clientexperience.kpmg.com.br
Issued by R11
About this certificate
This digital certificate with serial number 04:bc:d3:9a:d7:f7:0a:b1:e3:e5:cb:ed:8b:25:70:47:ef:32 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=clientexperience.kpmg.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:bc:d3:9a:d7:f7:0a:b1:e3:e5:cb:ed:8b:25:70:47:ef:32Serial Number (int): 412703499809294980162564429526213522353970
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4d:c8:6e:c8:11:88:9e:ec:76:44:d6:66:8a:cd:cc:b1:86:a5:bd:ca
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): e1:7a:02:97:ab:d4:92:fb:e5:3b:64:2e:b7:19:91:8d:27:78:6c:c6
Fingerprint (sha256): 80:a7:0b:4a:5f:a9:ed:2d:15:de:a6:05:4b:eb:39:72:84:59:c1:6a:4b:8b:fa:68:8d:2e:e7:21:a0:f5:c3:58
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate clientexperience.kpmg.com.br
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for clientexperience.kpmg.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
clientexperience.kpmg.com.br
digital.kpmg.be
digital.kpmg.lu
experience.kpmg.com
switch.kpmg.com.au
digital.kpmg.be
digital.kpmg.lu
experience.kpmg.com
switch.kpmg.com.au
Other certificates including the domain name kpmg.com.br
(limited to 100 certificates)
*.leap.kpmg.com.br
akamaisecure8.qualtrics.com
csg.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clix.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
sipfed.kpmg.com
ktax2.kpmg.com.br
kbs.kpmg.com.br
clientexperience.kpmg.com.br
kbs.kpmg.com.br
*.kpmg.com.br
clix.kpmg.com.br
tprm.kpmg.com.br
clientexperience.kpmg.com.br
clixtest.kpmg.com.br
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
sipfed.kpmg.com
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.plataformacentral.kpmg.com.br
*.gmsdigital.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
ktaxportal.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
executivesearch.kpmg.com.br
*.chrono.kpmg.com.br
sepbr.kpmg.com.br
tprm.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tprm.kpmg.com.br
kpmg.com.br
intranet.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
*.tprm.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
sipfed.kpmg.com
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
*.prd.chrono.kpmg.com.br
*.ati.kpmg.com.br
kbs.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
*.icmsst.kpmg.com.br
webservice.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.frtb.kpmg.com.br
akamaisecure8.qualtrics.com
www.kpmg.com.br
kpmg.com.br
akamaisecure8.qualtrics.com
kpmg.com.br
oma.kpmg.com.br
beyond.kpmg.com.br
kpmg.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
akamaisecure8.qualtrics.com
*.taxdigital.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
sipfed-ema2.kpmg.com
clientexperience.kpmg.com.br
clixtest.kpmg.com.br
clientexperience.kpmg.com.br
ktax.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
csg.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clix.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
sipfed.kpmg.com
ktax2.kpmg.com.br
kbs.kpmg.com.br
clientexperience.kpmg.com.br
kbs.kpmg.com.br
*.kpmg.com.br
clix.kpmg.com.br
tprm.kpmg.com.br
clientexperience.kpmg.com.br
clixtest.kpmg.com.br
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
sipfed.kpmg.com
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.plataformacentral.kpmg.com.br
*.gmsdigital.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
ktaxportal.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
executivesearch.kpmg.com.br
*.chrono.kpmg.com.br
sepbr.kpmg.com.br
tprm.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tprm.kpmg.com.br
kpmg.com.br
intranet.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
*.tprm.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
sipfed.kpmg.com
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
*.prd.chrono.kpmg.com.br
*.ati.kpmg.com.br
kbs.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.com.br
akamaisecure8.qualtrics.com
clientexperience.kpmg.com.br
content.leap.kpmg.com.br
*.icmsst.kpmg.com.br
webservice.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.frtb.kpmg.com.br
akamaisecure8.qualtrics.com
www.kpmg.com.br
kpmg.com.br
akamaisecure8.qualtrics.com
kpmg.com.br
oma.kpmg.com.br
beyond.kpmg.com.br
kpmg.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
kpmg.kpmg.com.br
akamaisecure8.qualtrics.com
