www.cm.apsa.kleenex.com

- Kimberly-Clark Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 96:d1:aa:d4:47:a6:f8:39:1b:42:92:46:7e:08:e3:8a was issued on by Sectigo Limited.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kimberly-Clark Corporation

Organization: Kimberly-Clark Corporation
State / Province: Wisconsin
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 96:d1:aa:d4:47:a6:f8:39:1b:42:92:46:7e:08:e3:8a
Serial Number (int): 200472854239349523301633559053759734666
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 80:9a:a0:5a:99:71:61:36:86:4b:60:d0:74:18:f9:72:c5:d2:b7:fd
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 40:3f:81:1c:ac:29:f3:12:e7:04:17:7e:fd:73:34:0e:f6:73:cc:02
Fingerprint (sha256): ae:9d:88:ee:50:56:ae:7e:52:d6:9b:f0:f0:e3:61:3a:31:1e:55:95:26:66:7c:9c:b4:6e:9f:41:61:5b:b4:f0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.cm.apsa.kleenex.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cm.apsa.kleenex.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cm.apsa.kleenex.com
cm.apsa.kleenex.com
cm.kleenex.com.my
cm.scott.com.my
origin.cm.apsa.kleenex.com
origin.cm.kleenex.com.my
origin.cm.scott.com.my
server1.tcceast.www1.cm.apsa.kleenex.com
server1.tcceast.www2.cm.apsa.kleenex.com
server1.tccwest.www1.cm.apsa.kleenex.com
server1.tccwest.www2.cm.apsa.kleenex.com
server1.www1.cm.apsa.kleenex.com
server1.www2.cm.apsa.kleenex.com
server2.tcceast.www1.cm.apsa.kleenex.com
server2.tcceast.www2.cm.apsa.kleenex.com
server2.tccwest.www1.cm.apsa.kleenex.com
server2.tccwest.www2.cm.apsa.kleenex.com
server2.www1.cm.apsa.kleenex.com
server2.www2.cm.apsa.kleenex.com
server3.tcceast.www1.cm.apsa.kleenex.com
server3.tcceast.www2.cm.apsa.kleenex.com
server3.tccwest.www1.cm.apsa.kleenex.com
server3.tccwest.www2.cm.apsa.kleenex.com
server3.www1.cm.apsa.kleenex.com
server3.www2.cm.apsa.kleenex.com
server4.tcceast.www1.cm.apsa.kleenex.com
server4.tcceast.www2.cm.apsa.kleenex.com
server4.tccwest.www1.cm.apsa.kleenex.com
server4.tccwest.www2.cm.apsa.kleenex.com
server4.www1.cm.apsa.kleenex.com
server4.www2.cm.apsa.kleenex.com
stage.cm.apsa.kleenex.com
stage.cm.kleenex.com.my
stage.cm.scott.com.my
tcceast.www1.cm.apsa.kleenex.com
tcceast.www2.cm.apsa.kleenex.com
tccwest.www1.cm.apsa.kleenex.com
tccwest.www2.cm.apsa.kleenex.com
www.cm.kleenex.com.my
www.cm.scott.com.my
www1.cm.apsa.kleenex.com
www1.cm.kleenex.com.my
www1.cm.scott.com.my
www2.cm.apsa.kleenex.com
www2.cm.kleenex.com.my
www2.cm.scott.com.my

Other certificates including the domain name kleenex.com

(limited to 100 certificates)
server7.tccwest.www1.v1.kleenex.com
server6.tcceast.www2.v1.kleenex.com
server4.tccwest.qa2.v1.kleenex.com
server6.tcceast.www2.v1.kleenex.com
www.m.kleenex.com
tcceast.dev3.cm.v1.kleenex.com
tccwest.qa3.cm.v1.kleenex.com
server2.tcceast.dev2.cm.v1.kleenex.com
tccwest.qa1.cm.kleenex.com
ssl964239.cloudflaressl.com
qa.v3.kleenex.com
server1.tcceast.dev1.kleenex.com
server6.tcceast.www1.v1.kleenex.com
server1.tcceast.www1.cm.v1.kleenex.com
tccwest.qa2.cm.kleenex.com
ssl966103.cloudflaressl.com
tccwest.qa3.kleenex.com
server2.tccwest.dev2.kz.kleenex.com
www.cdn3.kimberly-clark.com
server3.tccwest.www2.cm.v1.kleenex.com
tcceast.www2.kz.kleenex.com
server3.tccwest.qa1.v1.kleenex.com
server2.tcceast.www2.v1.kleenex.com
www.cm.lao.kleenex.com
dev.v4.kleenex.com
tcceast.qa3.cm.v1.kleenex.com
tcceast.dev2.kz.kleenex.com
server3.tccwest.qa4.v1.kleenex.com
qa.v1.kleenex.com
server2.tcceast.qa1.kz.kleenex.com
dev.kleenex.com
www.cdn4.kimberly-clark.com
dev.cm.v1.kleenex.com
