mhmp.bruker.com

- Bruker Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 12:18:28:7f:d3:6b:71:8a:a7:37:38:54:96:e5:8b:92 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bruker Corporation

Organization: Bruker Corporation
Organization unit: Authorized by United SSL
Organization unit: InstantSSL
Address: Manning Park
Postal code: 01821
State / Province: MA
Locality: Billerica
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 12:18:28:7f:d3:6b:71:8a:a7:37:38:54:96:e5:8b:92
Serial Number (int): 24051540472525335273856073795543337874
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 2c:c0:dd:25:a4:8a:d2:0d:89:91:33:17:28:fb:6a:1c:ad:88:c2:f2
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d5:0b:fd:a8:5b:52:c3:6c:86:fa:b8:4b:64:0e:a6:b5:0f:de:d6:f3
Fingerprint (sha256): 44:0b:a2:94:b9:f2:57:6f:d6:1d:a8:87:78:fa:04:15:3d:c3:6b:56:d5:30:38:46:a5:e0:68:0b:4f:68:ec:77

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate mhmp.bruker.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mhmp.bruker.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mhmp.bruker.com
www.mhmp.bruker.com

Other certificates including the domain name bruker.com

(limited to 100 certificates)
bruker.com
*.autodiagnose.bruker.com
bruker.com
*.adiag-qa.bruker.com
mbna.bruker.com
licensecentral-bdal.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
store-stage.bruker.com
www.bruker.com
mbns.bruker.com
*.bruker.com
cibrubwp07.bruker.com
www.bruker.com
*.bruker.com
*.adiag-dev.bruker.com
www.bruker.com
*.bruker.com
guestportal.bruker.com
sso.bruker.com
bruker.com
licensecentral-bbio.bruker.com
mbna.bruker.com
mc.bruker.com
*.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
webmail.bruker.com
mbna.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
monitoring-mrs.bruker.com
fileshare-nano.bruker.com
mbns.bruker.com
knoluvit.adiag-dev.bruker.com
monitoring-mrs.bruker.com
www.bruker.com
licensecentral-bopt.bruker.com
mhmp.bruker.com
*.autodiagnose.bruker.com
*.adiag-dev.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
bruker.com
login.bruker.com
*.autodiagnose.bruker.com
ok.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
ok.bruker.com
*.bruker.com
cibrubwp07.bruker.com
bruker.com
mc.bruker.com
guestportal-01-emea.bruker.com
monitoring-mrs.bruker.com
ibcm.bruker.com
licensecentral-bbio.bruker.com
fileshare-nano.bruker.com
fileshare-nano.bruker.com
*.adiag-qa.bruker.com
fileshare-nano.bruker.com
bruker.com
www.bruker.com
repo-bbio.bruker.com
mc.bruker.com
opticsblog.bruker.com
bruker.com
*.bruker.com
www.opticsblog.bruker.com
fileshare-nano.bruker.com
*.bruker.com
bruker.com
guestportal-02-emea.bruker.com
www.opticsblog.bruker.com
www.opticsblog.bruker.com
www.bruker.com
licensecentral-baxs.bruker.com
cibrubwq05.bruker.com
login.bruker.com
login.bruker.com
cibrubwp07.bruker.com
licensecentral-baxs.bruker.com
*.bruker.com
mc.bruker.com
fileshare-nano.bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
fileshare-calid.bruker.com
mhmp.bruker.com
autodiscover.bruker-nano.com
cibrubwp07.bruker.com
fileshare-calid.bruker.com
www.bruker.com
fileshare-calid.bruker.com

Certificate

The complete raw certificate details for mhmp.bruker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA04uey8c4j2AypO3VSWnk
JDfQI3zOI60jcyKqyumEQElfQ/OPILtc8i8dwOILQAxv0mHUKK57CuZOuD5Y4Gri
fW14DvAfCoW6cFRYt7zFva17d9a6WpXipvQPJAHvIcg8w0StHKmfCwDiVBVrwOR2
KbcTFNaHqXiCOQHeIwhKa0rPTjnbkSR3Nzg3RLGArGy2NjaK82OG9Mm411vcESVU
fTPCVWMwFS85jVqoz8qj3YFYNQruQSzrOKq1ArmCYx4j9NUCBrZc73IqZv9VplT5
pCqbY0oNTQ9Nq0BoNalr3yjc1jJ03iCc1xIa5Edyjd2Dvs3joVsMzPXCVJzLve5N
8ZlXuQkbT9IEB4pd7WV9r0G0zBykmklf3VL3RxqiCVsyI0EWGvdMIzVXqaHjN9/B
nQ/hN58vANtvLtk0kbDfuUlNKnMn8cAbZju1D3BOONphujc55tD7abJQwjddkty8
hfifoz1kWjamzCFTgUiTtYuqu5H3fh/NUaUlXMrBd41cQbc924NaXRFyHNsH/PX3
F1c2JDBIEQK1wHqdjkQDrBePUeSg/gW4y1TiUP0TZ//bth/ToIwU5GFh8L0Jf6rZ
i9FIBGOCFI7mqN318nm9mXOHrPuN7sQ1/z8W/8wrj9CG1wbs0EGzqgTkK6cLhGvx
Jn4u6JkqyV9wOV5gI9yGrIECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24051540472525335273856073795543337874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01821'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Billerica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manning Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruker Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Authorized by United SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mhmp.bruker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863029902711850997013647142716751155901787356300109316685155614044925460775158441169971560391725517265434098141556637652838303644961434998916988149195850693783116971335259647493090707321191636334789321021546382812819877136334683112641794917813036538147212263774211650670337797288647458373936593575413101090532831035868568137209599337268960793339068126396603582331423985597835713610339139395565781449841358412066985151984703975831785907781237489504785372200601066679704446157149642748097396774033180592535831671498009453588066561669107253062596974849405716601400205315567612262963164727020628537673308201077845888752239660703152418722461646407655765027461920893402505276428979238123559658020516063330038672599948398886239244775015975838137073425391368002210568042718123725585621416187530631906093147851711652760874929237560897716844061046375089063855102639337707355808247354523976954888743329850345127595649821685458206241646300715900194383263060018774176582546338444427562870570431044862313874140559375569228258644490258844618168061952652491390258902017971204522557106519640298307252400247709950899393813833276981865790692867616112520479110741562860454876187140846510251425301016197384572576182182767107488852965664066903172312378497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cc0dd25a48ad20d8991331728fb6a1cad88c2f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhmp.bruker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhmp.bruker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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