sysmon.hgrs.holcim.net

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 8b:62:06:ef:42:e8:a1:6d:06:f5:00:1c:fa:65:1a:bb was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sysmon.hgrs.holcim.net,OU=Domain Control Validated+OU=Issued through LafargeHolcim Ltd E-PKI Manager+OU=COMODO SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:62:06:ef:42:e8:a1:6d:06:f5:00:1c:fa:65:1a:bb
Serial Number (int): 185271677156935426010983920169312918203
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b4:12:b8:fa:35:3d:2b:38:3f:96:7f:8f:b5:c9:8e:2e:82:67:e9:05
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 42:63:ab:f9:07:0b:9c:86:aa:5c:52:f0:55:37:41:40:d5:ae:71:34
Fingerprint (sha256): 77:40:95:40:1e:25:25:d4:f1:2c:9a:c2:fa:c8:00:d8:74:3a:7f:84:f3:ce:f2:af:26:49:53:04:ad:f9:4b:69

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate sysmon.hgrs.holcim.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sysmon.hgrs.holcim.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sysmon.hgrs.holcim.net
www.sysmon.hgrs.holcim.net

Other certificates including the domain name holcim.net

(limited to 100 certificates)
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
AP-SGS-SP901.in.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
holcimconecta.ea.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
hanzapps.oc.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net
ches-webmail.ea.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amaiiseinpd02.na.holcim.net
hnaadc001.ebusiness.na.holcim.net
eportalqa.oc.holcim.net
nasnoraapdv01.na.holcim.net
hnaadc001.ebusiness.na.holcim.net
integration-immw.ea.holcim.net
nascvlep.ebusiness.na.holcim.net
usa-dund1-ise4.na.holcim.net
imperva.com
imperva.com
hnaadc501.ebusinessq.na.holcim.net
integration-dmw.ea.holcim.net
amaiiseinpd01.na.holcim.net
holporsso.holcim.net
integration-bmw.ea.holcim.net

