ibt.hmrc.gov.uk

- HM Revenue & Customs -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:73:0b:5f:dd:70:3b:0a:18:f7:11:7b:b9:44:3a:b7 was issued on by DigiCert Inc.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HM Revenue & Customs

Organization: HM Revenue & Customs
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:73:0b:5f:dd:70:3b:0a:18:f7:11:7b:b9:44:3a:b7
Serial Number (int): 19206536781433272089623995229376101047
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:9c:10:41:b8:37:5f:dd:a7:47:b7:de:41:69:e4:33:ec:3f:4b:83
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2f:4e:37:61:1c:bc:43:96:05:b3:be:ba:c9:f6:25:7f:74:77:7e:93
Fingerprint (sha256): 31:60:b8:4c:8c:c9:43:05:2b:47:b0:19:74:2c:94:d2:6c:79:4d:4b:fa:ac:ab:fa:09:68:9e:8c:20:5c:ff:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate ibt.hmrc.gov.uk

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ibt.hmrc.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ibt.hmrc.gov.uk
ws.ibt.hmrc.gov.uk
stccalculator-ibt.hmrc.gov.uk
soae.ws.ibt.hmrc.gov.uk
slc.ws.ibt.hmrc.gov.uk
sdes-qa.hmrc.gov.uk
sdes-dev.hmrc.gov.uk
sdccalculator-ibt.hmrc.gov.uk
public-ibt.hmrc.gov.uk
pensionschemes.ibt.hmrc.gov.uk
payecalculator-ibt.hmrc.gov.uk
online.stg.ibt.hmrc.gov.uk
online.qa.ibt.hmrc.gov.uk
online.ps.ibt.hmrc.gov.uk
online.ibt.hmrc.gov.uk
ntc-ibt.hmrc.gov.uk
nicecalculator-ibt.hmrc.gov.uk
nicdcalculator-ibt.hmrc.gov.uk
mrrcalculator-ibt.hmrc.gov.uk
ldccalculator-ibt.hmrc.gov.uk
ita.ws.ibt.hmrc.gov.uk
ita-ext.tlb.hmrc.gov.uk
ist3.ibt.hmrc.gov.uk
ist3.hmrc.gov.uk
io-services.ws.ibt.hmrc.gov.uk
ifs.ws.ibt.hmrc.gov.uk
if.ws.ibt.hmrc.gov.uk
ics.ws.ibt.hmrc.gov.uk
ibt-akprod.hmrc.gov.uk
iasspx.ws.ibt.hmrc.gov.uk
hods.ws.ibt.hmrc.gov.uk
exchange.ws.ibt.hmrc.gov.uk
emcs.ws.ibt.hmrc.gov.uk
ecwtest.hmrc.gov.uk
dps.ws.ibt.hmrc.gov.uk
digital.ws.ibt.hmrc.gov.uk
des.ws.ibt.hmrc.gov.uk
customs.ws.ibt.hmrc.gov.uk
content.ws.ibt.hmrc.gov.uk
companieshouse-online.ibt.hmrc.gov.uk
companieshouse-ibt.hmrc.gov.uk
chris.ws.ibt.hmrc.gov.uk
ccn.ws.ibt.hmrc.gov.uk
ccn.conf.hmrc.gov.uk
ccincalculator-ibt.hmrc.gov.uk
cccfcalculator-ibt.hmrc.gov.uk
bankwizard.ws.ibt.hmrc.gov.uk
apis.ws.ibt.hmrc.gov.uk

