*.gnt-group.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 1d:bb:d8:9c:f1:b0:39:83:35:da:fb:34:40:68:e8:a8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gnt-group.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:bb:d8:9c:f1:b0:39:83:35:da:fb:34:40:68:e8:a8
Serial Number (int): 39522964825175243973283868514747738280
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 29:22:f8:9d:dc:f5:1f:5c:02:5b:25:31:12:9d:2e:22:a6:43:d8:9a
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): c7:5d:6d:91:88:ad:58:46:08:e5:ac:4a:83:e2:c5:d9:c4:f5:7c:d7
Fingerprint (sha256): b1:39:30:b6:36:19:17:f0:6c:68:7f:b3:12:66:3c:9a:64:4a:fc:1f:2b:f5:41:68:03:b9:b8:b6:9a:52:30:43

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.gnt-group.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gnt-group.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gnt-group.com
gnt-group.com

Other certificates including the domain name gnt-group.com

(limited to 100 certificates)
customerportal.uk.rlb.com
*.gnt-group.com
servicedesk.esmsglobal.com
service.littlegarth.org
customerportal.uk.rlb.com
support.homeinstead.ie
service.littlegarth.org
support.brill.com
*.gnt-group.com
ep-sps.gnt-group.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
support.homeinstead.ie
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
service.littlegarth.org
customerportal.uk.rlb.com
customerportal.uk.rlb.com
gnt-group.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.synergyretailsupport.co.uk
production.gnt-group.com
itdesk.ininingroup.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
servicedesk.synergyretailsupport.co.uk
servicedesk.esmsglobal.com
itsupport.hvdgroup.com
itsupport.hvdgroup.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
it.rmk.ee
servicedesk.tpos.co.uk
production.gnt-group.com
itsupport.hvdgroup.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
ep-sps.gnt-group.com
servicedesk.synergyretailsupport.co.uk
*.gnt-group.com
customerportal.uk.rlb.com
servicedesk.esmsglobal.com
gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
itsupport.hvdgroup.com
production.gnt-group.com
soporte.klz.rf.gd
customerportal.uk.rlb.com
*.gnt-group.com
support.homeinstead.ie
gnt-group.com
www.projects.gnt-group.com
itsupport.gnt-group.com
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
support.brill.com
servicedesk.tpos.co.uk
*.gnt-group.com
servicedesk.am-labor.de
itdesk.ininingroup.com
it.rmk.ee
servicedesk.esmsglobal.com
itsupport.gnt-group.com
servicedesk.am-labor.de
customerportal.uk.rlb.com
customerportal.uk.rlb.com
itsupport.gnt-group.com
support.homeinstead.ie
customerportal.uk.rlb.com
www.gnt-group.com

