qa.holcim.com

- Holcim IP Ltd -

Issued by UTN-USERFirst-Hardware

About this certificate

This digital certificate with serial number 39:cb:ca:3b:be:90:9b:01:2c:88:af:4b:3d:60:be:4c was issued on by The USERTRUST Network.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Holcim IP Ltd

Organization: Holcim IP Ltd
Organization unit: Holcim Group Support Ltd
Organization unit: Issued through Holcim IP Ltd E-PKI Manager
Organization unit: Comodo InstantSSL
Address: Z|rcherstrasse 156
Postal code: 8645
State / Province: St.Gallen
Locality: Jona
Country: CH

The USERTRUST Network

Organization: The USERTRUST Network
Organization unit: http://www.usertrust.com
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:cb:ca:3b:be:90:9b:01:2c:88:af:4b:3d:60:be:4c
Serial Number (int): 76824133802201269915670914554436566604
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cf:2e:33:49:f8:2e:b1:41:cd:c1:a3:fa:da:69:90:c6:05:f6:0a:14
AuthorityKeyId: a1:72:5f:26:1b:28:98:43:95:5d:07:37:d5:85:96:9d:4b:d2:c3:45

Fingerprint (sha1): ac:63:22:66:5f:fa:22:6b:fd:9f:c5:d2:c5:a8:46:92:79:f4:5f:da
Fingerprint (sha256): 23:11:ce:ce:ba:7c:51:7a:e2:78:b0:9d:46:71:4e:6f:61:fa:c9:e5:20:c3:f2:89:25:18:2a:17:b5:f5:c4:b6

Issuing Certificate URL: http://crt.comodoca.com/UTNAddTrustServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl
CRL Distribution Point: http://crl.comodo.net/UTN-USERFirst-Hardware.crl

Check the revocation status for certificate qa.holcim.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.holcim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.holcim.com
www.qa.holcim.com

Other certificates including the domain name holcim.com

(limited to 100 certificates)
teamplace-qa.holcim.com
lp2-logon.holcim.com
*.hgrs.holcim.com
servicedesk.ap.holcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
aop.ap.holcim.com
iDispo-phl.ap.holcim.com
hronline.ap.holcim.com
trilogy.ap.holcim.com
stars-uat.ap.holcim.com
portal-qas.ap.holcim.com
brandportal.lafargeholcim.com
bwreport-poc.ap.holcim.com
crl-dev.privasphere.com
hronline-qas.ap.holcim.com
web-qa.hgrs.holcim.com
qlikview.ap.holcim.com
*.holcim.com
vd.hgrs.holcim.com
*.holcim.com
lp1-logon.holcim.com
stars.ap.holcim.com
*.hgrs.holcim.com
webvpn.holcim.com
esales.ap.holcim.com
*.hgrs.holcim.com
*.holcim.com
apbm.ap.holcim.com
portal-qas.ap.holcim.com
www.privasphere.com
*.analytics.hgrs.holcim.com
orf-poc.ap.holcim.com
Loyalty.ap.holcim.com
centennial-qa.holcim.com
*.holcim.com
*.hgrs.holcim.com
lq0-logon.holcim.com
awconsole.holcim.com
portal-poc.ap.holcim.com
vd.hgrs.holcim.com
dwa.hgrs.holcim.com
integrityline.holcim.com
loyalty-uat.ap.holcim.com
srm-qas.ap.holcim.com
mobilebi-cco.hgrs.holcim.com
trilogy.ap.holcim.com
hronline-qas.ap.holcim.com
cbs.holcim.com
awconsole.holcim.com
gw01hgrs.holcim.com
www.privasphere.com
stars.ap.holcim.com
cco.holcim.com
qa.holcim.com
websurvey.ap.holcim.com
bwreport-qas.ap.holcim.com
teamplace.holcim.com
webvpn.holcim.com
ecc-qas.ap.holcim.com
citrixphl.ap.holcim.com
hcm-qa.hgrs.holcim.com
emea-srmqimp.holcim.com
mobile.ap.holcim.com
emea-srmqbrt.holcim.com
dwa-qa.hgrs.holcim.com
bwreport-dev.ap.holcim.com
apbm.ap.holcim.com
bi.ap.holcim.com
orf-dev.ap.holcim.com
mdm.holcim.com
webvpn.holcim.com
workflow.ap.holcim.com
qvweb-dev.analytics.hgrs.holcim.com
integrity.lafargeholcim.com
www.privasphere.com
video.holcim.com
portal-qa.holcim.com
orf-dev.ap.holcim.com
maps.analytics.hgrs.holcim.com
global-workflow-dev.holcim.com
hcm.hgrs.holcim.com
crl-dev.privasphere.com
portal-dev.ap.holcim.com
*.hgrs.holcim.com
tmc.holcim.com
versand.ea.holcim.com
brandportal.lafargeholcim.com
bi-qa.hgrs.holcim.com
*.holcim.com
lj1-logon.holcim.com
stars-uat.ap.holcim.com
orf.ap.holcim.com
guesthgrs.hgrs.holcim.com
srm-qas.ap.holcim.com
logon.holcim.com
easybuild.holcim.com
*.holcim.com
appstore.ap.holcim.com
mobile.ap.holcim.com

Certificate

The complete raw certificate details for qa.holcim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vb0f7778feKcI6L5DIH
qzr/vnSSH01B7X+tXaM/VbcjkFs3fwEqDH0KjHlwNY8kC+KDp9YhaiJwuJ8YpSv4
o2Jn/YLcmjO2vAGAnpsSy1QqhFxFkhPCOCLMHLbNEHoSoY5eIZZGW9v9bDfHQI1R
9dbm4wwEcZD7QE+28mLS+cUSL3GPLOV1bVMwY8xZaLKbl7JRDK0rbk9Fg6NFQW+D
F4OsWUy7LbpsAzD5z6sYarB6VRyai7ScMKJtJuJwAVSOSi9NTAiD71/3dqtsAXFx
u9s10DYThiCQxSUv4oZ8Nnl2s02ESVdIUkU4QWCoQ0QDklti6z7v/1NjV7Ir77XG
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76824133802201269915670914554436566604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://www.usertrust.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UTN-USERFirst-Hardware'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8645'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St.Gallen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Z|rcherstrasse 156'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Holcim IP Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Holcim Group Support Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Holcim IP Ltd E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.holcim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29961357422196075966352988402639918985248902893832373425513148222665374409128412017170381781950302037478223233869117612588171644537419728082604786140172122358066938678130865707720925292483955096545688919631183584224564676742047598777430985124273601552784325224676192324941700367621224387362308622674851718847056737712217778709220368874106011506509270603135150063728995965686810638616033445685979174670016932234716332844827065227240727097819695168622800351371832375518719790506520590676719022987518045456269044054130105902963573603029645654843160340805507530961469019976378627599451687230871714892665963316301503252047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a1725f261b289843955d0737d585969d4bd2c345
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf2e3349f82eb141cdc1a3fada6990c605f60a14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/UTN-USERFirst-Hardware.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodo.net/UTN-USERFirst-Hardware.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UTNAddTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.holcim.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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