glosxp1appd01.hgrs.holcim.net
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number ee:36:fb:e2:9f:6a:d9:d2:a6:c4:41:7a:2b:1e:d2:9e was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=glosxp1appd01.hgrs.holcim.net
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): ee:36:fb:e2:9f:6a:d9:d2:a6:c4:41:7a:2b:1e:d2:9eSerial Number (int): 316641755866883394573896290559978295966
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 46:8e:51:12:93:f7:36:11:92:ab:53:8a:67:7b:49:08:b3:9d:7f:23
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 20:22:3b:28:b8:e3:92:76:5b:4f:e4:02:e7:e9:a3:3f:04:b4:34:cc
Fingerprint (sha256): 35:38:9b:23:fb:1d:75:e5:87:4b:b5:41:a2:b0:71:6c:e1:25:9f:26:57:c7:f8:a6:27:a0:eb:54:e6:e2:88:7d
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate glosxp1appd01.hgrs.holcim.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for glosxp1appd01.hgrs.holcim.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
glosxp1appd01.hgrs.holcim.net
www.glosxp1appd01.hgrs.holcim.net
www.glosxp1appd01.hgrs.holcim.net
Other certificates including the domain name holcim.net
(limited to 100 certificates)
corporate-ise2.hgrs.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net
Certificate
The complete raw certificate details for glosxp1appd01.hgrs.holcim.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHZjCCBk6gAwIBAgIRAO42++KfatnSpsRBeise0p4wDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0yNDA2MTEwMDAwMDBaFw0yNTA3MTIyMzU5NTlaMCgxJjAkBgNVBAMTHWds b3N4cDFhcHBkMDEuaGdycy5ob2xjaW0ubmV0MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA0k8bnTWn1iTmxUvzcNjo+ay3tqoO7qbBgL12Kjaj5XfL+7BX fJfsyQL2rTq24pbJxg926vTG/31L1fY89Mt6Qukav0zANbUgRxzLwFEap10DosGF fO5XX7vu7Z7xMsSIfQgpaqHi2uSZljhUu5nk/Lx6bMRalRQZcjsHyiYXylSq8s+7 f6PaMByOVu7tUW7jwgXM/b+70Z/Ji8Yk8pHdWUPAdLeYvkfjw38YbkqDWCkIW3YN jz2FMn7v29SidZXerbYRyB1gJrG27rQHl2uw/IwyWNfdeBP+k+qfrr9OyoDCNJcc r6QmvgClSmGI5p3xXwL0PVM/IwbbxoHpPz+3880n3SUp5Kk2D22pTZQZ6/LoUcZq 9TrCyFBHPG6H6lweKZ1C201jyinGwVFmrXNoArIXxh9I6QuqiDcgyV6MaRS4FNVQ caX1rZ+Wt7ehxVLrXHV2FT2xiwHb9U8IpqSb0TTYD7bn2eis9gAVDpwDo87lG3q2 eJJQrP/sYOeR7FUp3jS4o0EhdOvL/hiPxaxKE9Sm1SL88liNNnNmyRDMwPfylcL2 SnyTMlJMA+htPLrr7TqHfTEKxld2S+FKM2SLtpbyGYLDQg7tpj8/C5uNf5eubIu4 qJA6ItF4owQFfC02w8cKbXLLbEcbnYVwGb+kRhP963uaQjO8TAQgIJlgkasCAwEA AaOCAyEwggMdMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1Ud DgQWBBRGjlESk/c2EZKrU4pne0kIs51/IzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIw QDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28u Y29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZD aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlv blNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj dGlnby5jb20wSwYDVR0RBEQwQoIdZ2xvc3hwMWFwcGQwMS5oZ3JzLmhvbGNpbS5u ZXSCIXd3dy5nbG9zeHAxYXBwZDAxLmhncnMuaG9sY2ltLm5ldDCCAX0GCisGAQQB 1nkCBAIEggFtBIIBaQFnAHcA3dzKNJXX4RYF55Uy+sef+D0cUN/bADoUEnYKLKy7 yCoAAAGQBqDJngAABAMASDBGAiEAuhnvB7c6+wpGdC1rJ2JqhmQEPcR9ColWMYTP mzH3/rACIQDQuZaTZ00QeNM4dA0ZAXI3B26Hx4+YVnrgL1Rkbg66fwB1AA3h8jAr 0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABkAagyYAAAAQDAEYwRAIgbUuZ QqrgpGMwuzcdl4DdqBXx6+oWAvSHMC7h69EtbhYCIAKFP4De0mcJ+7fuH9iie2S6 YTETfw4/+keOzEHymnVGAHUAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE6+WG JjoAAAGQBqDJfwAABAMARjBEAiA14doEQ4PW9A4dCKVlVaagG9REtnv0u9XHV2Vk 1WUcywIgDxEySXBI7FqL7Vp1XeNVRakYxOHwKDJbQF+kekFNz6MwDQYJKoZIhvcN AQELBQADggEBAM203z1SurvBMmcc7hGSF1henZ4n5je9xR0tp275OLiI3YbMFLXf 9uSkHpFis/cSI8Cal7RC8404/jh75NWKbtARNGpAaqNc8TfeeQXbHP5dLiHXrTif kr3xGE6OsxqX4dFt8wFQNh+uSMKUIsaa2uR8tAmsVnrVxopDEUFOHupgb8Ilju7a bxEKFEVWzRen6mtdCMOLCJDSpyQMk60Xzx+soJb/7rnwW3OJ+WSQHM30pzqnCwqc XXUuThhXRit+WzKs2nooESTFFV+9kPrqpC4H369GgrNoXx7O9CORvn+HdvfheZXX 