Certificate

The complete raw certificate details for *.gnt-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrjCCBpagAwIBAgIQHbvYnPGwOYM12vs0QGjoqDANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIwMDEzMDAwMDAwMFoXDTIyMDUwMzAwMDAwMFowGjEYMBYGA1UEAwwPKi5n
bnQtZ3JvdXAuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAox+E
DClrRH/tvSFk2lScZicRRlg4xb6g9p9eCTt3gERR8kanliAooM4Yfs56/b7oDjxC
5G+mofMyXcYJvI24ciiUXNCIxJro48L3i08wmsbRcYqUDhkP/VZ2lU7ngrABiqKC
BH7WntiDbY0NdSOYRznpyq+hbLN7f+SZGF3DD2oocElBoE+FSIDXyGd3KA68tcKg
mAC8oun+SNgSODHdwi3yYvRsRtg2mr21pe6+S/7ufof3AeCisrGPN41QNnuC38JN
2zt6mE1JyVdFABn8Mff6Pp6vGdPvTeDDha8KFA5TJXkMbF/0TKc18TTFpWpLLNwn
fKIqnYppn9ocQYW8bYtzsTgD3fjwbC5o9ipRGjaLH+VeB9m8oRYj4Yz/rNK0ap1m
2UDEJtN0G7iY8ZFVNoHem9F8DX8SY2Qst/nUvqVc5ZYcNrd/mAa4+6cIr/n/HfYL
ewSfoaLDcZy7j0NVGtqv2h05JgRJQr9b00NVcSQ2fskZUBY9kpIfxUrIPEbiLDJ7
u8XoJ10qMfpR32vGkGhB6L7LYf69M5xLY/ws99OT+AhzNcA3iXRXbFP0dBotQUPt
SeB0cT5tDqkmMPTRjwuuFBkacUWYgHax0JDvhsAF8D8RKy9/TcFrt0iTA/6lVNan
RmqyihzSVeKyBB965IF5H///R/ArKhDdEQLgC8UCAwEAAaOCA3gwggN0MB8GA1Ud
IwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBQpIvid3PUfXAJb
JTESnS4ipkPYmjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQIC
BzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0
aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNB
LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wKQYDVR0R
BCIwIIIPKi5nbnQtZ3JvdXAuY29tgg1nbnQtZ3JvdXAuY29tMIIB9gYKKwYBBAHW
eQIEAgSCAeYEggHiAeAAdwBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5t
RwAAAW/2GhKDAAAEAwBIMEYCIQCcHCotO9l+b8eVFlKoji6DCr36UQCEsOJOGc+e
7p4AZwIhAIdm3TRDcD5r9VX8xNr0sGtY/y1MeXfzfG/s2iSNG7dvAHYAb1N2rDHw
MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFv9hoSuAAABAMARzBFAiBa3Boi
EuZe7qlIsnc9bO7UOkzzT01LZzcgxurroLXMcAIhAOXTyN49qUTPBoAm5+TltHuK
UGduDzx7nBfyUZxtpEEEAHUAIkVFB1lVJFaWP6Ev8fdthuAjJmOtwEt/XcaDXG7i
DwIAAAFv9hoSbgAABAMARjBEAiAtz9KbDeluvEKBg5m0hVFSx6XjRNToym4qneHb
F5JiIQIgHWiRYwCM6Gk/PDZSlGxRZ2CY1Yi9jubwdrrFjR5PGXwAdgBVgdTCFpA2
AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW/2GhJLAAAEAwBHMEUCIQD5JEP2
jMs8/h1aWAQ531+C5Evd61uQ7qo17xPb4XeCLwIgN+XG3HAb67fuY54UyjGrN9aG
Pg+sbcC8ZpMNbplwJPAwDQYJKoZIhvcNAQELBQADggEBAKFcecYStJ8a/OQjDixP
ZBnh1uI7fihRR4V6G4fFfcpFTJ+SFbcNqHFe/64qbIAQubuMIGjcjO1z15TMEB7h
wvw14s909tMS2uZmhZ/sLFDX0nQPnwwivKM1yfIqdcbS9J42OUU0X+FwNQZw+/yI
Sh5aJwi3MvSbhcHqvyBdDXnqTOGPSCTVeH9n0Yot/xq3YhJDpbgUcFHATtGn4UHb
jvlwe3/syOkmzde/ja59P4uajplFZLiXLDQ8bo6/eMNHORYreyTUWC+pMYmqEGgD
ImV94BRqzCj6FZYvF7zsSLPURCqgtombEEwCXV2KTCBWU0XKlV618P45FlsQmPdD
4JY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39522964825175243973283868514747738280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gnt-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665484222500007343003132233435919616600493719432358869823039588202064362476734772105562536184897312714823850847813203505662716727905466111933478495848343379477807826807179153480225394600627018846999314466063975069573825579642036063117072628549801843291008612874589728083831115902827805405266844229035545917363640523245405817348912434957765148448921488036692270956466270893006719926968846905966483506938418295837043564627459331908188582722695359403803216718670411415594382728960332911541792704676885412077102241973074427888625582950696300796111478194410897840256028492672320242488024804433734567459293098782120429672915892111437296865722678024153004350831526462130907536172170682165853571045530545228865202063626117659730115930385438728663273403212390040502714020236069305440418865630496648708450379754014590224997157870157164335757669585298090172054184285824946760988463689216129687652519725792309577660033274921054135794314006683117519194398387371638318769169257172310405821245727350192342957141202325596288586158717730509803208814164951924645539687826846644091348910071100880499988803000016231056082934060637490256768288664061556910648418795371224819872353011226440474726350928263559488320358241945436408422839895059798889924135877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2922f89ddcf51f5c025b2531129d2e22a643d89a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnt-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnt-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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