taxtoollibrary.us.gt.com

- Grant Thornton International, Ltd -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 08:e5:f7:68:79:e3:a2:cd:69:e7:23:6e:9a:25:d8:eb was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grant Thornton International, Ltd

Organization: Grant Thornton International, Ltd
Organization unit: IT
Organization unit: Unified Communications
Address: 22 Melton Street
Address: Grant Thornton House
Postal code: NW12EP
State / Province: London
Locality: Euston
Country: GB

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:e5:f7:68:79:e3:a2:cd:69:e7:23:6e:9a:25:d8:eb
Serial Number (int): 11827877979507687118268906024154290411
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:74:42:df:72:da:18:ea:b6:11:85:28:39:7d:3c:4d:7f:d9:34:0f
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 45:6d:e3:f4:bf:f4:b3:c4:6f:fd:79:73:78:98:25:16:4c:89:7d:3f
Fingerprint (sha256): 9e:67:b3:05:21:82:ee:a8:ff:96:29:ca:a1:97:9e:ac:f4:0c:94:5a:4a:7a:67:a7:6a:a3:8f:bb:2d:fd:da:94

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate taxtoollibrary.us.gt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for taxtoollibrary.us.gt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

taxtoollibrary.us.gt.com
taxtoollibrary-uat.gtus.com

Other certificates including the domain name gt.com

(limited to 100 certificates)
systemstatus.rrc.ca
gtiocsaccess.gtinet.org
exohybd.ca.gt.com
iemail.gtus.com
status.hpiinc.com
grantthornton.global
access.ca.gt.com
status.sandsiv.com
status.digitary.net
vpn.us.gt.com
status.clearcompany.com
mtpsfbfepool.us.gt.com
mail.grantthornton.gr
trust.airgap.io
*.fr.gt.com
sip.fr.gt.com
mail.grant-thornton.ch
dal-sfb-ae.us.gt.com
statusp.dotdigital.com
sip.grantthornton.es
stg.dotdigitalstatus.com
vpn.us.gt.com
in.gt.com
statuspage.vantage.online
fso365.us.gt.com
mail.grantthornton.gr
mail.in.gt.com
status.sandsiv.com
emm.cn.gt.com
mail.kevane.com
kw.gt.com
systemstatus.rrc.ca
mail.my.gt.com
mail.grant-thornton.ch
fta-edc.gt.com
status.igdn.macrometa.io
status.caroola.com
iemail.gtus.com
access.ca.gt.com
status.sandsiv.com
mail.kevane.com
correo.guyer.com.uy
webmail.ca.gt.com
mail.br.gt.com
exc02.gt.com.vn
status.ssactivewear.com
status.reliancenetwork.com
status.crewbuilder.ca
statuspage.e2open.com
lyncwebcdc.us.gt.com
status.sandsiv.com
caloes-status.ravemobilesafety.com
status.c9cg.com
webmail.fr.gt.com
status.puter.com
mail.co.gt.com
mail.co.gt.com
dal-sfb-ae.us.gt.com
status.ssactivewear.com
grantthornton.global
status-namer-gtassurancetool.gtil.gt.com
mtp-expe01.us.gt.com
sts.us.gt.com
systemstatus.rrc.ca
sni.cloudflaressl.com
status.clearcompany.com
*.pt.gt.com
sip.grantthornton.es
status.crewbuilder.ca
team.gt.com
ldap.au.gt.com
statuspage.e2open.com
grantthornton.global
sbc.hk.gt.com
status.reliancenetwork.com
stg.dotdigitalstatus.com
mail.grantthornton.at
lyncweb.fr.gt.com
iemail.gtus.com
autodiscover.my.gt.com
lync-edge.cloud4you.biz
mail.my.gt.com
status.sabbagradiologos.com
status.platform.creditxpert.com
sni.cloudflaressl.com
sni.cloudflaressl.com
fredhopperstatus.crownpeak.com
partner-status.verify.interac-id.ca
status.fringesecure.com
access.ca.gt.com
status.sandsiv.com
status.clearcompany.com
statusp.dotdigital.com
status-ca-gtassurancetool.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
status.daydev.lol
mail.ni.gt.com
emm.cn.gt.com
mail.ie.gt.com
xen.us.gt.com

Certificate

The complete raw certificate details for taxtoollibrary.us.gt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9ipAX0iQnT5ar3NgY6
jdKJnhmmbQNsH9qxoxBthg+zNmkg/9/iHNeJ/oMz4rOPds1WmkBSOhmmr6K06hbo
jcT2fr7f1JYCYBi78RYusV+LJpmHZHDGdixraDEsin+2yLy2arQ0+fGton9o7j+v
dZsmFUDKLpXfQxRcoNmsb63/0XbkK69zkjRnXv2vy8KX/tjiB6AMdRGr6uUMQizh
kdZHlmtxVj8aW1+agFcnG2rp8rOQBdjKZZHsOSParD5/U2Wi/99duOqmZjKutWcW
9mYde5W5y6lmz2mPaqICBxeQ6l4y3b26FRvoPDzXvpnpmGuMGHa/dKB4bBFeltDN
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11827877979507687118268906024154290411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NW12EP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Euston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '22 Melton Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grant Thornton House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grant Thornton International, Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taxtoollibrary.us.gt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23322223730154816896004273041746689724512979458116349017998569624862677823320566862384171650239819285764462704690581583411494871622816418559658385668933725047469693269849197469630524297122762140589229357782625220876537623180175255273831946786474260598091505001470422834714495270407241868592182510567490503825315337475809810813662529175807202318809438724776899519140339170768176990246507805673922782959473438322238462552447325715879065583449102252661559410407703863362328586443832419824388262069260945332948440743319839737754905992982712937148082647363766788857267797900176731943726662930848882967016529715610304695747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							227442df72da18eab6118528397d3c4d7fd9340f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxtoollibrary.us.gt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxtoollibrary-uat.gtus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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