holq176.ea.holcim.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b3:eb:1f:25:32:19:e5:33:df:fd:9f:26:6e:6a:ea:4d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=holq176.ea.holcim.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): b3:eb:1f:25:32:19:e5:33:df:fd:9f:26:6e:6a:ea:4d
Serial Number (int): 239152632708900907987456139453988006477
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c5:df:e7:49:a5:47:da:83:6a:fe:f8:03:d8:03:6f:a8:f4:30:03:a6
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): da:ec:67:e5:72:05:8f:5e:8b:c0:a6:50:a0:f9:69:e9:6f:5f:be:d2
Fingerprint (sha256): 59:80:7e:1b:1b:ba:88:af:f5:97:cb:22:86:7d:e0:f5:be:bb:89:25:ad:ec:f7:ff:8f:fb:9e:d0:5d:b4:19:3a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate holq176.ea.holcim.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holq176.ea.holcim.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holq176.ea.holcim.net
www.holq176.ea.holcim.net

Other certificates including the domain name holcim.net

(limited to 100 certificates)
corporate-ise2.hgrs.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net

Certificate

The complete raw certificate details for holq176.ea.holcim.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHTzCCBjegAwIBAgIRALPrHyUyGeUz3/2fJm5q6k0wDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yNDA2MTMwMDAwMDBaFw0yNTA3MDUyMzU5NTlaMCAxHjAcBgNVBAMTFWhv
bHExNzYuZWEuaG9sY2ltLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKoz7aDFZ6CuuuicI0ZqYNAdM6Onv0lSUdrqkRo40TYtas3NeEL/RLSicMeF
brE6ncKUXPO29Hqzk2yzLmCgD4VrEv4myra1GeRdsaMHVBgWYNQ6CrcN4FJlYsBZ
kZCByb0b+Hjy8asJtZpkQNpEusmDGeeNvCgeV7p/YmMRuQ3HHR++mW4ez21QCiM0
5h/qdd39NgdljIpDVwnZqXz6+eT1Q+gdN5s62VssO5b2ppX9mhjQRESpFdOgfbCJ
curOFudqBWPSyaESZ/fEpU3yPmwmwWMwSvrvYcWGCn+Bm8SgrMCoTOkTUoFp5HTj
zfw9YNoh5BJ0r992s9heoMUYihOQNaY09XJljK/G63yhMwFpybrPIBEYPQxSOreD
RukzvRfUWROzAMDfVQS2W5CxbkyU/LDu/9A3/rqa2s/s7fnnXWBqromyakWr+o8L
vpldM3cP1I8JjmPHkllqCBNVNvOmiYeQ8kszMeAak1e7B3jfvACG4dPaAVGzy4V5
uTZpqMBD5tQWrvYcEg6jPED6aLig2W/Pg5cpQMEOemhMFm4KFAH5nuXI4CLaY++1
GAXrLTUeDc7vn8+Z9IKi6F26SY85mGPTNrbjrIdQj8t7QAqOl6qP99+Pp5IjA8Zs
jAsoa4ZoUDMhg6/UpluSdpijN85SM9QxYOsjho33UUEG1lePAgMBAAGjggMSMIID
DjAfBgNVHSMEGDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUxd/n
SaVH2oNq/vgD2ANvqPQwA6YwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYB
BAGyMQECAgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMw
CAYGZ4EMAQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9j
cnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVT
ZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29t
MDsGA1UdEQQ0MDKCFWhvbHExNzYuZWEuaG9sY2ltLm5ldIIZd3d3LmhvbHExNzYu
ZWEuaG9sY2ltLm5ldDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA3dzKNJXX
4RYF55Uy+sef+D0cUN/bADoUEnYKLKy7yCoAAAGQEO4YkwAABAMASDBGAiEAvcj/
1QCceZzsa0L35XBdQYpxNjuHb3SYrXaTCGHkyLQCIQDTpTHs5/chGaiZuctJqjGu
UkfRx9hWFlgKqITRZN8oVQB2AA3h8jAr0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+
Tqo0AAABkBDuGHgAAAQDAEcwRQIhAPyrcbzCuX4rnz0WJZRkjVYDo79RgZpJ1ZFg
Wx+S6IDHAiBgOa1Cver2BezFpJ1wE3E0yOnYdeK+LDKG8iibLLkzYgB1ABLxTjS9
U3JMhAYZw48/ehP457Vih4icbTAFhOvlhiY6AAABkBDuGHQAAAQDAEYwRAIgDTHh
J1IhYGyHaT0JzZSZeES5yJKxqZlZI+6cWkhParcCICDEf/3QWu8XTthiF+8S7uQi
9UZdMMhCDsKAEa7/cshnMA0GCSqGSIb3DQEBCwUAA4IBAQApF7cT7E+833q5BBsV
WuIs/vNOKQpIsWvUMwd5x0dMIJ68d7MldjqRi5qW7GTpvPWkEyZeaEfqHckbJwZ7
TEr+BtcrcM9rrxZn1ovUMfOwjYi1djemrXIsueS+YHH0Dg1bqUjlRiszh8X6tCk/
CVThZFJTkVD0w+UaVfYpKrUkP9YRoI3dhy9b3NUgKe0kSJRrCnKFGjXM03NKlBxD
04Ow7ou1bV9ORc1uRvllOH20sSYb0aVHY7f/Q9eAJIQvnO68tViY5jQJk6tgaK35
LsVOSx+gVxGBfaTiPC3Gl4aRqSTv4aKE69TNxgHFSQXv3eOa1qRMA2ogBMgy3qLl
sIak
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239152632708900907987456139453988006477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holq176.ea.holcim.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694367025600626590291568765975625668307929692832640452810074858951860208933619571369670254422974602176411423712281396344018770487340503951359414479409300025627235643347694910755989420182712532132743065090130684484222097995826538158520978762876981904785112220334330738790797430770159226567689407421162645882657073203479498815285157476777678483021619898538188213997039184858354396984562353350925929044778722796493321731000699129673169183419801407342978801389311399411142357409793543687696317406291054162485481055473112423353265567743521879693544480277769569028453982702974141078185409740043912088494684127792404476742692886473883894010465927548841531866494813293285603160775830275164687598304393001652470435519404194783336301311469688153245485224174947082308064558196564909216489904529677846480720646585505529617277018113489645279625775622273564797730739065672734903594131938043068240862302425681952228472657762191277501683842973550582075990479884967540264536432142728495594617522897238637016567622250066836145336640790804587932596117208992501780751675097780783236636028723022926392416354602938885357764811311845232309365569517288516003233249794726836793806870350980082107151166401113194957608502290796695276778309350659586903523088271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5dfe749a547da836afef803d8036fa8f43003a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holq176.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holq176.ea.holcim.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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