ibt.hmrc.gov.uk

- HM Revenue & Customs -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:ef:6b was issued on by GeoTrust, Inc..

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HM Revenue & Customs

Company registration number: 7OF6KdwpoX6KIL4y6GOJIl2svLNsIW5C
Organization: HM Revenue & Customs
State / Province: Devon
Locality: Plymouth
Country: GB

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ef:6b
Serial Number (int): 192363
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: fb:b9:d5:63:b5:63:ab:f4:85:63:fb:a5:b9:82:f8:5d:06:dd:3f:5a
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 2e:28:79:f0:07:33:51:41:6d:74:0a:e4:4f:48:df:a0:22:09:d4:fa
Fingerprint (sha256): 2d:b7:06:b6:24:be:a8:4a:ed:7d:b8:f6:94:af:62:9d:2b:df:32:1e:9a:40:e7:12:09:74:58:da:b4:0b:2c:9f

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate ibt.hmrc.gov.uk

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ibt.hmrc.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cccfcalculator-ibt.hmrc.gov.uk
ccincalculator-ibt.hmrc.gov.uk
companieshouse-ibt.hmrc.gov.uk
dps.ws.ibt.hmrc.gov.uk
emcs.ws.ibt.hmrc.gov.uk
ics.ws.ibt.hmrc.gov.uk
ldccalculator-ibt.hmrc.gov.uk
mrrcalculator-ibt.hmrc.gov.uk
nicdcalculator-ibt.hmrc.gov.uk
nicecalculator-ibt.hmrc.gov.uk
ntc-ibt.hmrc.gov.uk
payecalculator-ibt.hmrc.gov.uk
pensionschemes.ibt.hmrc.gov.uk
public-ibt.hmrc.gov.uk
sdccalculator-ibt.hmrc.gov.uk
stccalculator-ibt.hmrc.gov.uk
ecwtest.hmrc.gov.uk
ist3.ibt.hmrc.gov.uk
online.dev.ibt.hmrc.gov.uk
online.ps.ibt.hmrc.gov.uk
online.qa.ibt.hmrc.gov.uk
online.stg.ibt.hmrc.gov.uk
cccfcalculator-ibt-akprod.hmrc.gov.uk
ccincalculator-ibt-akprod.hmrc.gov.uk
companieshouse-ibt-akprod.hmrc.gov.uk
dps.ws.ibt-akprod.hmrc.gov.uk
emcs.ws.ibt-akprod.hmrc.gov.uk
ibt-akprod.hmrc.gov.uk
ics.ws.ibt-akprod.hmrc.gov.uk
ldccalculator-ibt-akprod.hmrc.gov.uk
mrrcalculator-ibt-akprod.hmrc.gov.uk
nicdcalculator-ibt-akprod.hmrc.gov.uk
nicecalculator-ibt-akprod.hmrc.gov.uk
ntc-ibt-akprod.hmrc.gov.uk
payecalculator-ibt-akprod.hmrc.gov.uk
pensionschemes.ibt-akprod.hmrc.gov.uk
public-ibt-akprod.hmrc.gov.uk
sdccalculator-ibt-akprod.hmrc.gov.uk
stccalculator-ibt-akprod.hmrc.gov.uk
ecwtest-akprod.hmrc.gov.uk
ist3.ibt-akprod.hmrc.gov.uk
online.dev.ibt-akprod.hmrc.gov.uk
online.ps.ibt-akprod.hmrc.gov.uk
online.qa.ibt-akprod.hmrc.gov.uk
online.stg.ibt-akprod.hmrc.gov.uk
online-sdc01.hmrc.gov.uk
online-sdc02.hmrc.gov.uk
public-online-sdc01.hmrc.gov.uk
public-online-sdc02.hmrc.gov.uk
ics-sdc01.ws.hmrc.gov.uk
ics-sdc02.ws.hmrc.gov.uk
emcs-sdc01.ws.hmrc.gov.uk
emcs-sdc02.ws.hmrc.gov.uk
dps-sdc01.ws.hmrc.gov.uk
dps-sdc02.ws.hmrc.gov.uk
companieshouse-online.ibt.hmrc.gov.uk
public.ibt.hmrc.gov.uk
online.ibt.hmrc.gov.uk
ibt.hmrc.gov.uk

