vhsigdi1ci.sap.jewels.com
- Signet Group Services US Inc -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 6f:10:e7:ac:44:bd:06:bc:bb:74:2f:96:b5:88:d0:51 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Signet Group Services US Inc
Organization:
Signet Group Services US Inc
State / Province:
Ohio
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 6f:10:e7:ac:44:bd:06:bc:bb:74:2f:96:b5:88:d0:51Serial Number (int): 147632083166998114587165955706292064337
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: e2:2a:c4:17:a2:c2:ed:39:8a:38:56:e2:67:de:64:f0:48:f9:80:c7
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 4d:0b:cc:af:c4:ae:ff:9b:a6:14:e0:7e:ff:47:3e:cf:f3:a8:c8:08
Fingerprint (sha256): 68:c2:f9:6a:0e:60:08:50:eb:2d:37:7e:22:da:16:dc:d1:01:b2:0e:54:e5:c9:6b:6e:1f:f7:3c:fa:c4:0f:49
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate vhsigdi1ci.sap.jewels.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vhsigdi1ci.sap.jewels.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vhsigdi1ci.sap.jewels.com
www.vhsigdi1ci.sap.jewels.com
www.vhsigdi1ci.sap.jewels.com
Other certificates including the domain name jewels.com
(limited to 100 certificates)
qlqw10app00.jewels.com
srsprod.jewels.com
imperva.com
rmm.test.cloud.jewels.com
signet-identity-provider-test.jewels.com
plcosatadm01.jewels.com
credithub-test.azusnc-test.jewels.com
workordersapi-dev.jewels.com
sapbpcuxp.jewels.com
gp-akr.jewels.com
uluf20app00.jewels.com
skuserviceapi.dev.cloud.jewels.com
sigctbanner.jewels.com
signet-cltin-prod-informatica-alb.cltin.cloud.jewels.com
sapfinance.jewels.com
*.jewels.com
jira.jewels.com
dldf10app00.jewels.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
web01-sigcapdev.jewels.com
archiva.jewels.com
vpn.jewels.com
skuserviceapi.dev.cloud.jewels.com
plpb20app00.jewels.com
guest.jewels.com
PWAKSEPAPP01.jewels.com
credpmtcalc-dev.jewels.com
srsprod.jewels.com
credpmtcalc-dev.jewels.com
cc.stage.cloud.jewels.com
signethierarchyprovider.jewels.com
skuserviceapi.dev.cloud.jewels.com
worswebdev.jewels.com
vhsigdi1ci.sap.jewels.com
dldw10app00.jewels.com
worswebuat.jewels.com
srsvendorportal.jewels.com
perf-creditapis.jewels.com
vhsigdi1ci.sap.jewels.com
signet-identity-provider-prod.jewels.com
data.jewels.com
mypc.jewels.com
*.jewels.com
PWAKSEPAPP01.jewels.com
api4.jewels.com
vhsigdi1ci.sap.jewels.com
xconnect.jewels.com
dwakivrweb01.jewels.com
skuserviceapi.dev.cloud.jewels.com
workordersapi.jewels.com
vpn.jewels.com
worsweb.jewels.com
uluw20app01.jewels.com
sappouxp.jewels.com
kay.ercol.test.cloud.jewels.com
uk-alt.ecesb.test.cloud.jewels.com
test.sslvpn.jewels.com
credpmtcalc-prod.jewels.com
sjim-asa-vpn.jewels.com
signet-cltin-dev-inform-int-alb.cltin.dev.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
fed01.jewels.com
creditapis.jewels.com
CAR-C1-ISE-1.jewels.com
pacoclearpass01.jewels.com
credithub-test.azusnc-test.jewels.com
api4dev.zalecorp.com
xconnect.jewels.com
dlde10app00.jewels.com
www.kay.com
posapigateway-perf.jewels.com
dlde10app00.jewels.com
edu-sams-interface.store-ops.cloud.jewels.com
