grantthornton.global

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 7e:41:8c:f6:95:4f:36:30:e8:2a:7b:18:d6:b9:8a:da was issued on by Sectigo Limited.

With 130 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grantthornton.global,OU=Domain Control Validated+OU=Hosted by EPiServer AB+OU=PositiveSSL Multi-Domain

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:41:8c:f6:95:4f:36:30:e8:2a:7b:18:d6:b9:8a:da
Serial Number (int): 167823085838385681037713653039841774298
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5a:7e:d2:09:a2:d3:c3:51:38:6d:a0:a4:04:79:ee:bb:9f:ff:00:11
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 77:bb:14:c4:65:43:9b:76:70:7c:11:de:1b:e2:a9:14:5a:25:b8:46
Fingerprint (sha256): a1:5d:36:8c:a7:76:f1:b5:52:64:03:e1:51:28:d7:58:27:af:b3:a2:2f:af:57:38:5d:3e:4c:9a:06:ac:06:eb

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate grantthornton.global

130

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grantthornton.global

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grantthornton.global
avocats-gt.com
bgt-grantthornton.it
et.gt.com
grant-thornton.ch
grant-thornton.com.ni
grant-thornton.gr
grant-thornton.tn
grantthornton-bq.com
grantthornton-gn.com
grantthornton-ks.com
grantthornton-lb.com
grantthornton-yemen.com
grantthornton.ae
grantthornton.ag
grantthornton.al
grantthornton.am
grantthornton.at
grantthornton.aw
grantthornton.az
grantthornton.be
grantthornton.bg
grantthornton.bh
grantthornton.bs
grantthornton.by
grantthornton.bz
grantthornton.ca
grantthornton.cg
grantthornton.ch
grantthornton.ci
grantthornton.cl
grantthornton.co.bw
grantthornton.co.id
grantthornton.co.il
grantthornton.co.ke
grantthornton.co.mz
grantthornton.co.na
grantthornton.co.nz
grantthornton.co.th
grantthornton.co.tz
grantthornton.co.uk
grantthornton.co.za
grantthornton.com.ar
grantthornton.com.au
grantthornton.com.bd
grantthornton.com.bo
grantthornton.com.br
grantthornton.com.bs
grantthornton.com.co
grantthornton.com.cw
grantthornton.com.cy
grantthornton.com.jm
grantthornton.com.kh
grantthornton.com.kw
grantthornton.com.mm
grantthornton.com.mt
grantthornton.com.mx
grantthornton.com.my
grantthornton.com.ng
grantthornton.com.pa
grantthornton.com.ph
grantthornton.com.py
grantthornton.com.sv
grantthornton.com.uy
grantthornton.com.ve
grantthornton.com.vn
grantthornton.cr
grantthornton.dk
grantthornton.do
grantthornton.ec
grantthornton.ee
grantthornton.es
grantthornton.fi
grantthornton.fr
grantthornton.ge
grantthornton.gi
grantthornton.gt
grantthornton.hn
grantthornton.ie
grantthornton.in
grantthornton.jp
grantthornton.kg
grantthornton.kn
grantthornton.kr
grantthornton.ky
grantthornton.kz
grantthornton.lc
grantthornton.lt
grantthornton.lu
grantthornton.lv
grantthornton.ma
grantthornton.mc
grantthornton.md
grantthornton.mk
grantthornton.mn
grantthornton.mu
grantthornton.mx
grantthornton.nl
grantthornton.no
grantthornton.om
grantthornton.pk
grantthornton.pr
grantthornton.pt
grantthornton.qa
grantthornton.ro
grantthornton.sa
grantthornton.se
grantthornton.sg
grantthornton.sn
grantthornton.sx
grantthornton.tj
grantthornton.tn
grantthornton.tt
grantthornton.tw
grantthornton.ua
grantthornton.ug
grantthornton.uz
grantthornton.vg
grantthorntonci.com
grantthorntondebtsolutions.ie
grantthorntonni.com
gt.com.zm
gtcyprus.com
gtjamaica.com
gtmu.com
gtuganda.co.ug
kw.gt.com
ria-grantthornton.it
sng-grantthornton.co.za
wkgt.com

Other certificates including the domain name grantthornton.global

(limited to 100 certificates)

