ap.vpn.bakerhughes.com
- Baker Hughes Company -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 1b:7e:7c:57:ff:84:68:e5:0f:5c:24:28:f2:61:2a:e0 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Baker Hughes Company
Organization:
Baker Hughes Company
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:7e:7c:57:ff:84:68:e5:0f:5c:24:28:f2:61:2a:e0Serial Number (int): 36545907281087859461885107527714155232
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 01:76:80:90:a8:06:cd:c6:86:2e:03:f1:9e:31:b7:f6:33:22:79:73
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): ca:ac:29:81:e2:13:e0:9b:dd:a9:c2:70:ed:44:95:d6:27:da:37:5d
Fingerprint (sha256): 38:b7:ca:8c:c3:47:52:34:5d:45:5b:90:c9:57:6c:b8:a3:77:31:a4:32:de:11:ab:ec:1d:e9:e7:1b:79:03:f4
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate ap.vpn.bakerhughes.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ap.vpn.bakerhughes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ap.vpn.bakerhughes.com
sg-sg3-f10.ent.bhicorp.com
sg-sg3-f10.ent.bhicorp.com
Other certificates including the domain name bakerhughes.com
(limited to 100 certificates)
wlrtwh.welllink.bakerhughes.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com
Certificate
The complete raw certificate details for ap.vpn.bakerhughes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIQG358V/+EaOUPXCQo8mEq4DANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIxMDgyNTAwMDAwMFoXDTIyMDgyNTIzNTk1OVowbzELMAkGA1UE BhMCVVMxDjAMBgNVBAgTBVRleGFzMRAwDgYDVQQHEwdIb3VzdG9uMR0wGwYDVQQK ExRCYWtlciBIdWdoZXMgQ29tcGFueTEfMB0GA1UEAxMWYXAudnBuLmJha2VyaHVn aGVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMevcjBPnjIc su6W5KR7a1R5SYmLsJrpS/+gQychhA2QCfXh2BwZHQBwpatQipqa2uY1h1LXPK84 0NJtkE7eiLyGgRihKc0Mecu7z/S5idzmaoJG3hmRHA2cHuorMtho3mcyYl1V2nEI gQzsSzhZVwIPbnL8coTWf572ZD+PN7tvqIfObU+fShdMyZWztIhYPn9EwClMw9IG RlB2pud00BpRuSZvJLqK4mFwXSeDJ5lynd9/jzEi3XT12zWm+ThbjR6obk9w0kvb zOpf9guGMk4hjC/uxwSgHWreKVfFcJJ9sT+nBMr9W5oJa86a0CYyyCoMm+VEiOxZ pG+T/DdgyqMCAwEAAaOCAgowggIGMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2 RIxsqU/rMB0GA1UdDgQWBBQBdoCQqAbNxoYuA/GeMbf2MyJ5czAOBgNVHQ8BAf8E BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0 cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuG SWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZh bGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggr BgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5p emF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYX aHR0cDovL29jc3Auc2VjdGlnby5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAwPQYD VR0RBDYwNIIWYXAudnBuLmJha2VyaHVnaGVzLmNvbYIac2ctc2czLWYxMC5lbnQu YmhpY29ycC5jb20wDQYJKoZIhvcNAQELBQADggEBAHbZOML8EXruq4Lc3E60Q7Jn ggnOBwXetOcDCKZ1L1uEkhp2vZS0Y6m33taKfE2qdRPqidZAqvVh6OmJwdlRs37g zAJywtbeiEQY+KSRQC+1Ml3+mmAW69vQxAgXxYF8dgcgLaDjpArGWodR9mag6+BD egHhUxnJE5W3u8wtmvA5XVq3ufFwdxlLIoMO90mEIEDT5Jt2e1vl3/eirKRroAnW PZ2uNHZcEMbirPnomnlZ0p80ex67WqRZ8YiqzTOzjBlYtZ6gjrfBhTXg0bPsJDkb BrYBZOX6hJkk+dQqTl8oxp6aphjBcC2q7uHUbDvmtEM3f+O+nl+DgCdcagqsies= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx69yME+eMhyy7pbkpHtr VHlJiYuwmulL/6BDJyGEDZAJ9eHYHBkdAHClq1CKmpra5jWHUtc8rzjQ0m2QTt6I vIaBGKEpzQx5y7vP9LmJ3OZqgkbeGZEcDZwe6isy2GjeZzJiXVXacQiBDOxLOFlX Ag9ucvxyhNZ/nvZkP483u2+oh85tT59KF0zJlbO0iFg+f0TAKUzD0gZGUHam53TQ GlG5Jm8kuoriYXBdJ4MnmXKd33+PMSLddPXbNab5OFuNHqhuT3DSS9vM6l/2C4Yy TiGML+7HBKAdat4pV8Vwkn2xP6cEyv1bmglrzprQJjLIKgyb5USI7Fmkb5P8N2DK owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36545907281087859461885107527714155232 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baker Hughes Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.vpn.bakerhughes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25207938359819935152274228604308183434089383639987027765297445313049006151389986664880494517517460289495302805060489277241893955025760877143249170003462442361664729323611191514835614756807628437494274977607348869996899486753673644803128722587530653160272291856063060179824886260407059301283124088247631247056977701366416702335834986272977439681713507156014061256717500762137124207929544821232475994785748480137498701414562594483360074583844453792450933910527976399716233878128567898471909935858344276303398358550439063367889148170592899835230545418625010659137847024746276720997203350202589689168802972107835831274147 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 01768090a806cdc6862e03f19e31b7f633227973 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.vpn.bakerhughes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg-sg3-f10.ent.bhicorp.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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