saps4huxp.jewels.com
plpf20app00.jewels.com
sjim-asa-vpn.jewels.com
stage-repair.jewels.com
credithub-dev.azusnc-test.jewels.com
vpn.jewels.com
PWAKRPAAPP01.jewels.com
rhesprodsat02.jewels.com
signetquota.cloud.jewels.com
cpayprod.jewels.com
uk-queue.ecesb.stage.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
www.kay.com
qlqw20app00.jewels.com
signetanalyticsservice.jewels.com
test.sslvpn.zalecorp.com
pwakslwnapp01.jewels.com
sma.jewels.com
skuserviceapi.dev.cloud.jewels.com
signetwarrantyapp.jewels.com
cc.dev.cloud.jewels.com
sigctbanner.jewels.com
cc.test.cloud.jewels.com
pwakivrweb02.jewels.com
travelevents-dev.jewels.com
vhsigdi1ci.sap.jewels.com
srsprod.jewels.com
imperva.com
rmm.test.cloud.jewels.com
signet-identity-provider-test.jewels.com
plcosatadm01.jewels.com
credithub-test.azusnc-test.jewels.com
workordersapi-dev.jewels.com
sapbpcuxp.jewels.com
gp-akr.jewels.com
uluf20app00.jewels.com
skuserviceapi.dev.cloud.jewels.com
sigctbanner.jewels.com
signet-cltin-prod-informatica-alb.cltin.cloud.jewels.com
sapfinance.jewels.com
*.jewels.com
jira.jewels.com
dldf10app00.jewels.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
web01-sigcapdev.jewels.com
archiva.jewels.com
vpn.jewels.com
skuserviceapi.dev.cloud.jewels.com
plpb20app00.jewels.com
guest.jewels.com
PWAKSEPAPP01.jewels.com
credpmtcalc-dev.jewels.com
srsprod.jewels.com
credpmtcalc-dev.jewels.com
cc.stage.cloud.jewels.com
signethierarchyprovider.jewels.com
skuserviceapi.dev.cloud.jewels.com
worswebdev.jewels.com
vhsigdi1ci.sap.jewels.com
dldw10app00.jewels.com
worswebuat.jewels.com
srsvendorportal.jewels.com
perf-creditapis.jewels.com
vhsigdi1ci.sap.jewels.com
signet-identity-provider-prod.jewels.com
data.jewels.com
mypc.jewels.com
*.jewels.com
PWAKSEPAPP01.jewels.com
api4.jewels.com
vhsigdi1ci.sap.jewels.com
xconnect.jewels.com
dwakivrweb01.jewels.com
skuserviceapi.dev.cloud.jewels.com
workordersapi.jewels.com
vpn.jewels.com
worsweb.jewels.com
uluw20app01.jewels.com
sappouxp.jewels.com
kay.ercol.test.cloud.jewels.com
uk-alt.ecesb.test.cloud.jewels.com
test.sslvpn.jewels.com
credpmtcalc-prod.jewels.com
sjim-asa-vpn.jewels.com
signet-cltin-dev-inform-int-alb.cltin.dev.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
fed01.jewels.com
creditapis.jewels.com
CAR-C1-ISE-1.jewels.com
pacoclearpass01.jewels.com
credithub-test.azusnc-test.jewels.com
api4dev.zalecorp.com
xconnect.jewels.com
dlde10app00.jewels.com
www.kay.com
posapigateway-perf.jewels.com
dlde10app00.jewels.com
edu-sams-interface.store-ops.cloud.jewels.com
saps4huxp.jewels.com
plpf20app00.jewels.com
sjim-asa-vpn.jewels.com
stage-repair.jewels.com
credithub-dev.azusnc-test.jewels.com
vpn.jewels.com
PWAKRPAAPP01.jewels.com
rhesprodsat02.jewels.com
signetquota.cloud.jewels.com
cpayprod.jewels.com
uk-queue.ecesb.stage.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
www.kay.com
qlqw20app00.jewels.com
signetanalyticsservice.jewels.com
test.sslvpn.zalecorp.com
pwakslwnapp01.jewels.com
sma.jewels.com
skuserviceapi.dev.cloud.jewels.com
signetwarrantyapp.jewels.com
