api.diageo.com
- Diageo Plc -
Issued by Trusted Secure Certificate Authority 5
About this certificate
This digital certificate with serial number 41:8b:5b:a5:c2:a8:be:78:5a:0e:0c:b0:82:61:ee:f4 was issued on by Corporation Service Company.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Diageo Plc
Organization:
Diageo Plc
State / Province:
London
Country: GB
Country: GB
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 41:8b:5b:a5:c2:a8:be:78:5a:0e:0c:b0:82:61:ee:f4Serial Number (int): 87123407821520710847503853219626479348
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 6d:de:31:0d:37:02:59:ba:bf:e2:cd:20:71:44:47:10:f8:04:11:33
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4
Fingerprint (sha1): ad:d4:bd:ad:d6:1e:87:a9:86:62:99:d2:c3:40:6b:32:42:c5:f5:58
Fingerprint (sha256): 23:5b:93:6a:5f:59:1d:f0:5f:cf:ce:0e:1c:5d:99:74:b1:89:94:b1:a3:5b:f0:79:6a:21:d2:92:2b:9e:20:3b
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl
Check the revocation status for certificate api.diageo.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.diageo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.diageo.com
dev.api.diageo.com
test.api.diageo.com
dev.api.diageo.com
test.api.diageo.com
Other certificates including the domain name diageo.com
(limited to 100 certificates)
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
okta-iwa.diageo.com
www.diageo.com
focalpoint.diageo.com
dvds-hkg.diageo.com
www.diageohorizon.com
dou01v01.diageo.com
www.diageo.com
www.diageo.com
www.diageohorizon.com
secure.neostaging.tagify.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portal.diageo.com
www.diageohorizon.com
diageo-expcluster-e01-sin1.diageo.com
sps-emea.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
dvds-bil.diageo.com
dvds-hkg.diageo.com
remoteaccess-emea.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
diageo-expcluster-c01-ams1.diageo.net
www.diageohorizon.com
www.diageo.com
www.diageo.com
diageo-expcluster-e01-lon1.diageo.com
portal.diageo.com
www.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
okta-iwa.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
portaltest.diageo.com
hipm.diageo.com
hipm.diageo.com
www.diageo.com
diageo-expcluster-c01-lon1.diageo.net
www.diageohorizon.com
www.diageo.com
hipm.diageo.com
mobilena.diageo.com
webmail.diageo.com
www.diageohorizon.com
dar01v01.diageo.com
diageo-expcluster-e01-hon1.diageo.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
cybercoe.diageo.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
dvds-thw.diageo.com
www.diageohorizon.com
www.diageohorizon.com
pingfed.diageo.com
dvds-bil.diageo.com
neostaging.rrsocial2.diageo.com
api.diageo.com
www.diageohorizon.com
vdi-emea.diageo.com
www.diageohorizon.com
mrasuat.wsnet.diageo.com
www.diageohorizon.com
*.delegows.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portaleppscm.diageo.com
focalpoint.diageo.com
www.diageohorizon.com
diageo-expcluster-c01-sin1.diageo.net
diageo-expcluster-e01-ams1.diageo.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
diageoplatform.com
diageo-expcluster-e01-lon1.diageo.com
www.diageo.com
okta-iwa.diageo.com
www.diageohorizon.com
portaltech.diageo.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
www.diageo.com
tus01v01.diageo.com
portaleppbwa.diageo.com
rsi.diageo.com
www.diageo.com
www.diageohorizon.com
okta-iwa.diageo.com
www.diageo.com
focalpoint.diageo.com
dvds-hkg.diageo.com
www.diageohorizon.com
dou01v01.diageo.com
www.diageo.com
www.diageo.com
www.diageohorizon.com
secure.neostaging.tagify.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portal.diageo.com
www.diageohorizon.com
diageo-expcluster-e01-sin1.diageo.com
sps-emea.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
dvds-bil.diageo.com
dvds-hkg.diageo.com
remoteaccess-emea.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
diageo-expcluster-c01-ams1.diageo.net
www.diageohorizon.com
www.diageo.com
www.diageo.com
diageo-expcluster-e01-lon1.diageo.com
portal.diageo.com
www.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
okta-iwa.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
portaltest.diageo.com
hipm.diageo.com
hipm.diageo.com
www.diageo.com
diageo-expcluster-c01-lon1.diageo.net
www.diageohorizon.com
www.diageo.com
hipm.diageo.com
mobilena.diageo.com
webmail.diageo.com
www.diageohorizon.com
dar01v01.diageo.com
diageo-expcluster-e01-hon1.diageo.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
cybercoe.diageo.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
dvds-thw.diageo.com
www.diageohorizon.com
www.diageohorizon.com
pingfed.diageo.com
dvds-bil.diageo.com