Other certificates including the domain name hmrc.gov.uk

(limited to 100 certificates)
developer.service.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
ira74832.hmrc.gov.uk
sourcing.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
*.ws.clone.hmrc.gov.uk
ibt.cmec.hmrc.gov.uk
online.hmrc.gov.uk
directgov-customs.hmrc.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
T2VDL.CORP.hmrc.gov.uk
ecw.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
crest.hmrc.gov.uk
gitlab.sysman.corp.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
public-online.hmrc.gov.uk
directgov-paye.online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
api.service.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
st.online.hmrc.gov.uk
*.hmrc.gov.uk
paye.online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
sap-pi.preprod.hmrc.gov.uk
cmec.ws.hmrc.gov.uk
ibt.hmrc.gov.uk
online.hmrc.gov.uk
*.dev.cloudcentre.corp.hmrc.gov.uk
www.acumen.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
www.acumen.hmrc.gov.uk
businesslink-customs.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
aeoi.apps.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
rti-l-proxy1.hmrc.gov.uk
*.sysman.corp.hmrc.gov.uk
CloudGate.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.test.cdg.corp.hmrc.gov.uk
patch.staging.cdg.corp.hmrc.gov.uk
online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
subscriptions.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
cgec.hmrc.gov.uk
OSMonitor.sysman.corp.hmrc.gov.uk
disclosures.hmrc.gov.uk
www.acumen.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
aka.hmrc.gov.uk
public-online.hmrc.gov.uk
online.hmrc.gov.uk
tfc-client-dwp.test.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
online.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
online.hmrc.gov.uk
fs.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
community-origin.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk
cbs-browser.cbs.ns1p.corp.hmrc.gov.uk
bts.ibt.hmrc.gov.uk
ira74836.hmrc.gov.uk
businesslink-cis.online.hmrc.gov.uk
tfc.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
*.alm.corp.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
test-api.service.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
ira74832.hmrc.gov.uk
ndo.hmrc.gov.uk
mailgate.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk

Certificate

The complete raw certificate details for ibt.hmrc.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL6DCCCtCgAwIBAgIDAu9rMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTE0MDcyNjE5NDQ0OVoXDTE1MDcyOTE1NDQwMFowgZQxKTAnBgNVBAUT
IDdPRjZLZHdwb1g2S0lMNHk2R09KSWwyc3ZMTnNJVzVDMQswCQYDVQQGEwJHQjEO
MAwGA1UECBMFRGV2b24xETAPBgNVBAcTCFBseW1vdXRoMR0wGwYDVQQKDBRITSBS
ZXZlbnVlICYgQ3VzdG9tczEYMBYGA1UEAxMPaWJ0LmhtcmMuZ292LnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9q2TMS8AYBffxEOoQ2z+IMSg2k
HPZspGgFxnSxHHxEYp7te9DVaP1etWDXIySFb9kZxz+JcGoJYOvDbknZZFy43Abi
+9pT972PgCHrU4RQT7iStfLKiOUheZDvTlTGkqdoxZ7vIjwc0L9OLf3O0aOfGtjd
aM4f/LSZhK3dDwv+wuLEkaXXOyLR8oRjxK/6zP3Xf5OTOdbOPCs+V8W2LaSEvdHE
qVlLxAvEYRZ60p1lVyIEujYTYAlJT5oyzeFVHIAtSNkhs5b8UcQBoTcgMoDLroVj
Ffl4Q0a9a4ORdzlCpqxvM9EJLcVutbZ5rBHph12AhMyonXOM32Jq1YjaqwIDAQAB
o4IIlDCCCJAwHwYDVR0jBBgwFoAUQnlUG2HNVSs+Y9U8SFf1n/tFzkowDgYDVR0P
AQH/BAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCCBxEGA1Ud
EQSCBwgwggcEgh5jY2NmY2FsY3VsYXRvci1pYnQuaG1yYy5nb3YudWuCHmNjaW5j
YWxjdWxhdG9yLWlidC5obXJjLmdvdi51a4IeY29tcGFuaWVzaG91c2UtaWJ0Lmht
cmMuZ292LnVrghZkcHMud3MuaWJ0LmhtcmMuZ292LnVrghdlbWNzLndzLmlidC5o
bXJjLmdvdi51a4IWaWNzLndzLmlidC5obXJjLmdvdi51a4IdbGRjY2FsY3VsYXRv
ci1pYnQuaG1yYy5nb3YudWuCHW1ycmNhbGN1bGF0b3ItaWJ0LmhtcmMuZ292LnVr
gh5uaWNkY2FsY3VsYXRvci1pYnQuaG1yYy5nb3YudWuCHm5pY2VjYWxjdWxhdG9y
LWlidC5obXJjLmdvdi51a4ITbnRjLWlidC5obXJjLmdvdi51a4IecGF5ZWNhbGN1
bGF0b3ItaWJ0LmhtcmMuZ292LnVrgh5wZW5zaW9uc2NoZW1lcy5pYnQuaG1yYy5n
b3YudWuCFnB1YmxpYy1pYnQuaG1yYy5nb3YudWuCHXNkY2NhbGN1bGF0b3ItaWJ0
LmhtcmMuZ292LnVrgh1zdGNjYWxjdWxhdG9yLWlidC5obXJjLmdvdi51a4ITZWN3
dGVzdC5obXJjLmdvdi51a4IUaXN0My5pYnQuaG1yYy5nb3YudWuCGm9ubGluZS5k
ZXYuaWJ0LmhtcmMuZ292LnVrghlvbmxpbmUucHMuaWJ0LmhtcmMuZ292LnVrghlv
bmxpbmUucWEuaWJ0LmhtcmMuZ292LnVrghpvbmxpbmUuc3RnLmlidC5obXJjLmdv
di51a4IlY2NjZmNhbGN1bGF0b3ItaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IlY2Np
bmNhbGN1bGF0b3ItaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IlY29tcGFuaWVzaG91
c2UtaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IdZHBzLndzLmlidC1ha3Byb2QuaG1y
Yy5nb3YudWuCHmVtY3Mud3MuaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IWaWJ0LWFr
cHJvZC5obXJjLmdvdi51a4IdaWNzLndzLmlidC1ha3Byb2QuaG1yYy5nb3YudWuC
JGxkY2NhbGN1bGF0b3ItaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IkbXJyY2FsY3Vs
YXRvci1pYnQtYWtwcm9kLmhtcmMuZ292LnVrgiVuaWNkY2FsY3VsYXRvci1pYnQt
YWtwcm9kLmhtcmMuZ292LnVrgiVuaWNlY2FsY3VsYXRvci1pYnQtYWtwcm9kLmht
cmMuZ292LnVrghpudGMtaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IlcGF5ZWNhbGN1
bGF0b3ItaWJ0LWFrcHJvZC5obXJjLmdvdi51a4IlcGVuc2lvbnNjaGVtZXMuaWJ0
LWFrcHJvZC5obXJjLmdvdi51a4IdcHVibGljLWlidC1ha3Byb2QuaG1yYy5nb3Yu
dWuCJHNkY2NhbGN1bGF0b3ItaWJ0LWFrcHJvZC5obXJjLmdvdi51a4Ikc3RjY2Fs
Y3VsYXRvci1pYnQtYWtwcm9kLmhtcmMuZ292LnVrghplY3d0ZXN0LWFrcHJvZC5o
bXJjLmdvdi51a4IbaXN0My5pYnQtYWtwcm9kLmhtcmMuZ292LnVrgiFvbmxpbmUu
ZGV2LmlidC1ha3Byb2QuaG1yYy5nb3YudWuCIG9ubGluZS5wcy5pYnQtYWtwcm9k
LmhtcmMuZ292LnVrgiBvbmxpbmUucWEuaWJ0LWFrcHJvZC5obXJjLmdvdi51a4Ih
b25saW5lLnN0Zy5pYnQtYWtwcm9kLmhtcmMuZ292LnVrghhvbmxpbmUtc2RjMDEu
aG1yYy5nb3YudWuCGG9ubGluZS1zZGMwMi5obXJjLmdvdi51a4IfcHVibGljLW9u
bGluZS1zZGMwMS5obXJjLmdvdi51a4IfcHVibGljLW9ubGluZS1zZGMwMi5obXJj
Lmdvdi51a4IYaWNzLXNkYzAxLndzLmhtcmMuZ292LnVrghhpY3Mtc2RjMDIud3Mu
aG1yYy5nb3YudWuCGWVtY3Mtc2RjMDEud3MuaG1yYy5nb3YudWuCGWVtY3Mtc2Rj
MDIud3MuaG1yYy5nb3YudWuCGGRwcy1zZGMwMS53cy5obXJjLmdvdi51a4IYZHBz
LXNkYzAyLndzLmhtcmMuZ292LnVrgiVjb21wYW5pZXNob3VzZS1vbmxpbmUuaWJ0
LmhtcmMuZ292LnVrghZwdWJsaWMuaWJ0LmhtcmMuZ292LnVrghZvbmxpbmUuaWJ0
LmhtcmMuZ292LnVrgg9pYnQuaG1yYy5nb3YudWswPQYDVR0fBDYwNDAyoDCgLoYs
aHR0cDovL2d0c3NsLWNybC5nZW90cnVzdC5jb20vY3Jscy9ndHNzbC5jcmwwHQYD
VR0OBBYEFPu51WO1Y6v0hWP7pbmC+F0G3T9aMAwGA1UdEwEB/wQCMAAwbwYIKwYB
BQUHAQEEYzBhMCoGCCsGAQUFBzABhh5odHRwOi8vZ3Rzc2wtb2NzcC5nZW90cnVz
dC5jb20wMwYIKwYBBQUHMAKGJ2h0dHA6Ly9ndHNzbC1haWEuZ2VvdHJ1c3QuY29t
L2d0c3NsLmNydDBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcC
ARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG
9w0BAQUFAAOCAQEAUAXFPimCTm4JoBR3nOq4MMwbok8aXFd0evy6Fw8MS1YzLa3S
4Cv1I2nE9UZgDUxZZOgeZf2uUU+6/q9qh2sP+cJIwzmzLV7UUaTkJw3CeHgnj5Yc
KdFiWlWk1hjSyZ3Nlt9G2YifdXAfk8peepM1HN7RDuf0WDcNf6Cbmvu/Ib2+P32f