cc.dev.cloud.jewels.com
sigctbanner.jewels.com
cc.test.cloud.jewels.com
pwakivrweb02.jewels.com
travelevents-dev.jewels.com
vhsigdi1ci.sap.jewels.com
Certificate
The complete raw certificate details for vhsigdi1ci.sap.jewels.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIICDCCBvCgAwIBAgIQbxDnrES9Bry7dC+WtYjQUTANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIzMTIxMTAwMDAwMFoXDTI1MDEwOTIzNTk1OVowZzELMAkGA1UE BhMCVVMxDTALBgNVBAgTBE9oaW8xJTAjBgNVBAoTHFNpZ25ldCBHcm91cCBTZXJ2 aWNlcyBVUyBJbmMxIjAgBgNVBAMTGXZoc2lnZGkxY2kuc2FwLmpld2Vscy5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCRyOzi4/oYDT/K5jpR7ZWb THg4dFYoTVR7hVyl0hlEjWfVzwVaV5Obwvz17UQ7FNFIKdQq4o/EcvEFoDO+Xfgy MPTnxEYZzZNoILCvkE1pWhDRS4QKOxxF7/0aXrqSq/NnQOWmmXVnCQlaTo0D76mP vItlxO5fJTUjXR3OUMnnnOwvnjyuyX616j1yiBibaMHKN+H++qYWzBjTvFkBfFts r6T66diQWFX6IvYJ8DlEQ2n9OI6db/1jwkCVe35KXV+97GhPrwj1Km9WozMy+ewu dmnyfDHUNAZBtG12CXELih4llatED+z23NN3bcZk7elAgp/jBKCy8y5QGhPYpvcL /tAIAGo20K2jdtjGh9WIN9y6+OPZfjDy2T3cSzp6KeNMoj9GE2xMen7T95USXlPx Y8cTlqS0RX2L6lzN/encNJAMCj8Kk9NPESMNf20ZmPBb+nz5nRfKfdODLnqMADpF cwF/hOVANA84wmtZKU2/dNQANqjmKRie8UqsDEO9sveRvvL4NZyauz5lMzwuMtFM 0fJkn+KWaqOqIHN9v1180mRdKdWErGPq0ZDYHKMlHOhxB1cp6C/HSxkSLHjL3/9q ablz0CxZH5ADeF7yXi1Yx7Z3ph6PfU2NHDKINyWpIWxo5YoTNgd+YrSPDCWRozVo gEDwSgcrPpAXK+Txws1BXQIDAQABo4IDfzCCA3swHwYDVR0jBBgwFoAUF9nWJSdn +THCSUPZMDZEjGypT+swHQYDVR0OBBYEFOIqxBeiwu05ijhW4mfeZPBI+YDHMA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEBAgEDBDAlMCMGCCsGAQUF BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0fBFMw UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5p emF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBigYIKwYBBQUHAQEE fjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29S U0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsG AQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTBDBgNVHREEPDA6ghl2aHNp Z2RpMWNpLnNhcC5qZXdlbHMuY29tgh13d3cudmhzaWdkaTFjaS5zYXAuamV3ZWxz LmNvbTCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAzxFW7tUufK/zh1vZaS6b 6RpxZ0qwF+ysAdJbd87MOwgAAAGMWruuEwAABAMASDBGAiEA32jGLFIGAoqtPTA0 5S86z/jRw/0DtdcnZ7NAPeqkFf8CIQD+0o0USBE33dF0Np3S1xFEvfTv5Fg7T1Px ZC3w2cwu3AB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjFq7 rp4AAAQDAEcwRQIgcBuiIjhCiptbgFmwwz/s8QtYpeNOuDUEL4KWbeu5eb0CIQC9 U9YS5aHvzX/0EZXlTcFY47NlT4+b6aqmDhuLDjDIRwB3AE51oydcmhDDOFts1N8/ Uusd8OCOG41pwLH6ZLFimjnfAAABjFq7re0AAAQDAEgwRgIhAOqslA9v/p8oGBxt QsBUvruUSqunA7wGGOqvAH4rwZ3aAiEA+PE6IZgjmfzSaENiqIfvuwtF0qJ/jqQT h9GfUuNRFWcwDQYJKoZIhvcNAQELBQADggEBAC2sBRC5Y9iGRf6v91CEWzeOse7i 0V6XGRPrOYBijnjfHYvO96/DVMySOueddmRXQp5aGdsQSBl4+OQr3q0xnY96HgYQ 2byQAA4jcGqq8aOARJf67WA9pf0UHmF4RugcjxefPOck+IrmfPn+R2KqYPgPFQbM v8EwqUEFhsasgTO+8T4fngw9TJlWdC2Tvn85zc63uJbaXKI3Jppa7DEciIvl2moX Mtk2u8zMK/ZpTMmQ7i0mJ/p0Xl2WTx2vOu7QI+ZNDdMYP4C4HdbDzUEzRa8o6zC3 myA/VbSbSvOxm86yE4ORGwNMT5vxw5OUOfFHv4mDzvxb4fUoO6uElLrda50= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkcjs4uP6GA0/yuY6Ue2V m0x4OHRWKE1Ue4VcpdIZRI1n1c8FWleTm8L89e1EOxTRSCnUKuKPxHLxBaAzvl34 MjD058RGGc2TaCCwr5BNaVoQ0UuECjscRe/9Gl66kqvzZ0Dlppl1ZwkJWk6NA++p