*.taxdigital.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
akamaisecure8.qualtrics.com
sipfed-ema2.kpmg.com
clientexperience.kpmg.com.br
clixtest.kpmg.com.br
clientexperience.kpmg.com.br
ktax.kpmg.com.br
clientexperience.kpmg.com.br
Certificate
The complete raw certificate details for clientexperience.kpmg.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISBLzTmtf3CrHj5cvtiyVwR+8yMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjE2MDAxMjEzWhcNMjQwOTE0MDAxMjEyWjAnMSUwIwYDVQQD ExxjbGllbnRleHBlcmllbmNlLmtwbWcuY29tLmJyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA1C8zKW5j4wYJ0Vc+NP4ikNRUO3Io8NP4LRS8NruAUtMC EVWCDit4cWZIMGBKtYoHRTnF4kAvSweSmLT7OshmeeNX6Cwklov4YANpoFLrbv+Q 0xKDDNTWyZV35JCYe2J6i1FSkdrQQm4+CHGHc0kHv0+JPx1aVOh7mFgK5v8jdUSt P0brlDYZ3djLZwnryPYCxTMvXH6tOgz1kEiYKp90SLHAdt3nVglWaqj9bRKPj99h 6kgYaMBG/rNQXKx9PKWMHMv7nHgpyooV+vmZvXJ4w4HrIs5oejRVG/T3lqY5w1Zl mlZaJRJMDghO5TLTKDA8Ojyii+kxn9xJrSWigUnX8wIDAQABo4ICaTCCAmUwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRNyG7IEYie7HZE1maKzcyxhqW9yjAfBgNVHSME GDAWgBTFz0ak6vTDwHpslcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYB BQUHMAGGFmh0dHA6Ly9yMTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6 Ly9yMTEuaS5sZW5jci5vcmcvMHIGA1UdEQRrMGmCHGNsaWVudGV4cGVyaWVuY2Uu a3BtZy5jb20uYnKCD2RpZ2l0YWwua3BtZy5iZYIPZGlnaXRhbC5rcG1nLmx1ghNl eHBlcmllbmNlLmtwbWcuY29tghJzd2l0Y2gua3BtZy5jb20uYXUwEwYDVR0gBAww CjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAZAemhgJAAAEAwBGMEQCIB3wXcWiZ+qv RaXGOj8Nq2eRu1KGN0F5F4skFG82sc2OAiAbdNsoHfpbLUkmcPix3pUH5zNg3aJ1 W/Ec1Zi1d9yZNgB1ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAAB kB6aGAcAAAQDAEYwRAIgAroSpmUAQWUmFehy9BPAcIVcUj1cQO70CpmWVeif2NUC ICB2FEAuzLN+Soo+tUjFR19bVktcaTz4p3FDhEc4PSzMMA0GCSqGSIb3DQEBCwUA A4IBAQCx27JqYeeGRu+5LjmyB2l0twGDA3Et+HlbE5YAr3L0brwBb4EBElB5IAOl MPxJkJXbXgWRbgwwZT2ZASxhuT1rhkxgA8EF9/uyUQeS4gijhzdFBWLi7O4nbYRV XeNF924P/TmK+dKqN9E2GfIjdGr2vQdOlF/vbXZDx4x1DL7oNlGVmFpTS9WITXCP RwqyMmISCyY+EiIBphBaRsholcpxaEuR0JzRwyFn3Oo+6M9VfS07UyAob1GvorTk guc8swvcBo/NxBbSMHnpPX6gGII6a/ZfiCnmvBZ7ASRUm6XV0RYvrzHFAGC8FYLn l1vl1rjX81dXP9Ve5svye53x1Dni -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C8zKW5j4wYJ0Vc+NP4i kNRUO3Io8NP4LRS8NruAUtMCEVWCDit4cWZIMGBKtYoHRTnF4kAvSweSmLT7Oshm eeNX6Cwklov4YANpoFLrbv+Q0xKDDNTWyZV35JCYe2J6i1FSkdrQQm4+CHGHc0kH v0+JPx1aVOh7mFgK5v8jdUStP0brlDYZ3djLZwnryPYCxTMvXH6tOgz1kEiYKp90 SLHAdt3nVglWaqj9bRKPj99h6kgYaMBG/rNQXKx9PKWMHMv7nHgpyooV+vmZvXJ4 w4HrIs5oejRVG/T3lqY5w1ZlmlZaJRJMDghO5TLTKDA8Ojyii+kxn9xJrSWigUnX 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412703499809294980162564429526213522353970 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 00:12:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-14 00:12:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientexperience.kpmg.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26785795766778378218237479309181076391235025323963931383493092958238253815132523032175395799205503681538909377317361930227791542934266582039602585980506379397567239807929124783436545948492276682107623595284794698605476277153081437373293606728453631637935028740633682408886432877393072757527459602924374383252240138684312147162971519990019196037531083975224066073936548434480924158858365544767122116067105733893708891811413461774362195239555841695363407776186524396176477928993739951177323612467843842296329818029854587574991749395626971685918402117633475181422130537955049071965908805927856589438838556079855757809651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4dc86ec811889eec7644d6668acdccb186a5bdca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientexperience.kpmg.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.kpmg.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.kpmg.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.kpmg.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001901e9a1809000004030046304402201df05dc5a267eaaf45a5c63a3f0dab6791bb5286374179178b24146f36b1cd8e02201b74db281dfa5b2d492670f8b1de9507e73360dda2755bf11cd598b577dc99360075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001901e9a18070000040300463044022002ba12a6650041652615e872f413c070855c523d5c40eef40a999655e89fd8d50220207614402eccb37e4a8a3eb548c5475f5b564b5c693cf8a771438447383d2ccc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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