gitlab-epn.parc.com

- Xerox Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number d1:6c:6c:13:03:b1:3b:a4:91:5d:15:83:91:f3:76:2d was issued on by Sectigo Limited.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Xerox Corporation

Organization: Xerox Corporation
Organization unit: PARC
Address: 45 Glover Avenue
Postal code: 06850
State / Province: Connecticut
Locality: Norwalk
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): d1:6c:6c:13:03:b1:3b:a4:91:5d:15:83:91:f3:76:2d
Serial Number (int): 278371611186484177527104063713320334893
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 56:5c:a7:f9:c8:42:f3:56:29:17:cc:4c:c9:87:34:52:5b:c8:d6:10
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 18:cc:c5:e1:3e:b2:d5:c4:a8:a9:05:f7:ec:00:3e:f1:46:05:86:cd
Fingerprint (sha256): 2b:90:b9:56:92:9c:31:9f:b0:9c:5b:8e:51:ed:66:ed:75:91:86:11:48:17:fb:ef:c0:3e:f5:dc:4f:5e:e3:50

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate gitlab-epn.parc.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab-epn.parc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab-epn.parc.com
*.pages-epn.parc.com
*.pages-epn.parc.xerox.com
*.pages-external.parc.com
*.pages-external.parc.xerox.com
ci.gitlab-external.parc.com
ci.gitlab-external.parc.xerox.com
ghe-external.parc.com
ghe-external.parc.xerox.com
git-epn.parc.com
git-epn.parc.xerox.com
github-external.parc.com
github-external.parc.xerox.com
gitlab-epn.parc.xerox.com
gitlab-external.parc.com
gitlab-external.parc.xerox.com
gitlabepn.parc.com
gitlabepn.parc.xerox.com
gle-external.parc.com
gle-external.parc.xerox.com
inferno-vm21.parc.com
inferno-vm21.parc.xerox.com
pages-epn.parc.com
pages-epn.parc.xerox.com
pages-external.parc.com
pages-external.parc.xerox.com
registry.gitlab-external.parc.com
registry.gitlab-external.parc.xerox.com

Other certificates including the domain name parc.com

(limited to 100 certificates)
imperva.com
sharepoint.parc.com
register.parc.com
tls.automattic.com
fsus-24a.freshservice.com
ddi-master.parc.xerox.com
parc.com
salami.parc.com
gitlab-test.parc.com
imperva.com
helpdesk.appareluae.com
helpdesk.appareluae.com
imperva.com
extolk.parc.com
imperva.com
tls.automattic.com
qr.parc.com
imperva.com
tls.automattic.com
crl.parc.com
jira-internal.parc.com
blogs.parc.com
imperva.com
imperva.com
pcweb.parc.com
imperva.com
helpdesk.appareluae.com
info.parc.com
info.parc.com
jira-epn.parc.com
ddi-master.parc.xerox.com
imperva.com
imperva.com
dsview.parc.com
opendcim.parc.com
www.parc.com
parc.com
helpdesk.appareluae.com
imperva.com
imperva.com
parc.com
fsus-24a.freshservice.com
imperva.com
imperva.com
imperva.com
helpdesk.appareluae.com
tls.automattic.com
jira-epn.parc.com
parc.com
imperva.com
imperva.com
imperva.com
mac-enroll.parc.com
imperva.com
imperva.com
exchangemail.parc.com
imperva.com
imperva.com
imperva.com
confluence-internal.parc.com
imperva.com
imperva.com
imperva.com
imperva.com
helpdesk.appareluae.com
fsus-24a.freshservice.com
people.parc.com
tls.automattic.com
gitlab-xerox.parc.com
fsus-24a.freshservice.com
helpdesk.appareluae.com
imperva.com
gitlab-epn.parc.com
imperva.com
info.parc.com
fsus-24a.freshservice.com
imperva.com
gitlab-xerox.parc.com
helpdesk.appareluae.com
helpdesk.appareluae.com
tls.automattic.com
meshinprod12.parc.com
imperva.com
tls.automattic.com
tls.automattic.com
imperva.com
sysx.parc.com
imperva.com
tls.automattic.com
helpdesk.appareluae.com
extweb-dev.parc.com
imperva.com
gitlab-epn.parc.com
fsus-24a.freshservice.com
imperva.com
imperva.com
imperva.com
jira-epn.parc.com
gitlab-test.parc.com
asa2.parc.com

Certificate

The complete raw certificate details for gitlab-epn.parc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyK8A+wVKmgbO8267z0aZ
ShHHZYQxmD7vlAH0p4sk9cl9Ur8FMq9BKraFk06+YG98Sp4U4NA2kbvEUj+QvEkj
KwHAYuoyuKMAg5lc5ToZWJqZBuvGBI3zI1o7XgovbFbiy536iTkzunfLbuTNU4re
aSklw6AWPjpIQ+bJ4RjalMCDQ04oMjtD4RzJtTvLzY1j9Pb5JNaELPXvXWWaYOkU
lm4l5BiTBCUEKs5w4Kj+H1t9aruT32LuD9QGl+BzhSDenLVUB9VqdqxVStQyJLdS
Q2WgkywDttb23p5CzkL5L+8T+jQw1zCpGZ+8ssnug/+KYGNVTEQXxNyGaSP9JaMS
oiDHTRU3QOWBHuv+yJKZBlx8CmaA2oGgCCYcfFogjCAMkd7iPHJJWB1tvbxDILJZ
gvVHPRIqHJIrwBwbnG2TG/xB3YwQBHmdjNnisDiBTv591hFZhfRV2WwlCsOmQqoU
AqZ6ehDNfikKkWnZPP8DODZLGCZ4Xh0x9xJ7kGdf+tx+hB8uKPgJAWLeOagv+Lbs
NUWjOBiZGyOM6xeo7hWwOoL7yISvvlvwaAedkqy4GisJuWktKbjFTcB3pJGeSUGQ
JuFdgX9jgpbNzqUqdU99NjIUitlqcNxpNGt5nVf0I3Q77Ky2Guh5qf9imRY1LYDl
RcFsdvyVs7ZOYgaq3BcoiM8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278371611186484177527104063713320334893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06850'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Norwalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45 Glover Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab-epn.parc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818717693830774269995014229182117645461071403113496556774865400783037152039931095424825861416142092948671908956371306722708692716188454726214871821559929903647940770928615349793930774639637447891637833277220562305766371727616092846244342143117725770967127771589998879372093108558068303536183269494780113675013438625474136231868352679475506481784813355000666316532187725446226463795547357120347531737779842003743912514186447078673107107153862825428163279871097471815631837084802188705932620065129637621621615931325499528181828594927400059540658253278005692629862229094629732037300559314843960330458912513502454832494617724072233655545362863947134060062994756820619224416972802832519541930419151065471463869419910190363673931489409965095071607739284391331544972335621613036620179381495604737013243100231479362614473912977440545226814314980089022352090392618865153678625957015992551458054402628371898342664381888222780149688775695331853097972290167856204265461309053600402676167599057675921409306668250304281033160018719299053622425321253577907768692108822544278783818553525698400504701295982724805130390977223057564931060444152862949364128930101929744430393286654592414212338058482919238290137453851778669277224810608948106724775594191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							565ca7f9c842f3562917cc4cc98734525bc8d610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages-epn.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.gitlab-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.gitlab-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghe-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghe-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git-epn.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'github-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'github-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-epn.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlabepn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlabepn.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inferno-vm21.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inferno-vm21.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-epn.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-epn.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-external.parc.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab-external.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab-external.parc.xerox.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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