302307345795414760126437071053261705612900645235503034539694235959721248840252005468055188085621342051874005701729512400784101340850518029410254247997632003495418231755534696842826812687048714751033563261850432338068317747586705265025481567597150299283773201672914973241223 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 59bcfea0a589e1dde6c0de808e6e474743d714d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-fiori.lafargeholcim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1-fiori.lafargeholcim.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017d90f66f3900000403004730450221008bdcfc34eed48794a95ce2020f811263dec2aa234eb977c365886a0f0423ad8902203c72c9bdc919551db5448ac38f928d5c60c63052ed1c9d858341e825fbafea8d0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017d90f66f1c0000040300463044022003a0416429855743a52f59eb49e6175214b734d3f5c86dc18c89af233dcc1de00220467f2da0016f64c49793488417102f51da340cc29cb3b5a7098631d5bceb0d81007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017d90f66eed00000403004730450221008f6951f820d540e95cf9ebf93a918956be9612c3db5d445915e9bef37146220d02206dd3fc9a330cf20464464f0a30b64669dc1b28a1353c53c67935c40a2c405682 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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