icts-ctvcs-e.unog.un.org

- United Nations -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5d:8d:fd:82:be:fb:7e:73:7d:35:61:4a:fc:13:ac:55 was issued on by COMODO CA Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Nations

Organization: United Nations
State / Province: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:8d:fd:82:be:fb:7e:73:7d:35:61:4a:fc:13:ac:55
Serial Number (int): 124355459273447626998011471839427275861
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 13:98:93:72:ba:44:c6:25:5e:1a:68:85:4c:e3:b7:32:fb:56:1f:b1
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): a4:15:fc:d5:60:de:df:da:15:d9:79:80:ed:17:e2:b7:53:ef:a3:93
Fingerprint (sha256): b2:d2:be:90:8d:d2:bd:d6:2b:17:8c:47:47:59:b2:bc:5b:3d:2f:dd:f6:3f:73:ad:43:4e:d1:4d:f1:16:ca:bc

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate icts-ctvcs-e.unog.un.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icts-ctvcs-e.unog.un.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icts-ctvcs-e.unog.un.org
icts-ctvcs-e.unog.ch
icts-ctvcs-e2.unog.ch
icts-ctvcs-e2.unog.un.org
jabberguest.unog.ch
unog.ch
unog.un.org
vcsedge.unog.ch

Other certificates including the domain name un.org

(limited to 100 certificates)
*.un.org
*.un.org
lpk-cms.ilearn.un.org
kh.one.un.org
lpk-cms.ilearn.un.org
cims-test.so.one.un.org
5726971199750144-fe1.pantheonsite.io
ilearn-cms.umoja.un.org
cerf.un.org
5679778661138432-fe3.pantheonsite.io
un.org
ask.un.org
jo.one.un.org
un.org
dprkorea.un.org
afghanistan.un.org
untermportal.un.org
mw.one.un.org
bkkuccx02.escap.un.org
ask.un.org
ask.un.org
*.qa.un.org
syria.un.org
5673073118281728-fe4.pantheonsite.io
hcc-hpsb-training.ilearn.un.org
*.news.un.org
elearning-cms.unstats.un.org
5684961520648192-fe4.pantheonsite.io
ci.one.un.org
*.escap.un.org
sdgprimer.un.org
expccl.ptc.un.org
elearning-cms.unstats.un.org
inspira.un.org
learning.un.org
5726971199750144-fe1.pantheonsite.io
ss.one.un.org
ask.un.org
cims.so.one.un.org
conf.un.org
kh.one.un.org
*.dss.un.org
papuanewguinea.un.org
migrationnetwork.un.org
ungsc-remotesupport.un.org
inspira.un.org
un.org
elearning.un.org
india.un.org
unp.un.org
5673073118281728-fe4.pantheonsite.io
*.dfs.un.org
uniteaware.un.org
peru.un.org
www.tm.one.un.org
lyncsip.dfs.un.org
roadsafetyfund.un.org
research.un.org
lpk.ilearn.un.org
ilearn-cms.umoja.un.org
ilearn.un.org
zm.one.un.org
research.un.org
expecl.video.un.org
mail.stc.un.org
apidocs.cna.com
*.unite.un.org
enterpriseenrollment.dfs.un.org
un-az.org
shop.un.org
countryteam.org
officewebapp.dfs.un.org
5673073118281728-fe4.pantheonsite.io
cims.so.one.un.org
roadsafetyfund.un.org
hcc-cms.ilearn.un.org
digitallibrary.in.one.un.org
journal.qa.un.org
morocco.un.org
crmlearning.un.org
crmlearning-cms.un.org
*.umoja.un.org
cims.so.one.un.org
af.one.un.org
cameroon.un.org
*.dfs.un.org
service.ilearn.un.org
fdp.un.org
remote.dfs.un.org
hcc-cms.ilearn.un.org
remote.dfs.un.org
lpk-cms.ilearn.un.org
cm.one.un.org
hcc-hpsb-training.ilearn.un.org
cd.one.un.org
mm.one.un.org
vdi.dfs.un.org
www.un.or.th
ci.one.un.org
5673073118281728-fe4.pantheonsite.io

Certificate

The complete raw certificate details for icts-ctvcs-e.unog.un.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqwemyX3M8EFGM0tvgYTt
cmkq3fO1z2blmJDCGSPRorzVdPYvatL7WZc1jTDH8PBFMwmpaxEgZU3LMxozQKEF
sVqx1a3nRzVlZTuY420coqrPJsN5c6Dwtg+y543UoVLVJ11z6FUxeewmQmWqqIlS
tu3HIqktfxS+J5Jfk/0Sd90hHVkBuHn11oxsUCphz6ZDXhjpQ+mRR5WXbWR26UNX
bZzanvO/oT3/g2UxBGDOMsM8mA3UNFrHWgYw07lexo6vg9qXq/V0OUf6DJurRlDD
DN1mz4a/bCHNMd9eQ23ZR8v4ysPl4lH6iZDSq+a3i0pu5oEyCf2/nLBXBawfJKoG
2ZH4O59f6dwxZJNKnOetx26+zxNmU1tluY2d/t6wQ1E67wicWzVVW2skGGAjxosS
h8FHOYbCvSjw1NskmAb5K+DkirmNoOdYgwnDJp2UwWRC7hCOhjWp02Ldq3b+ClzL
3mBsjpZTdtzf1e9F03oSZtFufWP+rOC5Xk+m7yZcHPXDFcNhm2QBo4mhVTojRHhS
jN+RfAZEHrLcv5VbrFOAge7Pp3U81zPY0JEyjs3ftBW0ugZZvwS5tznlGzQooHOZ
7lCEfEyS/mlM1h7JJqF4jh16Fyz6j8nvW6oiqEszrjJc+fYQqpgn7oRPY9Wo4Gjm
CZ+Tx1psx2L3SZlTaRT20+MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124355459273447626998011471839427275861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Nations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icts-ctvcs-e.unog.un.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697741070965828290994284929645957402859320331226848552862236866592068567638283003885194281664794886863862354064268349806863569539598214797275951231966439476212393610371633473510066088239026012560388199331972868958973711759352361738083492470202312059584100729062647114601952857201452077524784919686795730905855670910255206176472919243081913639315773875583057425968631610891050148631213097956690852090690495923128334022297389170611126305919091266851720481754394410969150951915527278832175911033208978885231734763108961906694134170549853881186069639545781447030197165760104166512701206864176801616923660951355291757133124891206958169611324910549288511696864280183514903860926556539330767231680664988495892830790817846624733220320008698711723095838410431963526695803066449362703812713418194111126798830999968184497581380832730087910772876987065418501404788873495082625273644240571998258446839241425533445495827188974239754482695387611972461951482497816446596566198034456121090227577062777108364514142854289097018080336963346173667903509195283566515206723200402001739570901866122970593891948163370596784236926757724766883469815468333091965819402102196990093584100838279701335798563008625017857741293553170058061983170081162167435063120867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13989372ba44c6255e1a68854ce3b732fb561fb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-ctvcs-e.unog.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-ctvcs-e.unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-ctvcs-e2.unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-ctvcs-e2.unog.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabberguest.unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unog.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsedge.unog.ch'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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