glosxp1appd01.hgrs.holcim.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ee:36:fb:e2:9f:6a:d9:d2:a6:c4:41:7a:2b:1e:d2:9e was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=glosxp1appd01.hgrs.holcim.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ee:36:fb:e2:9f:6a:d9:d2:a6:c4:41:7a:2b:1e:d2:9e
Serial Number (int): 316641755866883394573896290559978295966
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 46:8e:51:12:93:f7:36:11:92:ab:53:8a:67:7b:49:08:b3:9d:7f:23
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 20:22:3b:28:b8:e3:92:76:5b:4f:e4:02:e7:e9:a3:3f:04:b4:34:cc
Fingerprint (sha256): 35:38:9b:23:fb:1d:75:e5:87:4b:b5:41:a2:b0:71:6c:e1:25:9f:26:57:c7:f8:a6:27:a0:eb:54:e6:e2:88:7d

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate glosxp1appd01.hgrs.holcim.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glosxp1appd01.hgrs.holcim.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glosxp1appd01.hgrs.holcim.net
www.glosxp1appd01.hgrs.holcim.net

Other certificates including the domain name holcim.net

(limited to 100 certificates)
corporate-ise2.hgrs.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net

Certificate

The complete raw certificate details for glosxp1appd01.hgrs.holcim.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZjCCBk6gAwIBAgIRAO42++KfatnSpsRBeise0p4wDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yNDA2MTEwMDAwMDBaFw0yNTA3MTIyMzU5NTlaMCgxJjAkBgNVBAMTHWds
b3N4cDFhcHBkMDEuaGdycy5ob2xjaW0ubmV0MIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEA0k8bnTWn1iTmxUvzcNjo+ay3tqoO7qbBgL12Kjaj5XfL+7BX
fJfsyQL2rTq24pbJxg926vTG/31L1fY89Mt6Qukav0zANbUgRxzLwFEap10DosGF
fO5XX7vu7Z7xMsSIfQgpaqHi2uSZljhUu5nk/Lx6bMRalRQZcjsHyiYXylSq8s+7
f6PaMByOVu7tUW7jwgXM/b+70Z/Ji8Yk8pHdWUPAdLeYvkfjw38YbkqDWCkIW3YN
jz2FMn7v29SidZXerbYRyB1gJrG27rQHl2uw/IwyWNfdeBP+k+qfrr9OyoDCNJcc
r6QmvgClSmGI5p3xXwL0PVM/IwbbxoHpPz+3880n3SUp5Kk2D22pTZQZ6/LoUcZq
9TrCyFBHPG6H6lweKZ1C201jyinGwVFmrXNoArIXxh9I6QuqiDcgyV6MaRS4FNVQ
caX1rZ+Wt7ehxVLrXHV2FT2xiwHb9U8IpqSb0TTYD7bn2eis9gAVDpwDo87lG3q2
eJJQrP/sYOeR7FUp3jS4o0EhdOvL/hiPxaxKE9Sm1SL88liNNnNmyRDMwPfylcL2
SnyTMlJMA+htPLrr7TqHfTEKxld2S+FKM2SLtpbyGYLDQg7tpj8/C5uNf5eubIu4
qJA6ItF4owQFfC02w8cKbXLLbEcbnYVwGb+kRhP963uaQjO8TAQgIJlgkasCAwEA
AaOCAyEwggMdMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1Ud
DgQWBBRGjlESk/c2EZKrU4pne0kIs51/IzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIw
QDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28u
Y29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZD
aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlv
blNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj
dGlnby5jb20wSwYDVR0RBEQwQoIdZ2xvc3hwMWFwcGQwMS5oZ3JzLmhvbGNpbS5u
ZXSCIXd3dy5nbG9zeHAxYXBwZDAxLmhncnMuaG9sY2ltLm5ldDCCAX0GCisGAQQB
1nkCBAIEggFtBIIBaQFnAHcA3dzKNJXX4RYF55Uy+sef+D0cUN/bADoUEnYKLKy7
yCoAAAGQBqDJngAABAMASDBGAiEAuhnvB7c6+wpGdC1rJ2JqhmQEPcR9ColWMYTP
mzH3/rACIQDQuZaTZ00QeNM4dA0ZAXI3B26Hx4+YVnrgL1Rkbg66fwB1AA3h8jAr
0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABkAagyYAAAAQDAEYwRAIgbUuZ
QqrgpGMwuzcdl4DdqBXx6+oWAvSHMC7h69EtbhYCIAKFP4De0mcJ+7fuH9iie2S6
YTETfw4/+keOzEHymnVGAHUAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE6+WG
JjoAAAGQBqDJfwAABAMARjBEAiA14doEQ4PW9A4dCKVlVaagG9REtnv0u9XHV2Vk
1WUcywIgDxEySXBI7FqL7Vp1XeNVRakYxOHwKDJbQF+kekFNz6MwDQYJKoZIhvcN
AQELBQADggEBAM203z1SurvBMmcc7hGSF1henZ4n5je9xR0tp275OLiI3YbMFLXf
9uSkHpFis/cSI8Cal7RC8404/jh75NWKbtARNGpAaqNc8TfeeQXbHP5dLiHXrTif
kr3xGE6OsxqX4dFt8wFQNh+uSMKUIsaa2uR8tAmsVnrVxopDEUFOHupgb8Ilju7a
bxEKFEVWzRen6mtdCMOLCJDSpyQMk60Xzx+soJb/7rnwW3OJ+WSQHM30pzqnCwqc
XXUuThhXRit+WzKs2nooESTFFV+9kPrqpC4H369GgrNoXx7O9CORvn+HdvfheZXX
7ixV6REcfx/MJlVtpg707l1S6b+aBasYtvo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316641755866883394573896290559978295966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glosxp1appd01.hgrs.holcim.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857985925935392039899119641905847879835255749113472083332701868576976964321300503747715685293815050779926148005539025601679135817557017584000828076999879271257852694120487995982181815977000022602339211829007715236993956832762552254350629193890950626233830062841024402136152874622850854015491476904014602991554028035945320080704619138448211552091484991420564573320985551143825858311343024012810066404226192396768229168373482199752826521709285334834494733887205098917906540217587751841574228258239103612812345409316160074415105089847815566632454456282760035291322797996669250555025899061998520077703732188189194324845458637775504190321170847975026818359616235944978698822302496121869337321807598630337329685946526673949759296631488219231272122065927030342365979998767242406236620057559759754284111903541527544693922157382617714464156552312061829830648429739458490066195871826934365461631351676942246953204307205493649147518620215303485234653544700602863768125328121881596949619799827685147272631203849998916187533071331440643045946424161536991591931821973438320659693000491429832197310593145963944271875223920027919099339777476398938472351583947466306915727278204530171931031370466052928966246949732118035269555657204983114132646564267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							468e511293f7361192ab538a677b4908b39d7f23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glosxp1appd01.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glosxp1appd01.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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