j7yLZcTuXyU1I10dzlDJ55zsL548rsl+teo9cogYm2jByjfh/vqmFswY07xZAXxb bK+k+unYkFhV+iL2CfA5RENp/TiOnW/9Y8JAlXt+Sl1fvexoT68I9SpvVqMzMvns LnZp8nwx1DQGQbRtdglxC4oeJZWrRA/s9tzTd23GZO3pQIKf4wSgsvMuUBoT2Kb3 C/7QCABqNtCto3bYxofViDfcuvjj2X4w8tk93Es6einjTKI/RhNsTHp+0/eVEl5T 8WPHE5aktEV9i+pczf3p3DSQDAo/CpPTTxEjDX9tGZjwW/p8+Z0Xyn3Tgy56jAA6 RXMBf4TlQDQPOMJrWSlNv3TUADao5ikYnvFKrAxDvbL3kb7y+DWcmrs+ZTM8LjLR TNHyZJ/ilmqjqiBzfb9dfNJkXSnVhKxj6tGQ2ByjJRzocQdXKegvx0sZEix4y9// amm5c9AsWR+QA3he8l4tWMe2d6Yej31NjRwyiDclqSFsaOWKEzYHfmK0jwwlkaM1 aIBA8EoHKz6QFyvk8cLNQV0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147632083166998114587165955706292064337 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Signet Group Services US Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vhsigdi1ci.sap.jewels.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594750358064137948593263433145454954108072420160811147671855083346658631675942763794063684146601740205372200791269165911868133885199796368893939532297362687813687784675604922172498818346715500412710477845771251467639629972441687079829711639168012207597436642859989674122028063842249666608486193804907914811449693668869464470700155496178776837181260344300449867344834129728603333694466408893416556194381071223299193073540101463383874989638936605235974649589965195494283247054464286146067439512735430625700162630693881343953195369851631529747178705474150031516059682355981252184989140909467037254063439820204099542144899926198703507504384193265924511282340609132545494894277181603722328485817030163755425498530608673974265212885757889451997876709987076046676449812788758548978735885461608844422197503916555837156608811655103065554365792700226561209949388842540929858918788953663567883190523327711733856242756085567636599485248511120086719138086896712662937373222298133482671025463006702832600697992568066915639655290893639736308384486336239971981166715539348479086542866438515454182572382194893914967845614894674844512739697634466094599044654844511864651046826908637484411726157437079124758465080405422180125019966508518442729053438301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e22ac417a2c2ed398a3856e267de64f048f980c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhsigdi1ci.sap.jewels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhsigdi1ci.sap.jewels.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c5abbae130000040300483046022100df68c62c5206028aad3d3034e52f3acff8d1c3fd03b5d72767b3403deaa415ff022100fed28d14481137ddd174369dd2d71144bdf4efe4583b4f53f1642df0d9cc2edc007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018c5abbae9e00000403004730450220701ba22238428a9b5b8059b0c33fecf10b58a5e34eb835042f82966debb979bd022100bd53d612e5a1efcd7ff41195e54dc158e3b3654f8f9be9aaa60e1b8b0e30c8470077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c5abbaded0000040300483046022100eaac940f6ffe9f28181c6d42c054bebb944aaba703bc0618eaaf007e2bc19dda022100f8f13a21982399fcd2684362a887efbb0b45d2a27f8ea41387d19f52e3511567 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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