sipfed.gsk.com

- GlaxoSmithKline Services Unlimited -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:1e:4f was issued on by Entrust, Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GlaxoSmithKline Services Unlimited

Organization: GlaxoSmithKline Services Unlimited
State / Province: North Carolina
Locality: Research Triangle Park,
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:1e:4f
Serial Number (int): 1277107791
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 21:85:53:15:14:c6:ec:a3:a8:d9:cf:f9:67:fe:8a:2c:22:9a:e5:cc
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): cd:ae:f6:1e:db:e0:1c:91:d0:ac:e7:0e:1b:c0:ce:f4:27:55:93:5b
Fingerprint (sha256): dc:0f:05:35:39:b7:2e:a4:c8:61:f2:9f:b9:d2:d2:79:03:0d:92:c5:90:f0:78:b5:56:82:74:1a:e7:21:e3:c4

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate sipfed.gsk.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sipfed.gsk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sipfed.gsk.com
wb1.lync.gsk.com
sipfed.srone.com
sipexternal.gskbio.com
sipexternal.viivhealthcare.com
sipfed.stiefel.com
sipexternal.phoenix.com.ar
sipexternal.stiefel.com
sipexternal.srone.com
sipexternal.gsk.com
sipfed.maxinutrition.com
sipfed.gskbio.com
sipfed.viivhealthcare.com
sipfed.phoenix.com.ar
sipexternal.maxinutrition.com
sipexteral.phoenix.com.ar
sipfed.biovesta.com.tr
sipexternal.biovesta.com.tr

Other certificates including the domain name gsk.com

(limited to 100 certificates)
*.mobileadmin-en-in.gskpro.com
access.gsk.com
gsk.com
tts-eu.inrix.com
*.infanrix.pl
www.gsk.com
*.gdsgsk.com
gskstatic.com
fortherecord.payments.us.gsk.com
cert00041-azurecdn.akamaized.net
pricedisclosure.gsk.com
cert00041-azurecdn.akamaized.net
softlaunch-iis.gskinternet.com
cert00017-azurecdn.akamaized.net
naebxnet.gsk.com
*.voltaren.ee
fenistil.ch
aim-api.gsk.com
rewrites.gskinternet.com
cert00017-azurecdn.akamaized.net
cert00041-azurecdn.akamaized.net
incapsula.com
cert00017-azurecdn.akamaized.net
*.voltaren.ee
*.api.portalmedico.appsbrasil.gsk.com
cert00017-azurecdn.akamaized.net
login.gsk.com
incapsula.com
www.gsk.com
*.benlysta.com
incapsula.com
gsk.com
cert00041-azurecdn.akamaized.net
zovirax.se
cert00017-azurecdn.akamaized.net
*.gsk.com.au
*.tesarobio.fr
*.benlysta.com
cerpssapoer.gsk.com
servicenowqa.gsk.com
aquafresh.ca
us-gdc-vsed-read2.gsk.com
openapproval.gsk.com
www.livechat.gsk.com
cert00017-azurecdn.akamaized.net
rewrites.gskinternet.com
*.api.portalmedico.appsbrasil.gsk.com
*.softlaunch-cf65.gskinternet.com
us-gdc-vsed-read2.gsk.com
*.softlaunch-cf65.gskinternet.com
nucalaautoinjector.com
voltaren.fi
accounts-7802711.gsk.com
*.synflorix.kr
lwdev.gsk.com
stage-publish.niquitin.gsk.com
cert00041-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
*.cookies.gsk.com
gskpro.com
cert00017-azurecdn.akamaized.net
cert00017-azurecdn.akamaized.net
us-gdc-vsed-read2.gsk.com
report2.gsk.com
cert00041-azurecdn.akamaized.net
softlaunch-iis.gskinternet.com
cert00041-azurecdn.akamaized.net
ce-jira.gsk.com
incapsula.com
*.casadevacinasgsk.com.br
accounts-7802831.gsk.com
*.gsk.com
gems8test.gsk.com
myconfluencedev.gsk.com
dobleaccion.com
theprotectors.sg
ecs.gsk.com
eagledev.gsk.com
rewrites.gskinternet.com
*.advair.com
*.softlaunch-cf65.gskinternet.com
softlaunch-jboss.gskinternet.com
cert00017-azurecdn.akamaized.net
esft.gsk.com
*.cf5.author.gsk.com
cert00017-azurecdn.akamaized.net
ace.gsk.com
softlaunch-iis.gskinternet.com
uscp.gsk.com
softlaunch-iis.gskinternet.com
cl-cmsadmin.gsk.com
*.chestair.es
pacloud-admin-devtest.gsk.com
019dAM1L40SE02.019d.mgd.msft.net
*.corpsecurity.gsk.com
openinnovation.gsk.com
incapsula.com
talkingabouttdap.com
incapsula.com
cert00041-azurecdn.akamaized.net