7ixV6REcfx/MJlVtpg707l1S6b+aBasYtvo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0k8bnTWn1iTmxUvzcNjo +ay3tqoO7qbBgL12Kjaj5XfL+7BXfJfsyQL2rTq24pbJxg926vTG/31L1fY89Mt6 Qukav0zANbUgRxzLwFEap10DosGFfO5XX7vu7Z7xMsSIfQgpaqHi2uSZljhUu5nk /Lx6bMRalRQZcjsHyiYXylSq8s+7f6PaMByOVu7tUW7jwgXM/b+70Z/Ji8Yk8pHd WUPAdLeYvkfjw38YbkqDWCkIW3YNjz2FMn7v29SidZXerbYRyB1gJrG27rQHl2uw /IwyWNfdeBP+k+qfrr9OyoDCNJccr6QmvgClSmGI5p3xXwL0PVM/IwbbxoHpPz+3 880n3SUp5Kk2D22pTZQZ6/LoUcZq9TrCyFBHPG6H6lweKZ1C201jyinGwVFmrXNo ArIXxh9I6QuqiDcgyV6MaRS4FNVQcaX1rZ+Wt7ehxVLrXHV2FT2xiwHb9U8IpqSb 0TTYD7bn2eis9gAVDpwDo87lG3q2eJJQrP/sYOeR7FUp3jS4o0EhdOvL/hiPxaxK E9Sm1SL88liNNnNmyRDMwPfylcL2SnyTMlJMA+htPLrr7TqHfTEKxld2S+FKM2SL tpbyGYLDQg7tpj8/C5uNf5eubIu4qJA6ItF4owQFfC02w8cKbXLLbEcbnYVwGb+k RhP963uaQjO8TAQgIJlgkasCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316641755866883394573896290559978295966 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glosxp1appd01.hgrs.holcim.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857985925935392039899119641905847879835255749113472083332701868576976964321300503747715685293815050779926148005539025601679135817557017584000828076999879271257852694120487995982181815977000022602339211829007715236993956832762552254350629193890950626233830062841024402136152874622850854015491476904014602991554028035945320080704619138448211552091484991420564573320985551143825858311343024012810066404226192396768229168373482199752826521709285334834494733887205098917906540217587751841574228258239103612812345409316160074415105089847815566632454456282760035291322797996669250555025899061998520077703732188189194324845458637775504190321170847975026818359616235944978698822302496121869337321807598630337329685946526673949759296631488219231272122065927030342365979998767242406236620057559759754284111903541527544693922157382617714464156552312061829830648429739458490066195871826934365461631351676942246953204307205493649147518620215303485234653544700602863768125328121881596949619799827685147272631203849998916187533071331440643045946424161536991591931821973438320659693000491429832197310593145963944271875223920027919099339777476398938472351583947466306915727278204530171931031370466052928966246949732118035269555657204983114132646564267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 468e511293f7361192ab538a677b4908b39d7f23 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glosxp1appd01.hgrs.holcim.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glosxp1appd01.hgrs.holcim.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019006a0c99e0000040300483046022100ba19ef07b73afb0a46742d6b27626a8664043dc47d0a89563184cf9b31f7feb0022100d0b99693674d1078d338740d19017237076e87c78f98567ae02f54646e0eba7f0075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000019006a0c980000004030046304402206d4b9942aae0a46330bb371d9780dda815f1ebea1602f487302ee1ebd12d6e16022002853f80ded26709fbb7ee1fd8a27b64ba6131137f0e3ffa478ecc41f29a754600750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019006a0c97f0000040300463044022035e1da044383d6f40e1d08a56555a6a01bd444b67bf4bbd5c7576564d5651ccb02200f1132497048ec5a8bed5a755de35545a918c4e1f028325b405fa47a414dcfa3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00cdb4df3d52babbc132671cee119217585e9d9e27e637bdc51d2da76ef938b888dd86cc14b5dff6e4a41e9162b3f71223c09a97b442f38d38fe387be4d58a6ed011346a406aa35cf137de7905db1cfe5d2e21d7ad389f92bdf1184e8eb31a97e1d16df30150361fae48c29422c69adae47cb409ac567ad5c68a4311414e1eea606fc2258eeeda6f110a144556cd17a7ea6b5d08c38b0890d2a7240c93ad17cf1faca096ffeeb9f05b7389f964901ccdf4a73aa70b0a9c5d752e4e1857462b7e5b32acda7a281124c5155fbd90faeaa42e07dfaf4682b3685f1ecef42391be7f8776f7e17995d7ee2c55e9111c7f1fcc26556da60ef4ee5d52e9bf9a05ab18b6fa