sOzqbIizf1L+UPnGaePO1f/u0t4+1BqiicsHhA6Jez/BRA1uQIlbBvEUa4rIplFk
AKGLV7SjvEVBaXaDzi1Hvz2eRUSrk8zzJRvZXDJEqhB5ZQAxYdIVbJfKF7xPwRT/
XraXX9DsBG9wtooTGMzHGMUQfcTKUS0UF+ptkA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9q2TMS8AYBffxEOoQ2
z+IMSg2kHPZspGgFxnSxHHxEYp7te9DVaP1etWDXIySFb9kZxz+JcGoJYOvDbknZ
ZFy43Abi+9pT972PgCHrU4RQT7iStfLKiOUheZDvTlTGkqdoxZ7vIjwc0L9OLf3O
0aOfGtjdaM4f/LSZhK3dDwv+wuLEkaXXOyLR8oRjxK/6zP3Xf5OTOdbOPCs+V8W2
LaSEvdHEqVlLxAvEYRZ60p1lVyIEujYTYAlJT5oyzeFVHIAtSNkhs5b8UcQBoTcg
MoDLroVjFfl4Q0a9a4ORdzlCpqxvM9EJLcVutbZ5rBHph12AhMyonXOM32Jq1Yja
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-26 19:44:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-29 15:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7OF6KdwpoX6KIL4y6GOJIl2svLNsIW5C'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Devon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HM Revenue & Customs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ibt.hmrc.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26628105151521585085519252876357257945552018552878618397501894647729193001803498498422384839730420895188845950062703988924359453504157711649115836573553186076431528106484774288985163844083259659730587046372957524818384502883197068792520903811842400968057109276861559126238649554795912429571260824968331304006617156953103523831663514900836917080455194720927843924086422541627108060674071566122773845251992959698652469751309188529712903952203236113946079914063060443689311244827106578845951440807479526838290111217958540134007748317823864799704899751988012370167131004606934981703210726298557353843037371421647518096043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccfcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccincalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrrcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicdcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntc-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionschemes.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecwtest.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.dev.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ps.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.qa.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.stg.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccfcalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccincalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.ws.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs.ws.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics.ws.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldccalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrrcalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicdcalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicecalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntc-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payecalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionschemes.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdccalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stccalculator-ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecwtest-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.dev.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ps.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.qa.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.stg.ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-sdc01.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-sdc02.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-online-sdc01.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-online-sdc02.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-sdc01.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-sdc02.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs-sdc01.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs-sdc02.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps-sdc01.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps-sdc02.ws.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbb9d563b563abf48563fba5b982f85d06dd3f5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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