Certificate

The complete raw certificate details for grantthornton.global in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO1jCCDb6gAwIBAgIQfkGM9pVPNjDoKnsY1rmK2jANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTE5MDIyMjAwMDAwMFoXDTIwMDIyMjIzNTk1OVowgYYxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEfMB0GA1UECxMWSG9zdGVkIGJ5IEVQaVNl
cnZlciBBQjEhMB8GA1UECxMYUG9zaXRpdmVTU0wgTXVsdGktRG9tYWluMR0wGwYD
VQQDExRncmFudHRob3JudG9uLmdsb2JhbDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANr24gzmPsyLOSgMnP9EwYveY4Hsu/qNcrK1nD69SfSkIXA6kV90
bBHqP6pIUBtR4moqYhdgFfaYiVMvokmmicqbe1vfkTqFPc2g1PLZf9D6oXu0Cgi7
bR5Tu2dAWJxHy7a/PGHd6xiRkkYxOPTjI7qq2mLZ0xjlntsG+MeeB8ZenfaPFNps
sDVhnCSXvCcOPKpD9xEy30Ef2XbRkDwrE6h69sM9pggrxwthnuLBkDmM9OtFRAsT
g86/u8vboMFpjBHWdJvB9eyavkpbJx95OJurwT9TC3QrdhG6mgsB1TQdpV23tAo7
6Aio3OOtG8tWp2lNg4snMGPsmmEfyDC6UFECAwEAAaOCCzMwggsvMB8GA1UdIwQY
MBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBRaftIJotPDUThtoKQE
ee67n/8AETAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAl
MCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEw
gYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdv
LmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNy
dDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wEwYKKwYBBAHW
eQIEAwEB/wQCBQAwggnHBgNVHREEggm+MIIJuoIUZ3JhbnR0aG9ybnRvbi5nbG9i
YWyCDmF2b2NhdHMtZ3QuY29tghRiZ3QtZ3JhbnR0aG9ybnRvbi5pdIIJZXQuZ3Qu
Y29tghFncmFudC10aG9ybnRvbi5jaIIVZ3JhbnQtdGhvcm50b24uY29tLm5pghFn
cmFudC10aG9ybnRvbi5ncoIRZ3JhbnQtdGhvcm50b24udG6CFGdyYW50dGhvcm50
b24tYnEuY29tghRncmFudHRob3JudG9uLWduLmNvbYIUZ3JhbnR0aG9ybnRvbi1r
cy5jb22CFGdyYW50dGhvcm50b24tbGIuY29tghdncmFudHRob3JudG9uLXllbWVu
LmNvbYIQZ3JhbnR0aG9ybnRvbi5hZYIQZ3JhbnR0aG9ybnRvbi5hZ4IQZ3JhbnR0
aG9ybnRvbi5hbIIQZ3JhbnR0aG9ybnRvbi5hbYIQZ3JhbnR0aG9ybnRvbi5hdIIQ
Z3JhbnR0aG9ybnRvbi5hd4IQZ3JhbnR0aG9ybnRvbi5heoIQZ3JhbnR0aG9ybnRv
bi5iZYIQZ3JhbnR0aG9ybnRvbi5iZ4IQZ3JhbnR0aG9ybnRvbi5iaIIQZ3JhbnR0
aG9ybnRvbi5ic4IQZ3JhbnR0aG9ybnRvbi5ieYIQZ3JhbnR0aG9ybnRvbi5ieoIQ
Z3JhbnR0aG9ybnRvbi5jYYIQZ3JhbnR0aG9ybnRvbi5jZ4IQZ3JhbnR0aG9ybnRv
bi5jaIIQZ3JhbnR0aG9ybnRvbi5jaYIQZ3JhbnR0aG9ybnRvbi5jbIITZ3JhbnR0
aG9ybnRvbi5jby5id4ITZ3JhbnR0aG9ybnRvbi5jby5pZIITZ3JhbnR0aG9ybnRv
bi5jby5pbIITZ3JhbnR0aG9ybnRvbi5jby5rZYITZ3JhbnR0aG9ybnRvbi5jby5t
eoITZ3JhbnR0aG9ybnRvbi5jby5uYYITZ3JhbnR0aG9ybnRvbi5jby5ueoITZ3Jh
bnR0aG9ybnRvbi5jby50aIITZ3JhbnR0aG9ybnRvbi5jby50eoITZ3JhbnR0aG9y
bnRvbi5jby51a4ITZ3JhbnR0aG9ybnRvbi5jby56YYIUZ3JhbnR0aG9ybnRvbi5j
b20uYXKCFGdyYW50dGhvcm50b24uY29tLmF1ghRncmFudHRob3JudG9uLmNvbS5i
ZIIUZ3JhbnR0aG9ybnRvbi5jb20uYm+CFGdyYW50dGhvcm50b24uY29tLmJyghRn
cmFudHRob3JudG9uLmNvbS5ic4IUZ3JhbnR0aG9ybnRvbi5jb20uY2+CFGdyYW50
dGhvcm50b24uY29tLmN3ghRncmFudHRob3JudG9uLmNvbS5jeYIUZ3JhbnR0aG9y
bnRvbi5jb20uam2CFGdyYW50dGhvcm50b24uY29tLmtoghRncmFudHRob3JudG9u
LmNvbS5rd4IUZ3JhbnR0aG9ybnRvbi5jb20ubW2CFGdyYW50dGhvcm50b24uY29t