Certificate

The complete raw certificate details for sysmon.hgrs.holcim.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIIzCCBwugAwIBAgIRAItiBu9C6KFtBvUAHPplGrswDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTgxMDA4MDAwMDAwWhcNMjAxMTI5MjM1OTU5WjCBkjEhMB8GA1UECxMY
RG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMTcwNQYDVQQLEy5Jc3N1ZWQgdGhyb3Vn
aCBMYWZhcmdlSG9sY2ltIEx0ZCBFLVBLSSBNYW5hZ2VyMRMwEQYDVQQLEwpDT01P
RE8gU1NMMR8wHQYDVQQDExZzeXNtb24uaGdycy5ob2xjaW0ubmV0MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu6JuvxB9OSnX+hq+G5Dx/d8G+5e1M3sC
0Z+ECTnqrrmHfl3ZDk4gTpeh/P5JtMxrZl3Vt0RYFznghrMpCDRhGtpE4UgVeh3W
Ru0pV1cBGAiixwLMH8sz/wimxWpJHv+H4FUSSGEB1ci1PWYIEX013QiPdOUl+9hK
ile08Tzr3EaiNMSs3sVV+aGtTx3v8HZAkOeo9k1quAYshaV8q4wDAoWn4Zkpipxa
oCEk/BBngjX1pLi6OzvWcMh+Jrr6tFTmK66fhfb1B42KHMSrZnkmPN4O3d896/rU
oMqhbXV/wSBaj7X0r9EFVzlUGND4LT0ULhfWTgKl2sP0WhvqRen/fq18zPf3vYEQ
pcPZUQji6RjtuCJKMOiav6vNDcyt7RSFe4xDYQ/cOH5CPuVD2yoJHon0CL/zWi/u
fz8wGkUW9u0G8XfXB9Kc3aAbHY+GcdCHQ8P0mY65airo6cs0yTnLQ6b/flXIfr/N
O7YIgodGNBYgUbNRNuaOFDErwIMyyqvqRoO3+ub3TpqnebTOdyIliUU6S9XFkoUK
FQydT5w0rEoml4/r2bwFWFbCumxavjFyCcfA7yoxAicqt2vPLHvWodSKakkwDXsa
op+EkreqbMz6MogMdvrM+0holJLqZEajMoByjMTKw2rBxRK2TN7k62ybdLuqQiSP
/nwu40URO2cCAwEAAaOCA3IwggNuMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPf
Q7Q6KNrnMB0GA1UdDgQWBBS0Erj6NT0rOD+Wf4+1yY4ugmfpBTAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRw
czovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJ
oEegRYZDaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFs
aWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsG
AQUFBzAChkNodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5W
YWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5jb21vZG9jYS5jb20wPQYDVR0RBDYwNIIWc3lzbW9uLmhncnMuaG9sY2lt
Lm5ldIIad3d3LnN5c21vbi5oZ3JzLmhvbGNpbS5uZXQwggF/BgorBgEEAdZ5AgQC
BIIBbwSCAWsBaQB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
ZlO9gZEAAAQDAEcwRQIgRfqfd1paw9mpUK4imNEaTQzUj/yV+8J+jMqDk/mQGswC
IQDLgjZ2C1/0p7+UMoEvt7TwVIRr6STTOpDDeMHaK0NoFQB2AF6nc/nfVsDntTZI
fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABZlO9gzYAAAQDAEcwRQIgdFMhKgW177bk
uTgCipn72XJ9qgQYOkkIPlDvOkSMxksCIQCRGwgMZGVABfllvOxHbHAXMJOnYyVW
8186Gr5xjEb1mAB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
ZlO9ga4AAAQDAEgwRgIhALzDYpSbs7EJsuaWFZsu9iqD6Jr/LvatYIVmAZ8IlQGy
AiEApHGwQMF8xRKHEpJmIpCqve+GwsgKZaWi4buv3N0UkUEwDQYJKoZIhvcNAQEL
BQADggEBABL81vf9EqyuVJDbpKuWoMJzFrmcNJQ/0dSY85eK1cI7bVB+Z5+CRKpS
fULbfhMlc6jllhlbBJLtjM3/zAaXWtbZfB1P/cT8ZwEked7uR3MhqHNL68hc17ub
/W+O/+j59ulcIfbEUqQN0/ZVTAnL2thOEKm2s652wH4N7HuIujpyMaB6O/XXzreu
KbXqiS3FKXU/x/OzJqyqcGQgcNBLwoX9rjRYvxnZn1ytk3roKDy/ktsJMOf/sNSI
HSk6n7zHbUje7XFMOtF3H9FrZs/2tMjD5vf3zrM3RGh4zH5hyqzfNlXW/nhNJtmR
FlyXkDvbf2v8HRwrRTHpevwwYQGlcHE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185271677156935426010983920169312918203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through LafargeHolcim Ltd E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sysmon.hgrs.holcim.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765481984488986937895181671378460830388518208087347619786012541218733021033761951882790147830388549882357314158581056128001849305896588252752615607061752006639051801534586632996038439586641845782986076733562980312975713724309025157973243666459977688311426641063902471704049034165480889344251829410632996607093749728055367593010522368118861795684339143551612108821435513738508364669993239900049007291301500334531449141581352295360557147585884050674707639424023428241454954632703066358618298622473311269636700128427812489778628451189923271113017090436570250102304569566659651950058228452549304241532143059564502649237764705137864973992411029392543821984077944895385357446020879353940207246858296677765574948642286321245310682063947657386667175002731369794032961055340949956684968725224479280763117919629143884547093790031979543893502033006722077514548865204271748468028735724870138968449158277840132698724186439728509761783049404501982504302865018591932780487724776941093098312799761739915636341919130347986651427750968153412631699719942606429217909163169528496888071450858281091816023265113101944857365022502011378919190701647576112276033780779531184787799457277974887671663866914482434712652234908194407621969105390277715836684811111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b412b8fa353d2b383f967f8fb5c98e2e8267e905
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysmon.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sysmon.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016653bd81910000040300473045022045fa9f775a5ac3d9a950ae2298d11a4d0cd48ffc95fbc27e8cca8393f9901acc022100cb8236760b5ff4a7bf9432812fb7b4f054846be924d33a90c378c1da2b4368150076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016653bd8336000004030047304502207453212a05b5efb6e4b938028a99fbd9727daa04183a49083e50ef3a448cc64b022100911b080c64654005f965bcec476c70173093a7632556f35f3a1abe718c46f5980077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016653bd81ae0000040300483046022100bcc362949bb3b109b2e696159b2ef62a83e89aff2ef6ad608566019f089501b2022100a471b040c17cc512871292662290aabdef86c2c80a65a5a2e1bbafdcdd149141
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012fcd6f7fd12acae5490dba4ab96a0c27316b99c34943fd1d498f3978ad5c23b6d507e679f8244aa527d42db7e132573a8e596195b0492ed8ccdffcc06975ad6d97c1d4ffdc4fc67012479deee477321a8734bebc85cd7bb9bfd6f8effe8f9f6e95c21f6c452a40dd3f6554c09cbdad84e10a9b6b3ae76c07e0dec7b88ba3a7231a07a3bf5d7ceb7ae29b5ea892dc529753fc7f3b326acaa70642070d04bc285fdae3458bf19d99f5cad937ae8283cbf92db0930e7ffb0d4881d293a9fbcc76d48deed714c3ad1771fd16b66cff6b4c8c3e6f7f7ceb337446878cc7e61caacdf3655d6fe784d26d991165c97903bdb7f6bfc1d1c2b4531e97afc306101a57071