server5.tcceast.www1.v1.kleenex.com
server2.tcceast.qa1.kz.kleenex.com
server1.tcceast.qa3.cm.v1.kleenex.com
tccwest.qa2.cm.kleenex.com
server9.tccwest.www1.v1.kleenex.com
tccwest.www1.cm.kleenex.com
server2.tccwest.www1.kz.kleenex.com
tccwest.www1.kleenex.com
server1.tcceast.www1.v1.kleenex.com
server2.tccwest.qa2.kz.kleenex.com
tcceast.qa1.v1.kleenex.com
server1.tccwest.dev2.cm.kleenex.com
server7.tcceast.www2.v1.kleenex.com
tcceast.dev1.kleenex.com
server9.tccwest.www1.v1.kleenex.com
www.v3.kleenex.com
server1.tcceast.qa3.v1.kleenex.com
ssl945938.cloudflaressl.com
server1.tccwest.dev2.cm.kleenex.com
server1.tccwest.www2.cm.v1.kleenex.com
dev.kleenex.com
dev.cm.kleenex.com
www.cdn4.kimberly-clark.com
server3.tcceast.www2.v1.kleenex.com
ssl966092.cloudflaressl.com
tcceast.qa3.kleenex.com
server2.tccwest.www2.v1.kleenex.com
server2.tcceast.dev4.kleenex.com
server3.tccwest.www1.v1.kleenex.com
server2.tcceast.dev4.kleenex.com
server2.tccwest.qa1.cm.v1.kleenex.com
www.cdn4.kimberly-clark.com
server1.tccwest.dev4.v1.kleenex.com
server2.tccwest.dev1.cm.kleenex.com
server1.tcceast.dev1.v1.kleenex.com
ssl933828.cloudflaressl.com
server2.tccwest.www1.v1.kleenex.com
server1.tcceast.qa2.cm.v1.kleenex.com
server1.tcceast.www2.cm.v1.kleenex.com
www.cdn2.kimberly-clark.com
www.cdn3.kimberly-clark.com
www.v3.kleenex.com
www.cdn2.kimberly-clark.com
www.cdn4.kimberly-clark.com
server10.tccwest.www2.v1.kleenex.com
server1.tcceast.dev3.cm.v1.kleenex.com
www.cdn2.kimberly-clark.com
server2.tccwest.qa1.v1.kleenex.com
server5.tccwest.www1.kz.kleenex.com
tccwest.qa4.v1.kleenex.com
dev.cm.v1.kleenex.com
server9.tccwest.www2.v1.kleenex.com
server2.tcceast.dev3.kleenex.com
server6.tccwest.www1.v1.kleenex.com
www.qa.fb.kleenex.com
www.kleenex.com
ssl966104.cloudflaressl.com
www.kleenex.com
www.cdn2.kimberly-clark.com
server4.tccwest.www2.v1.kleenex.com
server1.tccwest.www1.cm.v1.kleenex.com
server1.tccwest.dev2.v1.kleenex.com
tcceast.dev4.kleenex.com
www.cm.kleenex.com
ssl945899.cloudflaressl.com
server5.tccwest.www1.v1.kleenex.com
server2.tcceast.dev4.cm.v1.kleenex.com

Certificate

The complete raw certificate details for www.cm.apsa.kleenex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMszCCC5ugAwIBAgIRAJbRqtRHpvg5G0KSRn4I44owDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMzAxMTEwMDAwMDBaFw0yNDAxMTEyMzU5NTlaMGgxCzAJBgNV
BAYTAlVTMRIwEAYDVQQIEwlXaXNjb25zaW4xIzAhBgNVBAoTGktpbWJlcmx5LUNs
YXJrIENvcnBvcmF0aW9uMSAwHgYDVQQDExd3d3cuY20uYXBzYS5rbGVlbmV4LmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDbeIgJXA5Ct7kgPUiA
UAFIllaf2fAuBLA0Lz+NnOLqNk2BnNZ2gc7tlEtGwJsfP7HjTvj/kfZvVG6rnztm
A8DI6fzIjPVcPRww5mUG30NXpu0Zsz5esFiTdiLE+N+bLwtKyAUWzDj6y2Az19Jw
HrtJmzPRVU1dx3YHLppboIt5tym7qLZO/OAjZVbkwazapriCgmIsX0N0Lt9XjaDj
aAk4Ipz5YG8M088DbDjDiSLlFn63mbQ/mNiWu4DR+pmN2mfdOSnbnnmAKS9Vtr7b
gw286iUBKLAF9ZV7GGdXPfX/31Jvq5UHyjjOfqHzcaGK6IxWcawQhyP4mrwVpzqj
TlECAwEAAaOCCSgwggkkMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/r
MB0GA1UdDgQWBBSAmqBamXFhNoZLYNB0GPlyxdK3/TAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYD
VR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z
ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6
Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRp
b25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcw
AoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9u
VmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDov
L29jc3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhaMrBtcAAAQDAEcwRQIg
U9+3r6rg9jme8BNpOcFvzXj1/KASKm/2+15NVXczhWICIQCIuCHnMcldaMDsXohb
