sipfed.kpmg.com

- KPMG International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6d:3d:1f:84:21:22:bc:95:00:00:00:00:50:f2:e3:75 was issued on by Entrust, Inc..

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KPMG International

Organization: KPMG International
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:3d:1f:84:21:22:bc:95:00:00:00:00:50:f2:e3:75
Serial Number (int): 145203220871996619071965965696470541173
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 48:39:2d:77:e9:ad:5e:5c:b2:ab:a1:4a:45:5c:f9:84:33:c2:70:61
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b5:b6:50:84:85:31:cf:e1:a0:d2:95:73:00:1b:e9:d4:83:50:d8:a7
Fingerprint (sha256): 3f:99:a9:69:53:bf:3f:88:58:b9:61:f1:aa:40:50:42:0d:68:ca:43:b2:b0:de:ed:bc:e7:3a:a7:d8:1f:53:69

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sipfed.kpmg.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sipfed.kpmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sipfed.kpmg.com
sipfed-ema2.kpmg.com
sipfed-ema3.kpmg.com
sipfed.kpmg.ca
sipfed.kpmg.co.th
sipfed.kpmg.co.tt
sipfed.kpmg.com.ar
sipfed.kpmg.com.bs
sipfed.kpmg.com.jm
sipfed.kpmg.com.kh
sipfed.kpmg.com.mt
sipfed.kpmg.com.mx
sipfed.kpmg.com.my
sipfed.kpmg.fi
sipfed.kpmg.gr
sipfed.kpmg.hu
sipfed.kpmg.is
sipfed.kpmg.pl
sipfed.kpmg.se
sipfed.kpmg.vc
sipfed.kpmg.vg
sipfed.kpmg.co.id
sipfed.kpmg.co.im
sipfed.kpmg.com.cy
sipfed.kpmg.com.sg
sipfed.kpmg.com.vn
sipfed.kpmg.es
sipfed.kpmg.gi
sipfed.kpmg.ky
sipfed.kpmg.si
sipfed.kpmg.sk
sipfed.advaitalegal.com
sipfed.bsraffiliates.com
sipfed.jp.kpmg.com
sipfed.kpmg.ag
sipfed.kpmg.at
sipfed.kpmg.az
sipfed.kpmg.bb
sipfed.kpmg.bm
sipfed.kpmg.bw
sipfed.kpmg.cm
sipfed.kpmg.co.am
sipfed.kpmg.co.nz
sipfed.kpmg.co.sz
sipfed.kpmg.co.tz
sipfed.kpmg.co.za
sipfed.kpmg.com.au
sipfed.kpmg.com.br
sipfed.kpmg.com.cn
sipfed.kpmg.com.tw
sipfed.kpmg.fr
sipfed.kpmg.ie
sipfed.kpmg.kg
sipfed.kpmg.kz
sipfed.kpmg.lu
sipfed.kpmg.mu
sipfed.kpmg.nl
sipfed.kpmg.sn
sipfed.kpmg.tc
sipfed.kpmg.ua
sipfed.ust-kpmg.com
sipfed.staging.kpmg.ca
sipfed.ng.kpmg.com
sipfed.kr.kpmg.com

Other certificates including the domain name kpmg.com

(limited to 100 certificates)
accounts.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com

Certificate

The complete raw certificate details for sipfed.kpmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSsiucaYesjXxNDnC+q7
z9rm+yvpTKW0IngqtIyHAo09bgdSu2Jxvlm6ryl8cu7lSGapJN47+6HEwLzt8u9w
SJpDwMl4Q8ijlx21P3d4Au8FZ8EKURwTr57SgLevqWWZ8FjaZlBNaGqkdJckiRtk
atdegCJN4ltKR5pBmiwyfZv0ZpAHzMsZ95oa4Gj6D4yqc5eDvqTbnHOXpwdU0SjZ
6tjqgHbRM3FziU5qK9TAqxanId8g0g7Y4N+YKE7lUODbmwAdnTNwx7LsokhV6dzJ
POvodNN4vGyyx9VR8dzk13UQSyUj8pQNzur3qCnpsTjdjGD7oX8uG4VIHQNsODdh
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145203220871996619071965965696470541173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 07:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 08:08:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sipfed.kpmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24385263838870439198461458599450846298065082033385885230016709259786655955799316679542482934330242525552453950010713618995492782542413324816374165276402983049034227156552369698742569962863810249410921034885959086564866413654860499718403997446707139492903777763298746085509572971580123787952714419529209407639827208891830246132027889552388292637732046716009716423531798799660483421637027003982451002619403298303008297524975950989896363646165478334323700498403173346906993166495985862671393110035821528093433113923079258779991114202572892454520847695298333130503306933157593116371372992911730307396476131508794277978451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed-ema2.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed-ema3.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.tt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.jm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.gi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.advaitalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.bsraffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.jp.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.sz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.kg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.ust-kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.staging.kpmg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.ng.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kr.kpmg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48392d77e9ad5e5cb2aba14a455cf98433c27061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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