Other certificates including the domain name hmrc.gov.uk

(limited to 100 certificates)
developer.service.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
ira74832.hmrc.gov.uk
sourcing.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
*.ws.clone.hmrc.gov.uk
ibt.cmec.hmrc.gov.uk
online.hmrc.gov.uk
directgov-customs.hmrc.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
T2VDL.CORP.hmrc.gov.uk
ecw.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
crest.hmrc.gov.uk
gitlab.sysman.corp.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
public-online.hmrc.gov.uk
directgov-paye.online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
api.service.hmrc.gov.uk
www.tpvs.hmrc.gov.uk
st.online.hmrc.gov.uk
*.hmrc.gov.uk
paye.online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
sdes-ftp.hmrc.gov.uk
sap-pi.preprod.hmrc.gov.uk
cmec.ws.hmrc.gov.uk
ibt.hmrc.gov.uk
online.hmrc.gov.uk
*.dev.cloudcentre.corp.hmrc.gov.uk
www.acumen.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
www.acumen.hmrc.gov.uk
businesslink-customs.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
aeoi.apps.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
rti-l-proxy1.hmrc.gov.uk
*.sysman.corp.hmrc.gov.uk
CloudGate.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.test.cdg.corp.hmrc.gov.uk
patch.staging.cdg.corp.hmrc.gov.uk
online.hmrc.gov.uk
ibt.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
subscriptions.hmrc.gov.uk
ibt.hmrc.gov.uk
patch.prod.cdg.corp.hmrc.gov.uk
cgec.hmrc.gov.uk
OSMonitor.sysman.corp.hmrc.gov.uk
disclosures.hmrc.gov.uk
www.acumen.hmrc.gov.uk
*.cloudcenter.corp.hmrc.gov.uk
online.hmrc.gov.uk
aka.hmrc.gov.uk
public-online.hmrc.gov.uk
online.hmrc.gov.uk
tfc-client-dwp.test.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
slc.ws.hmrc.gov.uk
online.hmrc.gov.uk
online.hmrc.gov.uk
esi2calculator.hmrc.gov.uk
online.hmrc.gov.uk
fs.hmrc.gov.uk
pensionschemes.hmrc.gov.uk
community-origin.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk
cbs-browser.cbs.ns1p.corp.hmrc.gov.uk
bts.ibt.hmrc.gov.uk
ira74836.hmrc.gov.uk
businesslink-cis.online.hmrc.gov.uk
tfc.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
*.alm.corp.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
online.hmrc.gov.uk
*.ws.ibt.hmrc.gov.uk
test-api.service.hmrc.gov.uk
cname-hmrc-gov-uk.production.tax.service.gov.uk
ira74832.hmrc.gov.uk
ndo.hmrc.gov.uk
mailgate.hmrc.gov.uk
online.hmrc.gov.uk
fraudinvestigationjobs.hmrc.gov.uk
online.hmrc.gov.uk
companieshouse-online.hmrc.gov.uk
businesslink-paye.online.hmrc.gov.uk

Certificate

The complete raw certificate details for ibt.hmrc.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jFU7bo1xu+eVZgtpmQH
tKMewE/+PqpjR1NMl9eFvA+8oWAwscfiEjEvawydTDWgQXvyQ8yIYxjwBzkJer+U
NN8GXLu+Y1ZGNyo9D9UTcAxUdh84CLHxua9riSuddKfAfT+5RjyqqxqbPHSMioff
Rbmic8+UU6LbDEC2rPzJ58hQzwQDWbrpwJywKePY0HNA6mK4uKI5OUQDHlm2c3ot
VocoQveqP37fAEtYHFufn51V1m6n3e0R9TqNIqaJvXDaPvEWV7O2IXXs1ziuH9Dl
umeVnIRA6chQvMTBh88xpBlSaSKSkwmdwAWvXp1Cyt/EBdkNXsZCAjgA7/3IOtaN
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19206536781433272089623995229376101047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HM Revenue & Customs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ibt.hmrc.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27544276876382107772024634653544325940971429917770149203102254010580965913789070519142381350359448676245238584122460138221668440291398753114702767560604915529985340478594991624325658083278137056414825578261155975975923697216223682884356614242419041971358392166708362733964052585606662231609711236235143519188066768315561176581279344702742282366138108127194595659910231562076317650560756086830537170994972853356371611529680747032305751646772816370804992082574751294666676365656472327125647798350287578718125446763952811428775292264079432612741797050465842974932342727390955106636295337706417946211273763170105496604141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29c1041b8375fdda747b7de4169e433ec3f4b83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soae.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slc.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdes-qa.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdes-dev.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionschemes.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.stg.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.qa.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ps.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntc-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicecalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicdcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrrcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldccalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ita.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ita-ext.tlb.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist3.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-services.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibt-akprod.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iasspx.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hods.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecwtest.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customs.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-online.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companieshouse-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chris.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccn.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccn.conf.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccincalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccfcalculator-ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankwizard.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.ws.ibt.hmrc.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00811cd8a9ea74ce2fb4e7e058b5ca829d8122d0804e0a0bff6f178d613402ddb473beb9ae77b6dd62d5a9a81797263ff0e86652ebb3cd0151a83c6d707b62f72f8c45d0445eb7032d6768297544f0721f7babd6c34ed696998b05a5d45bd01d8c807aaecdbccf0166392fd3bffb8c231755a15a208646ca3179cd94f40bfadd8342f1ae477c353af428c5756445fa55e3e7a74d4b3422fca820bd4056af2abf8385e51725daa9aeda0e4af429c7275241cfcb81a1576400535e8667c2420e329517bc8b468d3b3cad607bb203177a356019abb9af2fe463e34b22991f4337eef49dfcaa3f5b23e0cd52eff497e88d63b30a28932a35e089712086b5bd2fdd2552