vzA1jPPPXDenQOrC7GAN+e5bTAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABhaMrBu4AAAQDAEcwRQIhAPY1iCQQK4qEbKK207TJ8QqgowJEl/GG
+TugX9NfabhzAiAiVy/zwzT88BE7IHZPXd9cvC0Q28tl5iFRaeCJDg1/agB2AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhaMrBs0AAAQDAEcwRQIh
AL10qI2NOErzj4YvjMS2B+MrEY4Q2np24K2ClOcSMcj8AiBhws8WTu1D1mRkUWZs
vWcD1LZnWyMDgVgm5G6SRMMJsDCCBewGA1UdEQSCBeMwggXfghd3d3cuY20uYXBz
YS5rbGVlbmV4LmNvbYITY20uYXBzYS5rbGVlbmV4LmNvbYIRY20ua2xlZW5leC5j
b20ubXmCD2NtLnNjb3R0LmNvbS5teYIab3JpZ2luLmNtLmFwc2Eua2xlZW5leC5j
b22CGG9yaWdpbi5jbS5rbGVlbmV4LmNvbS5teYIWb3JpZ2luLmNtLnNjb3R0LmNv
bS5teYIoc2VydmVyMS50Y2NlYXN0Lnd3dzEuY20uYXBzYS5rbGVlbmV4LmNvbYIo
c2VydmVyMS50Y2NlYXN0Lnd3dzIuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVy
MS50Y2N3ZXN0Lnd3dzEuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVyMS50Y2N3
ZXN0Lnd3dzIuY20uYXBzYS5rbGVlbmV4LmNvbYIgc2VydmVyMS53d3cxLmNtLmFw
c2Eua2xlZW5leC5jb22CIHNlcnZlcjEud3d3Mi5jbS5hcHNhLmtsZWVuZXguY29t
gihzZXJ2ZXIyLnRjY2Vhc3Qud3d3MS5jbS5hcHNhLmtsZWVuZXguY29tgihzZXJ2
ZXIyLnRjY2Vhc3Qud3d3Mi5jbS5hcHNhLmtsZWVuZXguY29tgihzZXJ2ZXIyLnRj
Y3dlc3Qud3d3MS5jbS5hcHNhLmtsZWVuZXguY29tgihzZXJ2ZXIyLnRjY3dlc3Qu
d3d3Mi5jbS5hcHNhLmtsZWVuZXguY29tgiBzZXJ2ZXIyLnd3dzEuY20uYXBzYS5r
bGVlbmV4LmNvbYIgc2VydmVyMi53d3cyLmNtLmFwc2Eua2xlZW5leC5jb22CKHNl
cnZlcjMudGNjZWFzdC53d3cxLmNtLmFwc2Eua2xlZW5leC5jb22CKHNlcnZlcjMu
dGNjZWFzdC53d3cyLmNtLmFwc2Eua2xlZW5leC5jb22CKHNlcnZlcjMudGNjd2Vz
dC53d3cxLmNtLmFwc2Eua2xlZW5leC5jb22CKHNlcnZlcjMudGNjd2VzdC53d3cy
LmNtLmFwc2Eua2xlZW5leC5jb22CIHNlcnZlcjMud3d3MS5jbS5hcHNhLmtsZWVu
ZXguY29tgiBzZXJ2ZXIzLnd3dzIuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVy
NC50Y2NlYXN0Lnd3dzEuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVyNC50Y2Nl
YXN0Lnd3dzIuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVyNC50Y2N3ZXN0Lnd3
dzEuY20uYXBzYS5rbGVlbmV4LmNvbYIoc2VydmVyNC50Y2N3ZXN0Lnd3dzIuY20u
YXBzYS5rbGVlbmV4LmNvbYIgc2VydmVyNC53d3cxLmNtLmFwc2Eua2xlZW5leC5j
b22CIHNlcnZlcjQud3d3Mi5jbS5hcHNhLmtsZWVuZXguY29tghlzdGFnZS5jbS5h
cHNhLmtsZWVuZXguY29tghdzdGFnZS5jbS5rbGVlbmV4LmNvbS5teYIVc3RhZ2Uu
Y20uc2NvdHQuY29tLm15giB0Y2NlYXN0Lnd3dzEuY20uYXBzYS5rbGVlbmV4LmNv
bYIgdGNjZWFzdC53d3cyLmNtLmFwc2Eua2xlZW5leC5jb22CIHRjY3dlc3Qud3d3
MS5jbS5hcHNhLmtsZWVuZXguY29tgiB0Y2N3ZXN0Lnd3dzIuY20uYXBzYS5rbGVl
bmV4LmNvbYIVd3d3LmNtLmtsZWVuZXguY29tLm15ghN3d3cuY20uc2NvdHQuY29t
Lm15ghh3d3cxLmNtLmFwc2Eua2xlZW5leC5jb22CFnd3dzEuY20ua2xlZW5leC5j
b20ubXmCFHd3dzEuY20uc2NvdHQuY29tLm15ghh3d3cyLmNtLmFwc2Eua2xlZW5l
eC5jb22CFnd3dzIuY20ua2xlZW5leC5jb20ubXmCFHd3dzIuY20uc2NvdHQuY29t
Lm15MA0GCSqGSIb3DQEBCwUAA4IBAQAgA3S6OHLISfiv0ebTowSZMWL8QKwZzQmh
ASdb3gAcB5AoY6zu/pmYp+WYMl9LtHv4842QWq5GY2DDfZ95kuokivgPpXEuFX43
TTFmoe38qZACK9ednOUH+zML02v7xmdD8ov7i/CS1i8pv1OEXjj2OWOCFzRSxelH
S8DyULFDzagbKob0QNW9nLVNSjdvdRusfCvs5mEFge22+CArUp/6WZSA5afP0Bsq
/kOchfmk7oNB1okSZ5mmef+8iXRYLUqSCOgHe8KHt3+u2k8qdHMTCREy4D9HC1Ko
C3DWYz2DNF8qVxxjWkFgBEnBhna7j+UhgXicogG1D/BAVoY7yW7Y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNt4iAlcDkK3uSA9SIBQ
AUiWVp/Z8C4EsDQvP42c4uo2TYGc1naBzu2US0bAmx8/seNO+P+R9m9UbqufO2YD
wMjp/MiM9Vw9HDDmZQbfQ1em7RmzPl6wWJN2IsT435svC0rIBRbMOPrLYDPX0nAe
u0mbM9FVTV3Hdgcumlugi3m3Kbuotk784CNlVuTBrNqmuIKCYixfQ3Qu31eNoONo
CTginPlgbwzTzwNsOMOJIuUWfreZtD+Y2Ja7gNH6mY3aZ905KdueeYApL1W2vtuD
DbzqJQEosAX1lXsYZ1c99f/fUm+rlQfKOM5+ofNxoYrojFZxrBCHI/iavBWnOqNO
