mx.lombardinternational.com
- LOMBARD INTERNATIONAL ASSURANCE S.A. -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 48:a5:65:9c:47:ca:30:dd:02:e5:a2:5a was issued on by GlobalSign nv-sa.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
LOMBARD INTERNATIONAL ASSURANCE S.A.
Organization:
LOMBARD INTERNATIONAL ASSURANCE S.A.
State / Province:
Luxembourg
Locality: Luxembourg
Country: LU
Locality: Luxembourg
Country: LU
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 48:a5:65:9c:47:ca:30:dd:02:e5:a2:5aSerial Number (int): 22482873309253104942650335834
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: cf:94:ad:76:00:c9:89:73:1c:0e:83:24:28:ee:25:76:28:3d:06:fb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 21:f3:a3:22:ed:77:2b:2e:19:1b:96:c2:f5:78:37:e6:0b:b8:43:d2
Fingerprint (sha256): 34:38:2e:f7:b0:54:31:d9:9e:bb:ef:52:c8:38:34:9a:2a:78:64:e4:10:ba:35:03:b2:7c:b4:91:d4:9e:8a:d2
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate mx.lombardinternational.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mx.lombardinternational.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mx.lombardinternational.com
owa.lombardinternational.com
mail.lombardinternational.com
autodiscover.lombardinternational.com
owa.lombardinternational.com
mail.lombardinternational.com
autodiscover.lombardinternational.com
Other certificates including the domain name lombardinternational.com
(limited to 100 certificates)
cyberbarometer.brooklynpartners.nl
san-005.ceros.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
xmas2018.lombardinternational.com
san-002.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
surveys.lombardinternational.com
san-005.ceros.com
san-002.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-002.ceros.com
san-002.ceros.com
san-004.ceros.com
survey.sheshtech.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
survey.sheshtech.com
*.lombardinternational.com
survey.wildling.shoes
san-005.ceros.com
survey.sheshtech.com
survey.sheshtech.com
san-005.ceros.com
xmas2018-eu.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
*.lombardinternational.com
san-005.ceros.com
san-004.ceros.com
xmas2018-eu.lombardinternational.com
mx.lombardinternational.com
survey.sheshtech.com
xmas2018.lombardinternational.com
xmas2018-eu.lombardinternational.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-004.ceros.com
survey.sheshtech.com
*.connect.lombardinternational.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-004.ceros.com
xmas2018-eu.lombardinternational.com
survey.sheshtech.com
login.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-002.ceros.com
*.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-005.ceros.com
san-002.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-002.ceros.com
survey.sheshtech.com
*.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-005.ceros.com
xmas2018.lombardinternational.com
san-002.ceros.com
xmas2018-eu.lombardinternational.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
xmas2018.lombardinternational.com
san-002.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
surveys.lombardinternational.com
san-005.ceros.com
san-002.ceros.com
san-005.ceros.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-002.ceros.com
san-002.ceros.com
san-004.ceros.com
survey.sheshtech.com
san-004.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
survey.sheshtech.com
*.lombardinternational.com
survey.wildling.shoes
san-005.ceros.com
survey.sheshtech.com
survey.sheshtech.com
san-005.ceros.com
xmas2018-eu.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
*.lombardinternational.com
san-005.ceros.com
san-004.ceros.com
xmas2018-eu.lombardinternational.com
mx.lombardinternational.com
survey.sheshtech.com
xmas2018.lombardinternational.com
xmas2018-eu.lombardinternational.com
san-005.ceros.com
san-005.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-004.ceros.com
survey.sheshtech.com
*.connect.lombardinternational.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
san-004.ceros.com
xmas2018-eu.lombardinternational.com
survey.sheshtech.com
login.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-002.ceros.com
*.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-005.ceros.com
san-002.ceros.com
san-005.ceros.com
survey.sheshtech.com
san-002.ceros.com
survey.sheshtech.com
*.lombardinternational.com
san-004.ceros.com
san-005.ceros.com
san-004.ceros.com
san-005.ceros.com
xmas2018.lombardinternational.com
san-002.ceros.com
xmas2018-eu.lombardinternational.com
survey.sheshtech.com
san-004.ceros.com
san-005.ceros.com
san-005.ceros.com
Certificate