neostaging.rrsocial2.diageo.com
api.diageo.com
www.diageohorizon.com
vdi-emea.diageo.com
www.diageohorizon.com
mrasuat.wsnet.diageo.com
www.diageohorizon.com
*.delegows.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portaleppscm.diageo.com
focalpoint.diageo.com
www.diageohorizon.com
diageo-expcluster-c01-sin1.diageo.net
diageo-expcluster-e01-ams1.diageo.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
diageoplatform.com
diageo-expcluster-e01-lon1.diageo.com
www.diageo.com
okta-iwa.diageo.com
www.diageohorizon.com
portaltech.diageo.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
www.diageo.com
tus01v01.diageo.com
portaleppbwa.diageo.com
rsi.diageo.com
Certificate
The complete raw certificate details for api.diageo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGyTCCBbGgAwIBAgIQQYtbpcKovnhaDgywgmHu9DANBgkqhkiG9w0BAQsFADCB hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTIzMDEy NzAwMDAwMFoXDTI0MDEyNTIzNTk1OVowTDELMAkGA1UEBhMCR0IxDzANBgNVBAgT BkxvbmRvbjETMBEGA1UEChMKRGlhZ2VvIFBsYzEXMBUGA1UEAxMOYXBpLmRpYWdl by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXEyByd6f2uk+ CGSyS5ed6lkhH0/OM+ZDvm+8YHPO4V8syVqXF9AGikbxggcglkjjOTCvFO/LFkSe Ufzjsjih3lFWPJdOQGNTAJEL8x6kQiTC3MesQepWseR2RisCYkFw1dOiO+Qd0cgn hXb7UQAnP9OqvrawjT4UhQC4i9bpttZy0l4YU1z6Vhnr/d8ZmBuSepD8Rhw0pvdG RuACXGUAy7NJ3DwZgTOJEQdFxdWlIm+BCbjXDKKAWYqIpXN24tPDhTeOasY6S0LH TV75yxs71r9iHutzBpJHchkgq3gAFsCPRBhmXHvxiKu1NkDduKLwIE3PXRTBxp22 BLPyPxIjAgMBAAGjggNqMIIDZjAfBgNVHSMEGDAWgBTyu1Xu/I/P0D8UaBqVfnkO qxcw9DAdBgNVHQ4EFgQUbd4xDTcCWbq/4s0gcURHEPgEETMwDgYDVR0PAQH/BAQD AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZaHR0cHM6 Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgIwUAYDVR0fBEkwRzBFoEOgQYY/ aHR0cDovL2NybC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0 ZUF1dGhvcml0eTUuY3JsMIGCBggrBgEFBQcBAQR2MHQwSwYIKwYBBQUHMAKGP2h0 dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVB dXRob3JpdHk1LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0 LmNvbTCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGF88hPbgAABAMARzBFAiEAsPorCWBvsxgVKn9n PxhUy9Yae8/U/NWzbX4incF8HDkCIDzMAG9ISZsBOpyA/vwv7OiQvEmt2wuMZcFQ 1t57aQ+eAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGF88hP iwAABAMARjBEAiAIGvbpJiuOols4x3p2bvCyZyH/Co66WmdFXLPcvB7gaAIgBJqK CBRT3NbS8aXkEqsla0EB/DPLN+Vn1dArDIBUSK4AdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYXzyE9OAAAEAwBHMEUCIQCNj6jGVWFWIe4hW+mL Mx3phVYRfGiKCrwEg1nBvx+RLgIgfRmkrJUQA12rZglcLkiRESE8J6+teX5BYwZq OMG1HtAwQgYDVR0RBDswOYIOYXBpLmRpYWdlby5jb22CEmRldi5hcGkuZGlhZ2Vv LmNvbYITdGVzdC5hcGkuZGlhZ2VvLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAVdx8 779fYGuEIWp+64LktDIAkeSL2IwT6BqkU7FE+oCMd9d/0bKmvJpGirdh0ZPUumr3 4+39pkEdbK9bSv1oXlFpwszpsFZoUPD8SQ++scRXLfLPktwNCrqN44ooYOV9jOSE PwU+RbMAZVFowSoJTFPBQNOdWPggZQBysnKwuFW9BIcrBWTRKm+1OANrbWKz/yGu Wh+GGJBT3vFjcvHjpPESwkiRXAPSP3OUH9zuug4n/kpLsafC6l3tQWh0l/cQa95C 1Zlh27xwmZeUT9R0BiNEn7dXYuYRy7ixkoWWTwY5tzDlMzFuzhPTMcoxQNjF2yu8 5kVTfRiBMOVovGbRUw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVxMgcnen9rpPghkskuX nepZIR9PzjPmQ75vvGBzzuFfLMlalxfQBopG8YIHIJZI4zkwrxTvyxZEnlH847I4 od5RVjyXTkBjUwCRC/MepEIkwtzHrEHqVrHkdkYrAmJBcNXTojvkHdHIJ4V2+1EA Jz/Tqr62sI0+FIUAuIvW6bbWctJeGFNc+lYZ6/3fGZgbknqQ/EYcNKb3RkbgAlxl AMuzSdw8GYEziREHRcXVpSJvgQm41wyigFmKiKVzduLTw4U3jmrGOktCx01e+csb O9a/Yh7rcwaSR3IZIKt4ABbAj0QYZlx78YirtTZA3bii8CBNz10UwcadtgSz8j8S IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87123407821520710847503853219626479348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diageo Plc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.diageo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24914460340259028703593257234751043128108270888460341892518038262788528938897621791213087189849239592475803193552409968629937741959784887665180631297645636318591241624662311090426279929019218624796240312946633583266132541253041790280282485043373781304510141556977799990801982137105279776474874081452965375243451234146531313403497223440278156648190748013657243249244411635681659331114289736414848831235307784782384158226262576875721642090757474365529088433073476048914065547359673115405744061776182051785842159867553840090432601712961829367887995824876647484277516216464695269602944062713655112671663504691396219965987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6dde310d370259babfe2cd2071444710f8041133 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.diageo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.diageo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.diageo.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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