Lm10ghRncmFudHRob3JudG9uLmNvbS5teIIUZ3JhbnR0aG9ybnRvbi5jb20ubXmC
FGdyYW50dGhvcm50b24uY29tLm5nghRncmFudHRob3JudG9uLmNvbS5wYYIUZ3Jh
bnR0aG9ybnRvbi5jb20ucGiCFGdyYW50dGhvcm50b24uY29tLnB5ghRncmFudHRo
b3JudG9uLmNvbS5zdoIUZ3JhbnR0aG9ybnRvbi5jb20udXmCFGdyYW50dGhvcm50
b24uY29tLnZlghRncmFudHRob3JudG9uLmNvbS52boIQZ3JhbnR0aG9ybnRvbi5j
coIQZ3JhbnR0aG9ybnRvbi5ka4IQZ3JhbnR0aG9ybnRvbi5kb4IQZ3JhbnR0aG9y
bnRvbi5lY4IQZ3JhbnR0aG9ybnRvbi5lZYIQZ3JhbnR0aG9ybnRvbi5lc4IQZ3Jh
bnR0aG9ybnRvbi5maYIQZ3JhbnR0aG9ybnRvbi5mcoIQZ3JhbnR0aG9ybnRvbi5n
ZYIQZ3JhbnR0aG9ybnRvbi5naYIQZ3JhbnR0aG9ybnRvbi5ndIIQZ3JhbnR0aG9y
bnRvbi5oboIQZ3JhbnR0aG9ybnRvbi5pZYIQZ3JhbnR0aG9ybnRvbi5pboIQZ3Jh
bnR0aG9ybnRvbi5qcIIQZ3JhbnR0aG9ybnRvbi5rZ4IQZ3JhbnR0aG9ybnRvbi5r
boIQZ3JhbnR0aG9ybnRvbi5rcoIQZ3JhbnR0aG9ybnRvbi5reYIQZ3JhbnR0aG9y
bnRvbi5reoIQZ3JhbnR0aG9ybnRvbi5sY4IQZ3JhbnR0aG9ybnRvbi5sdIIQZ3Jh
bnR0aG9ybnRvbi5sdYIQZ3JhbnR0aG9ybnRvbi5sdoIQZ3JhbnR0aG9ybnRvbi5t
YYIQZ3JhbnR0aG9ybnRvbi5tY4IQZ3JhbnR0aG9ybnRvbi5tZIIQZ3JhbnR0aG9y
bnRvbi5ta4IQZ3JhbnR0aG9ybnRvbi5tboIQZ3JhbnR0aG9ybnRvbi5tdYIQZ3Jh
bnR0aG9ybnRvbi5teIIQZ3JhbnR0aG9ybnRvbi5ubIIQZ3JhbnR0aG9ybnRvbi5u
b4IQZ3JhbnR0aG9ybnRvbi5vbYIQZ3JhbnR0aG9ybnRvbi5wa4IQZ3JhbnR0aG9y
bnRvbi5wcoIQZ3JhbnR0aG9ybnRvbi5wdIIQZ3JhbnR0aG9ybnRvbi5xYYIQZ3Jh
bnR0aG9ybnRvbi5yb4IQZ3JhbnR0aG9ybnRvbi5zYYIQZ3JhbnR0aG9ybnRvbi5z
ZYIQZ3JhbnR0aG9ybnRvbi5zZ4IQZ3JhbnR0aG9ybnRvbi5zboIQZ3JhbnR0aG9y
bnRvbi5zeIIQZ3JhbnR0aG9ybnRvbi50aoIQZ3JhbnR0aG9ybnRvbi50boIQZ3Jh
bnR0aG9ybnRvbi50dIIQZ3JhbnR0aG9ybnRvbi50d4IQZ3JhbnR0aG9ybnRvbi51
YYIQZ3JhbnR0aG9ybnRvbi51Z4IQZ3JhbnR0aG9ybnRvbi51eoIQZ3JhbnR0aG9y
bnRvbi52Z4ITZ3JhbnR0aG9ybnRvbmNpLmNvbYIdZ3JhbnR0aG9ybnRvbmRlYnRz
b2x1dGlvbnMuaWWCE2dyYW50dGhvcm50b25uaS5jb22CCWd0LmNvbS56bYIMZ3Rj
eXBydXMuY29tgg1ndGphbWFpY2EuY29tgghndG11LmNvbYIOZ3R1Z2FuZGEuY28u
dWeCCWt3Lmd0LmNvbYIUcmlhLWdyYW50dGhvcm50b24uaXSCF3NuZy1ncmFudHRo
b3JudG9uLmNvLnphggh3a2d0LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAG+W96JAS
jt4VtfnQYp6JHkWNV8q42kqGlhj1mesTUAxDxLWBxaxksPSjJTpaBbCjnJqOcNHW
E8tLQkk1fRXbhLpdxjZvbEuLmt4UqMlQy8kKh2pDqX86Iit4eYggvH0teLGgkE2w
FtTlMtxd1iJ2wQ1iAwx/82+zK8nmpz39ysahdspv25KWr5UfU8sAEzjw+SZrQqfP
PZGfPPz8jWyeF+rGaqaJgJJ+1L/LsLln9ZA7javwovqPf0TCb+UplO2+xJP5Xtaw
GRNjoUYTcb3TBy0JsQ1k1JdfuW0jOFwkmyF6jCW5WyQpEwfd6KOrfdHaRazcMTEk
WaKuPrjGkfkvfQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vbiDOY+zIs5KAyc/0TB
i95jgey7+o1ysrWcPr1J9KQhcDqRX3RsEeo/qkhQG1HiaipiF2AV9piJUy+iSaaJ
ypt7W9+ROoU9zaDU8tl/0Pqhe7QKCLttHlO7Z0BYnEfLtr88Yd3rGJGSRjE49OMj
uqraYtnTGOWe2wb4x54Hxl6d9o8U2mywNWGcJJe8Jw48qkP3ETLfQR/ZdtGQPCsT
qHr2wz2mCCvHC2Ge4sGQOYz060VECxODzr+7y9ugwWmMEdZ0m8H17Jq+SlsnH3k4
m6vBP1MLdCt2EbqaCwHVNB2lXbe0CjvoCKjc460by1anaU2DiycwY+yaYR/IMLpQ
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167823085838385681037713653039841774298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by EPiServer AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grantthornton.global'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27641693031907938313551086484197138191629282104461395078795354174216490663419764495602760693104023926633695516942108068280265114311727582704573579588357764644627324506410822436896806405493181673939135505196944529498602417357956343161129850283347466080042934514390521285982603274187042567547827007309657136855433964299499297336140048156410806794816547499781976865252887365215442024523014217107179444739816031856984494880611736210014803309984918530842102083499522916292068063746531363762031099827400683665880680939972243986677491388049503561526799662112598910766136816400859507549731432351659375531432688520860576403537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a7ed209a2d3c351386da0a40479eebb9fff0011
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avocats-gt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgt-grantthornton.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'et.gt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant-thornton.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant-thornton.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant-thornton.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant-thornton.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton-bq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton-gn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton-ks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton-lb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.aw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.cg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.jm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.gi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.kg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.mc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.tj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.tt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthornton.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthorntonci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthorntondebtsolutions.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantthorntonni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt.com.zm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcyprus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtjamaica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtuganda.co.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kw.gt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria-grantthornton.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sng-grantthornton.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkgt.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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