integrity.lafargeholcim.com
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 36:a1:bb:a3:b3:84:a1:f3:ab:da:db:eb:d7:b2:3b:fb was issued on by COMODO CA Limited.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=integrity.lafargeholcim.com,OU=Domain Control Validated+OU=PositiveSSL Multi-Domain
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 36:a1:bb:a3:b3:84:a1:f3:ab:da:db:eb:d7:b2:3b:fbSerial Number (int): 72618077346954096834611199256286084091
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: f5:09:d9:d1:b7:2b:bf:d9:7a:87:87:63:77:99:38:74:69:24:de:b1
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): 3e:d5:62:9a:3e:6e:a4:23:53:e3:48:a9:71:97:8c:e6:80:01:47:5d
Fingerprint (sha256): 4b:f4:24:a0:5f:e2:53:1c:bc:69:e5:36:5d:99:95:77:ea:13:64:67:56:5f:73:30:d1:ad:aa:79:c1:84:94:48
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate integrity.lafargeholcim.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for integrity.lafargeholcim.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
integrity.lafargeholcim.com
holcim.integrityplatform.org
integrityline.holcim.com
holcim.integrityplatform.org
integrityline.holcim.com
Other certificates including the domain name lafargeholcim.com
(limited to 100 certificates)
indwebiz.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
Certificate
The complete raw certificate details for integrity.lafargeholcim.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIQNqG7o7OEofOr2tvr17I7+zANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xODA3MDkwMDAwMDBaFw0yMDA3MDgyMzU5NTlaMGwxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEhMB8GA1UECxMYUG9zaXRpdmVTU0wgTXVs dGktRG9tYWluMSQwIgYDVQQDExtpbnRlZ3JpdHkubGFmYXJnZWhvbGNpbS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpxL9Fqdhke8C6xVJjNWq EkT7u2kiwjS/EDatTCNap6hnD4WtQZOqI/BK232avTwYZKyHCM3Qt7qD/D1ZiCXq Y73GSHPmABqwPMN7oolK2ofw4ZYzNo6uU+w2dM/A6igG4986in9HJHSLuJLlyS3o 9Eh2ztQH3tSVnNXX5XVqgFiaRNckHLV5WwxMfpEgCf1dndBCXe6lHkBYbzr0scyS u1RaYk5rMH+NhOKd4UGuk4Kz9h3CQ7WEN2vSfs2iDQ3a9EIU0QDQRHpMT5875w4X kiO6yurEwJ6dzHyaE01IXMDgxRJWjlJ9x2fBy6CIA/ciNwzzPeI0bso1V996oEYZ AgMBAAGjggOQMIIDjDAfBgNVHSMEGDAWgBSQr2o6lFoL2JDqElZz30O0Oija5zAd BgNVHQ4EFgQU9QnZ0bcrv9l6h4djd5k4dGkk3rEwDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1Ud IARIMEYwOgYLKwYBBAGyMQECAgcwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1 cmUuY29tb2RvLmNvbS9DUFMwCAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0 dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25T ZWN1cmVTZXJ2ZXJDQS5jcmwwgYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZD aHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlv blNlY3VyZVNlcnZlckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29t b2RvY2EuY29tMF4GA1UdEQRXMFWCG2ludGVncml0eS5sYWZhcmdlaG9sY2ltLmNv bYIcaG9sY2ltLmludGVncml0eXBsYXRmb3JtLm9yZ4IYaW50ZWdyaXR5bGluZS5o b2xjaW0uY29tMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDuS723dc5guuFC aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWR+WpV6AAAEAwBGMEQCIC4rxZqpAP3K M1TFTkVjEnNwHZ2lpFQqK6yVAAuYQMwtAiBR8X/+IUh4dXFPVLrd1+QOiHBHxRyo UQ/rmIvnNu85OwB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB ZH5alcAAAAQDAEcwRQIgSCdE/SguYNlqQLtHYW95Ijbte8U1DNRzlKKeapDXcRcC IQDdBpEgVRyjA54Oq8lzu9O57apiSIOLvNW2UWeHQw9hcwB1AFWB1MIWkDYBSuoL m1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZH5alZkAAAQDAEYwRAIgGfvHDT1vwZZH QMud7AzZLlcB1wnncstSoEN+vuu6v98CIFDPuKrO3PmpgHLRa6CIM9UYcBUXP+MH r2Zu5i/TOa0GMA0GCSqGSIb3DQEBCwUAA4IBAQB55tTUf0e7dApcznu0O6B2hRbq VaW7QvsTz7tH2gwydavOBGdpZsoBTJQjUnrZnMS3S5ycCDqzk74ASBBswrYNvc0i rqzWky5fQMS1i/MDYqTtUWuNW3a2ubY0AxUdHHSQazCJ7f8+Q28bRNE6qWjjLek1 hMEa1zojGwf+LZJW+7FzzZJfk5bu5MBGtEvq0g5Ty65G9A3mBkIZKwibPl6oReIH IX2Akx2XKgksnvixtGGuamSpz3bzzYil0Xogz0jg/7FiQ0otkaONO6rQpy2F4j1D w+8dY/2Rqe1WeoCYzjqDS+7Pq13qUmn2MokYncXd4XQbl5McMHRwsg4XM2Ro -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzacS/RanYZHvAusVSYzV qhJE+7tpIsI0vxA2rUwjWqeoZw+FrUGTqiPwStt9mr08GGSshwjN0Le6g/w9WYgl 6mO9xkhz5gAasDzDe6KJStqH8OGWMzaOrlPsNnTPwOooBuPfOop/RyR0i7iS5ckt 6PRIds7UB97UlZzV1+V1aoBYmkTXJBy1eVsMTH6RIAn9XZ3QQl3upR5AWG869LHM krtUWmJOazB/jYTineFBrpOCs/YdwkO1hDdr0n7Nog0N2vRCFNEA0ER6TE+fO+cO F5IjusrqxMCencx8mhNNSFzA4MUSVo5SfcdnwcugiAP3IjcM8z3iNG7KNVffeqBG GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 72618077346954096834611199256286084091 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'integrity.lafargeholcim.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25961239864019571253049513289275425105383802693029744362206728834925661132982005260291879075287085732349213702719004105040078671499444075376180808180568848473369636239431060448741375876163767044164911999401100304086745483569318456445974260981407314439382232455080856828372949454184060558424806293712856020023131670060471474800551823023542671126416825073437839429718222501104861193489965828235154123672050856575141000105071880147378037748099677039063073864511828472959656935430285460599948784696934181985287592193703367787033517182149375515843466874735600827870221716941515042969214178376388059640203700321593805784601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f509d9d1b72bbfd97a878763779938746924deb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrity.lafargeholcim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holcim.integrityplatform.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrityline.holcim.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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