The complete raw certificate details for mx.lombardinternational.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGtDCCBZygAwIBAgIMSKVlnEfKMN0C5aJaMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMTIwNzI0MzJaFw0y NTAxMTIwNzI0MzFaMIGMMQswCQYDVQQGEwJMVTETMBEGA1UECBMKTHV4ZW1ib3Vy ZzETMBEGA1UEBxMKTHV4ZW1ib3VyZzEtMCsGA1UEChMkTE9NQkFSRCBJTlRFUk5B VElPTkFMIEFTU1VSQU5DRSBTLkEuMSQwIgYDVQQDExtteC5sb21iYXJkaW50ZXJu YXRpb25hbC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDTctZ9 fQ5V+vr9qHrqcl9nbJFLWKsV+oogPMBYtcH90W7dNWw5ry/wlqYPXK2fIPvf90jI xl1MJzeWLQliJLYqk8atSIup3KFCT37tcB988KVIARuLDck9nVjwOvAcqGz4QfnC 2jd8VxToADiaXn7vzucCukSGJEV9+vMfnSz+JIQ1VKHFKVc9/a83F/go/g0fMmOu xEzTn6oeD7GsPjA3v0jtWMhhr8DQgFV7KX0z8NltHxrshwrKxK8aqf6bnJaC765S 6HK1E1QRm6iR6ATPjrd3IzmGmtfbjf3bUttxU08DCFpuNEMFdUj49Y1Vrrh5Z2nX lkfNe1GGw8R13upzRjF4StR4m2BVPBVG4cwFQDO9CrgHqYskJeOX64ZpQiOBXOOX qSvrdoSV8wgkyVUpzEO58bXMZr//IeiE28/Wv2dvLMvRaTHCJS1q2IRpMJOr3vxt XfIMaNzJlGJE0FJ5mfM4c7SSskZ7BSE7OLNzpQswWvHQ53T0VNIYGfBC9gb5gEAi ZPiNbB0t6gllV9U8XGmnK0aTThxxIckq5NsTb1Dj90kmy/yw1WlWNeOojMevpLUh MhbKni08d8rUmiht+x6hh+NpSjNCw5XP68imvI0DeQ74/i5IrNDXy36XQxmcWCDj e8G8G4MC7fRBVS7+x8BTiZFruz8ipJtC03/GIwIDAQABo4ICTzCCAkswDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYB BQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNh b3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxz aWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEU MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z aXRvcnkvMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMIGMBgNVHREEgYQwgYGC G214LmxvbWJhcmRpbnRlcm5hdGlvbmFsLmNvbYIcb3dhLmxvbWJhcmRpbnRlcm5h dGlvbmFsLmNvbYIdbWFpbC5sb21iYXJkaW50ZXJuYXRpb25hbC5jb22CJWF1dG9k aXNjb3Zlci5sb21iYXJkaW50ZXJuYXRpb25hbC5jb20wHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPr MB0GA1UdDgQWBBTPlK12AMmJcxwOgyQo7iV2KD0G+zATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZsBOmwKRnx6cHlglntDGZYGW+T+qCNw 8q5Rgevj7zryb3yd5MUk4iE9P+uW4xu4qZzTXXpJNsArWUuTpgaIPtCFY7zfql+x b7w3n9KpS0kKNrsH8TC0l3gomRO/g60XzKLcVzCuDx/RyiWRL1xtQc9baELQlvgM zlSygylCa7WMWbtnlG/H3pxJFouAeRpqWj+05g4hH40fOFXnEQZfAQ81I9sYzxQk 7w7nmQBblzocYb2FL4DbUqjLy3AftSUixy+KiWO6VGFevSrCcGyawTHfEMmq1ca0 Ih39SQl5993E/XOdzkdmuS5lCyHD+2c04HsMjzH2TTUXGIEw6niX6g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA03LWfX0OVfr6/ah66nJf Z2yRS1irFfqKIDzAWLXB/dFu3TVsOa8v8JamD1ytnyD73/dIyMZdTCc3li0JYiS2 KpPGrUiLqdyhQk9+7XAffPClSAEbiw3JPZ1Y8DrwHKhs+EH5wto3fFcU6AA4ml5+ 787nArpEhiRFffrzH50s/iSENVShxSlXPf2vNxf4KP4NHzJjrsRM05+qHg+xrD4w N79I7VjIYa/A0IBVeyl9M/DZbR8a7IcKysSvGqn+m5yWgu+uUuhytRNUEZuokegE z463dyM5hprX243921LbcVNPAwhabjRDBXVI+PWNVa64eWdp15ZHzXtRhsPEdd7q c0YxeErUeJtgVTwVRuHMBUAzvQq4B6mLJCXjl+uGaUIjgVzjl6kr63aElfMIJMlV KcxDufG1zGa//yHohNvP1r9nbyzL0WkxwiUtatiEaTCTq978bV3yDGjcyZRiRNBS eZnzOHO0krJGewUhOzizc6ULMFrx0Od09FTSGBnwQvYG+YBAImT4jWwdLeoJZVfV PFxppytGk04ccSHJKuTbE29Q4/dJJsv8sNVpVjXjqIzHr6S1ITIWyp4tPHfK1Joo bfseoYfjaUozQsOVz+vIpryNA3kO+P4uSKzQ18t+l0MZnFgg43vBvBuDAu30QVUu /sfAU4mRa7s/IqSbQtN/xiMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 22482873309253104942650335834 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 07:24:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 07:24:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LOMBARD INTERNATIONAL ASSURANCE S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx.lombardinternational.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862634966957443177917662794635390855285055133800016299573315984631749971407536885888701670045812219064519449827552724516621562164367401738349084807362274278703892644832607919277996087990280414921723525577822105355201631029094733110720972570400162731735874113021587548749820858804686951112233470288955064954578964171352726790143378904761123724703449135720654918041306194808416657857329449487897705179604837881918745541056745182362012417737624226855656195023863702761282643913526100002842560516048360463126567225660625278407159570036605034350297640198754759872322852599744106204476903870646957770228512409852409078163467486080456295866923759662702884276744562852936893375115109803911008395004464644875358997178233683980624402544933297639136371245218132038891021126825449633109274513061796389845018601964788464433113452360545026994118864583666528894312937217786500974828196424975573001797699641740071980663319905271335922058344997153457087503212786054671147994459911905257439041476940646945961288086593083226011695550292473280614666130471907409138957965642403794549392660623442652005661618602424243210583725934784323690503423332666196273775664954944025348536481483328235778103755429595007249788107100744897762318831539085186454037448227 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.lombardinternational.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.lombardinternational.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lombardinternational.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lombardinternational.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf94ad7600c989731c0e832428ee2576283d06fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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