*.cloud.oneidentity.eu

- Quest Software Inc. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 1e:cb:cc:ba:dd:bf:25:f0:ad:1c:5e:25:99:cf:65:93 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Quest Software Inc.

Organization: Quest Software Inc.
Organization unit: IT
Organization unit: PremiumSSL Wildcard
Address: 4 Polaris Way
Postal code: 92656
State / Province: CA
Locality: Aliso Viejo
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:cb:cc:ba:dd:bf:25:f0:ad:1c:5e:25:99:cf:65:93
Serial Number (int): 40935028552454689958955227012886652307
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 09:e2:9d:4a:57:d1:c1:91:aa:2b:85:6d:f7:50:d1:b4:d5:f4:a1:88
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): f2:fd:9d:a0:70:6f:f8:ee:93:5e:c3:bc:ba:29:ad:b8:19:16:b7:68
Fingerprint (sha256): 29:5b:8f:94:3f:8d:72:1b:b9:15:85:00:6c:2f:7b:81:95:37:83:b6:80:cc:a6:eb:c6:67:2f:76:37:85:16:ee

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.cloud.oneidentity.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cloud.oneidentity.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cloud.oneidentity.eu
cloud.oneidentity.eu

Other certificates including the domain name oneidentity.eu

(limited to 100 certificates)
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
apac-status.cayuse.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
apac-status.cayuse.com
apac-status.cayuse.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
*.cloud.oneidentity.eu
dnstest.dreadlezz.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
eustatuspagetest.cloud.oneidentity.eu
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
cynergystatus.mambu.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
eustatuspagetest.cloud.oneidentity.eu
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
akari.fail
apac-status.cayuse.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
dnstest.dreadlezz.com
eustatuspagetest.cloud.oneidentity.eu
apac-status.cayuse.com
dnstest.dreadlezz.com
apac-status.cayuse.com
dnstest.dreadlezz.com

Certificate

The complete raw certificate details for *.cloud.oneidentity.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Eb9KJL8XaXCKWmlgJX
KJEVCEkFuoJu5RB4dRDxvsdCoICojytxn5KfLtDxuq81xQi8eKzvwQ75oBf0ZsXl
z2zGL2O1eke9cF017dkbFujNUV504GRHvTQach02N5qXN9apSZ/6QCbosMRu/20F
YPhEdlmSBrcWfxQeRaWDJAJ2jsNMIn5LSe+AVwEGsjIFHgT8KCseVoD0WZJFV5BN
vr5TZCfc7sMYm42OJaZ4K/N3O/YwIn0vLGT33/ocqccuG8n4aQqL8BFYFm1bC872
JVM+zVohGb4cP0H64TTfGec2AeM8iAhossjZGsueFbW5PxCFosK7pbqOjHAIqhiY
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40935028552454689958955227012886652307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '92656'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aliso Viejo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4 Polaris Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quest Software Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cloud.oneidentity.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20624730041508854447932343022644087511811955823088145771608236050651032824763896606008772828437990651032688091061422480777968332930934838826426415890526189911674091354223470754816215967185593715496973936862586101041370730573647911179553706141584386832723199746432058733615606362551821956037807091883158574670527073742584911729840335322166165364710459509948276291710218663920907190641834438360475936456771075371736098947332935528628825030227042883612165728361752651683126855934011642577699560660183543368071964300572757345648365607344620075987823566372036270587168565439640820671003435864038343413214981840722680387759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09e29d4a57d1c191aa2b856df750d1b4d5f4a188
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.oneidentity.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.oneidentity.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004c2a8c20eb0c007b009d2c54ee402c8714cea26b2630f26dc6ac95d23e57d5c49ebc8410fadf558d23efdc3d27a3190d74a34915ade64f08a08537c8a62937f82da876cd9600800df5a64e42459a0eaa98efb699b8877c0c09ea988a79a4c58bfc31f7248f129bfdb621fd2e1bff404244956328211e4ed747338cbacdbdcd860bf839f6b2a6e2ef482924926c94d7592ef22e663397315cb01de724b852f3280003094bb32594eceede7b1396c6d05eb346641e0b5d8553d43be61e42e2db0e4f90f9d5f62cbac8b8c704e79f1ef6cc385d55e147d1f787624372e8b8ad65661fed21dc6502609c28f1c4dcf2dd5c475f6e94eeeea121dc1806a4a215fac5a