stash.heg.com

- Host Europe Group Limited -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 26:81:25:7f:21:be:ad:26:6f:a6:6e:c0 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Host Europe Group Limited

Company registration number: 08509568
Organization: Host Europe Group Limited
Address: 5TH FLOOR, THE SHIPPING BUILDING OLD VINYL FACTORY
State / Province: MIDDLESEX
Locality: HAYES
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:81:25:7f:21:be:ad:26:6f:a6:6e:c0
Serial Number (int): 11916558876669334542484926144
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5c:9a:01:a2:48:d3:d3:f3:6b:70:70:63:0e:3a:e8:5c:83:2c:88:f8
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): b5:cb:62:31:22:4e:88:7a:f5:35:de:7b:7f:02:be:19:d1:82:bd:09
Fingerprint (sha256): 6d:1c:15:53:fa:e1:ba:61:a8:bb:20:8c:0c:38:79:ae:50:d8:84:e5:46:96:00:3a:7c:96:ba:92:86:e5:58:f2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate stash.heg.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stash.heg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stash.heg.com

Other certificates including the domain name heg.com

(limited to 100 certificates)
vpn.heg.com
haproxy-0.cgn.ba.heg.com
confluence.dev.heg.com
bamboo.dev.heg.com
bamboo.dev.heg.com
bamboo.heg.com
confluence.heg.com
tools.core.heg.com
elk0.cgn.ba.heg.com
legal.emeaint.godaddy.com
mirrors.uk.heg.com
www.heg.com
www.heg.com
portal.heg.com
mirrors.uk.heg.com
www.heg.com
cgn-dc02.ad.heg.com
wsus.heg.com
kafka-prod0.cgn.ba.heg.com
jira.heg.com
persis.staging.heg.com
calendar.heg.com
drive.heg.com
legal.emeaint.godaddy.com
www.heg.com
axonivy.heg.com
portal.sam.heg.com
owa.heg.com
exchange.heg.com
lg.core.heg.com
n3pwhegssdc002.ad.heg.com
observium.core.heg.com
lg.core.heg.com
cmpro.heg.com
privacyguard.heg.com
restapi.sam.heg.com
vpn.heg.com
*.o365.heg.com
jira.heg.com
lists.heg.com
tools.core.heg.com
vpn.heg.com
calender.heg.com
jira.dev.heg.com
*.loki.ba.heg.com
portal.heg.com
*.artifactory.ba.heg.com
jira.heg.com
www.heg.com
stash.heg.com
confluence.heg.com
stash.dev.heg.com
exchange.heg.com
vpn.heg.com
stash.heg.com
datastore.heg.com
legal.emeaint.godaddy.com
privacyguard.heg.com
*.media.heg.com
vpn.heg.com
privacyguard.heg.com
stash.dev.heg.com
*.mjolnir.ba.heg.com
confluence.heg.com
calendar.heg.com
*.thor.ba.heg.com
elk2.cgn.ba.heg.com
ldap.heg.com
paste.heg.com
timecontrol.heg.com
heg.com
stash.heg.com
privacyguard.heg.com
vault.ba.heg.com
cmpro.heg.com
confluence.heg.com
lg.core.heg.com
vault.ba.heg.com
www.heg.com
confluence.dev.heg.com
bamboo.heg.com
restapi.sam.heg.com
rsaf.sam.heg.com
observium.core.heg.com
owa.heg.com
blog.heg.com
calendar.heg.com
*.media.heg.com
lg.core.heg.com
finance-ax.heg.com
jira.heg.com
*.freya.ba.heg.com
legal.emeaint.godaddy.com
jabber.heg.com
sam.heg.com
*.odin.ba.heg.com
elk1.cgn.ba.heg.com
lg.core.heg.com
owa.heg.com
jira.dev.heg.com

