www.ihgmerlin.com

- Intercontinental Hotels Group -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number e2:ee:ad:08:0c:b5:f1:46:84:f3:a0:ea:f8:da:22:e5 was issued on by The USERTRUST Network.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • AttributeValue in subject RelativeDistinguishedName sequence SHOULD NOT have trailing whitespace (lint.AWSLabs certlint)

Intercontinental Hotels Group

Organization: Intercontinental Hotels Group
Organization unit: Revenue and Guest Technology
Organization unit: Akamai SAN SSL OV
Address: 3 Ravinia Drive
Postal code: 30346
State / Province: GEORGIA
Locality: Atlanta
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e2:ee:ad:08:0c:b5:f1:46:84:f3:a0:ea:f8:da:22:e5
Serial Number (int): 301644803194342783187329720585425658597
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:1e:c0:40:79:09:50:a8:d7:a6:5a:af:1d:12:ca:57:ed:c8:d0:a3
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 0d:03:af:43:2e:31:5e:6f:9e:a0:8e:d9:d2:e4:1e:23:6a:10:f3:8e
Fingerprint (sha256): 26:45:5d:24:a5:9a:46:52:89:8d:a7:ec:dd:7c:05:6b:8d:93:a6:38:e9:80:ea:2d:b1:f9:44:55:31:b1:cd:32

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate www.ihgmerlin.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ihgmerlin.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ihgmerlin.com
images.ihgmerlin.com
imagesqa.ihgmerlin.com
me2.ihgmerlin.com
me2qa.ihgmerlin.com
qa.ihgmerlin.com
videos.ihgmerlin.com

Other certificates including the domain name ihgmerlin.com

(limited to 100 certificates)
www.ihgmerlin.com
origin-me2-62.ihgmerlin.com
dcad1-prd-f61-wb-merlin.p.ni.c.ihg.com
internal.ihg.com
origin-me2qa.ihgmerlin.com
greenengagees.ihg.com
www.ihgmerlin.com
internal.ihg.com
internal.ihg.com
me2.ihgmerlin.com
www.ihgmerlin.com
images.ihgmerlin.com
www.ihgmerlin.com
origin-me2-62.ihgmerlin.com
images.ihgmerlin.com
www.ihgmerlin.com
hotelsolutionszh.ihgmerlin.com
qa.ihgmerlin.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
internal.ihg.com
www.ihgmerlin.com
imagesqa.ihgmerlin.com
images.ihgmerlin.com
np.internal.ihg.com
qa.ihgmerlin.com
imagesqa.ihgmerlin.com
ihgmerlin.com
www.ihgmerlin.com
qa.ihgmerlin.com
www.ihgmerlin.com
www.ihgmerlin.com
me2.ihgmerlin.com
np.internal.ihg.com
www.ihgmerlin.com
internal.ihg.com
images.ihgmerlin.com
images.ihgmerlin.com
np.internal.ihg.com
images.ihgmerlin.com
internal.ihg.com
np.internal.ihg.com
internal.ihg.com
images.ihgmerlin.com
np.internal.ihg.com
www.ihgmerlin.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
images.ihgmerlin.com
es.development.ihg.com
np.internal.ihg.com
internal.ihg.com
www.ihgmerlin.com
internal.ihg.com
internal.ihg.com
www.ihgmerlin.com
np.internal.ihg.com
np.internal.ihg.com
imagesqa.ihgmerlin.com
me2qa.ihgmerlin.com
www.ihgmerlin.com
me2.ihgmerlin.com
www.ihgmerlin.com
images.ihgmerlin.com
internal.ihg.com
images.ihgmerlin.com
internal.ihg.com
internal.ihg.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
internal.ihg.com
internal.ihg.com
internal.ihg.com
www.ihgmerlin.com
internal.ihg.com
np.internal.ihg.com
internal.ihg.com
hotelsolutionses.ihgmerlin.com
me2qa.ihgmerlin.com
internal.ihg.com
internal.ihg.com
internal.ihg.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
www.ihgmerlin.com
www.ihgmerlin.com
origin-me2-62.ihgmerlin.com
internal.ihg.com
www.ihgmerlin.com
me2.ihgmerlin.com
me2.ihgmerlin.com
internal.ihg.com
es.development.ihg.com
www.ihgmerlin.com
imagesqa.ihgmerlin.com
www.ihgmerlin.com
qa.ihgmerlin.com
np.internal.ihg.com

Certificate

The complete raw certificate details for www.ihgmerlin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgQF0wcdnrR0rIJ7zmr9dSTFpU
oRHTehjTLDWSuTppr3N8uHK0hj3JsaPGf6aRf2/pwDa+jSkaySDMDWz450g71/nt
+tbOdA6a5IuKQkOuy59AG6v+ct5EbCTx64sjmYGcS77hEGx/87nejUoGozs7RU/W
VmMlA212G9cSFmJ9DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301644803194342783187329720585425658597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30346'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEORGIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3 Ravinia Drive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intercontinental Hotels Group '
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Revenue and Guest Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ihgmerlin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 112532375429794056009505072934702419190146864167309412921534688553017945267700602330852779374417414201250038292150768446324472030783566643208510563113375603524714234700400997592956859083889704180199577751295188904109094882073771082272362561552291395180274104106910173833695032966320742322897619968094114053391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb1ec040790950a8d7a65aaf1d12ca57edc8d0a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesqa.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me2.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me2qa.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.ihgmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.ihgmerlin.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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