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200472854239349523301633559053759734666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kimberly-Clark Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cm.apsa.kleenex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24345979651266785242746448126361491210538211439449030108206206597369037399480045506523613844314136383997163799748190640957027904257754041215651991116242019064360919428273385596656380632818117404276939876914091365275483882463783057422768442461200143394716891717724977076549897447181784984769884296856716761970777950047454966783667261006792055449829321345587240345554874971990010594238108218351413957121299248422944834883743145654592684547759377617182103576050079693326787122729753501843404048774657324462123112494128406752274024350346265931941872830982994531774107409949232215560703818420347766381115395374122795224657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							809aa05a99716136864b60d07418f972c5d2b7fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185a32b06d70000040300473045022053dfb7afaae0f6399ef0136939c16fcd78f5fca0122a6ff6fb5e4d557733856202210088b821e731c95d68c0ec5e885bbf30358cf3cf5c37a740eac2ec600df9ee5b4c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185a32b06ee0000040300473045022100f6358824102b8a846ca2b6d3b4c9f10aa0a3024497f186f93ba05fd35f69b873022022572ff3c334fcf0113b20764f5ddf5cbc2d10dbcb65e6215169e0890e0d7f6a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185a32b06cd0000040300473045022100bd74a88d8d384af38f862f8cc4b607e32b118e10da7a76e0ad8294e71231c8fc022061c2cf164eed43d6646451666cbd6703d4b6675b2303815826e46e9244c309b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1507 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.scott.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.cm.scott.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.tcceast.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.tcceast.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.tccwest.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.tccwest.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server1.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.tcceast.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.tcceast.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.tccwest.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.tccwest.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server2.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.tcceast.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.tcceast.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.tccwest.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.tccwest.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server3.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.tcceast.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.tcceast.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.tccwest.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.tccwest.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server4.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cm.scott.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcceast.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcceast.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccwest.www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccwest.www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm.scott.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.cm.scott.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.cm.apsa.kleenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.cm.kleenex.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.cm.scott.com.my'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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