Certificate

The complete raw certificate details for stash.heg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIMJoElfyG+rSZvpm7AMA0GCSqGSIb3DQEBCwUAMGIxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H
bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAe
Fw0xNTA0MTYxMDAxMDJaFw0xNzA0MTYxMDAxMDJaMIHxMR0wGwYDVQQPDBRQcml2
YXRlIE9yZ2FuaXphdGlvbjERMA8GA1UEBRMIMDg1MDk1NjgxEzARBgsrBgEEAYI3
PAIBAxMCR0IxCzAJBgNVBAYTAkdCMRIwEAYDVQQIEwlNSURETEVTRVgxDjAMBgNV
BAcTBUhBWUVTMTswOQYDVQQJEzI1VEggRkxPT1IsIFRIRSBTSElQUElORyBCVUlM
RElORyBPTEQgVklOWUwgRkFDVE9SWTEiMCAGA1UEChMZSG9zdCBFdXJvcGUgR3Jv
dXAgTGltaXRlZDEWMBQGA1UEAxMNc3Rhc2guaGVnLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM5HQs/AoEhJjvnIqwSM2WWwZgFAH0PrvfxyCDlb
inVMkn3DFXoCOCGBtNAUPxy34NDZtuaJNfGn88VHMUHGQJSWxPgAszb/pSwbB1tS
E379Oor74gBqzDIa1JmJpUKgiU72n/NwVNP9kAQsWjGg9mDQUUhUkUd65cGEBerf
HJP5Oiyb1vRNrcUogi1yxnlRyCt+VPqQVL/IS0bnZsUDQkEQx+eKw+K+PL82bfrD
94jaQBgHHXK+Kyylf7V5hJfDRhFvXjByEhSd5XRzIcn6Ir0ZmLpqv1ZYGNlOnter
zJHT/k8H9bKDdwRQuCo0pSGovCc4vcv3tmiPnyGn4a0QsnUCAwEAAaOCAdcwggHT
MA4GA1UdDwEB/wQEAwIFoDBMBgNVHSAERTBDMEEGCSsGAQQBoDIBATA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBD
BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dz
ZXh0ZW5kdmFsc2hhMmcyLmNybDCBlAYIKwYBBQUHAQEEgYcwgYQwRwYIKwYBBQUH
MAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZXh0ZW5k
dmFsc2hhMmcycjIuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xvYmFs
c2lnbi5jb20vZ3NleHRlbmR2YWxzaGEyZzIwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAkGA1UdEwQCMAAwGAYDVR0RBBEwD4INc3Rhc2guaGVnLmNvbTAd
BgNVHQ4EFgQUXJoBokjT0/NrcHBjDjroXIMsiPgwHwYDVR0jBBgwFoAU2kB3Q2Uc
+P6n4/Rkgj5NQxMiMQIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBAF5JI3WW+qyRCuT0o3AMJKv9dBB6mA67ASh013labtQJcKIMtG+I6QI5
9ZTN+wpsOtFDsmmDn69NWTQnGeb6fwwV3Y8vmCESx87CBUbVM7C7NxPmN6+KtRge
vbrW3nvaVsCPlhZ3hkTH/xUI5ZK/AVupvwJ0+YEg38OvOxaccWprfsPj9gAa2KqL
zmCkDZ1t3kwkepXn8hK6vKluRM1ybgJeM8FAXjwbaj6WuEJQ/OLUrYPi9UTeYKue
sjcrX+a4phmtS9R8lfmcpUV6ut5ratzr7iZBI3kRryngTVakKInEU0m1qFSDeSbw
D7gWqGe9QR3M01axNw8XbpeKnpAfKIk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkdCz8CgSEmO+cirBIzZ
ZbBmAUAfQ+u9/HIIOVuKdUySfcMVegI4IYG00BQ/HLfg0Nm25ok18afzxUcxQcZA
lJbE+ACzNv+lLBsHW1ITfv06ivviAGrMMhrUmYmlQqCJTvaf83BU0/2QBCxaMaD2
YNBRSFSRR3rlwYQF6t8ck/k6LJvW9E2txSiCLXLGeVHIK35U+pBUv8hLRudmxQNC
QRDH54rD4r48vzZt+sP3iNpAGAcdcr4rLKV/tXmEl8NGEW9eMHISFJ3ldHMhyfoi
vRmYumq/VlgY2U6e16vMkdP+Twf1soN3BFC4KjSlIai8Jzi9y/e2aI+fIafhrRCy
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11916558876669334542484926144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 10:01:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-16 10:01:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08509568'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIDDLESEX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HAYES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5TH FLOOR, THE SHIPPING BUILDING OLD VINYL FACTORY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Host Europe Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stash.heg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26040230923193318780502878620918382130168149724470571017556120778968737244230582343584636211701810524938011512532027292488827397837077344695904903880824102379557507199337991476215389223551727195015542030774530409992714655549870696767113401132726468492180294362404588192115463794648155805252605281918920038732594231138945350963655043356176989206130762679210778777903417886532147936328251171316410277366551207510247596517328608817590525765509156832219822838444949006779303233695083334261556317936167893329364683482210729750372868749736983178394982125630879930920115985570008404818718430443719300505725350204569994441333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stash.heg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c9a01a248d3d3f36b7070630e3ae85c832c88f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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