Certificate

The complete raw certificate details for sipfed.gsk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIETB8eTzANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMzAyMjgwNjQ0MzJaFw0xNTAyMjEx
MzMyMTdaMIGOMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xpbmEx
IDAeBgNVBAcTF1Jlc2VhcmNoIFRyaWFuZ2xlIFBhcmssMSswKQYDVQQKEyJHbGF4
b1NtaXRoS2xpbmUgU2VydmljZXMgVW5saW1pdGVkMRcwFQYDVQQDEw5zaXBmZWQu
Z3NrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM9qTEz0qK23
PIN5wyjNCz5mo7DAsmMOeij5LgKWMfbNsjAIjExs+nUj1626M9uDR7TrbuNbzFPg
EEnmogDG5VtIBVhm1vOHp9aLygHCTpblhkNTFNntwVxP/TpJgJp/xTbuGveSM+AW
Hc4btAmLf2zGWRzsykbh5goCEfS/jWw+zP4RRFezRNgyrvjLr5toCeg6G3ZQfn06
cBoa5OWdVoJFKGBlYJE5ou8lLlsQ161bk/p6yUmvJOj5jHISg1BTincM40uM4p5z
xBqDOml2gQc7iQrJ1Y/IuZV6GardlorvFIkAqfNhAYbH7gGHU2FjbueGnNJdTeG6
gocHGjbMCnMCAwEAAaOCAyIwggMeMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5l
bnRydXN0Lm5ldC9sZXZlbDFjLmNybDBkBggrBgEFBQcBAQRYMFYwIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MC8GCCsGAQUFBzAChiNodHRwOi8v
YWlhLmVudHJ1c3QubmV0LzIwNDgtbDFjLmNlcjBKBgNVHSAEQzBBMDUGCSqGSIb2
fQdLAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAI
BgZngQwBAgIwggG8BgNVHREEggGzMIIBr4IOc2lwZmVkLmdzay5jb22CEHdiMS5s
eW5jLmdzay5jb22CEHNpcGZlZC5zcm9uZS5jb22CFnNpcGV4dGVybmFsLmdza2Jp
by5jb22CHnNpcGV4dGVybmFsLnZpaXZoZWFsdGhjYXJlLmNvbYISc2lwZmVkLnN0
aWVmZWwuY29tghpzaXBleHRlcm5hbC5waG9lbml4LmNvbS5hcoIXc2lwZXh0ZXJu
YWwuc3RpZWZlbC5jb22CFXNpcGV4dGVybmFsLnNyb25lLmNvbYITc2lwZXh0ZXJu
YWwuZ3NrLmNvbYIYc2lwZmVkLm1heGludXRyaXRpb24uY29tghFzaXBmZWQuZ3Nr
YmlvLmNvbYIZc2lwZmVkLnZpaXZoZWFsdGhjYXJlLmNvbYIVc2lwZmVkLnBob2Vu
aXguY29tLmFygh1zaXBleHRlcm5hbC5tYXhpbnV0cml0aW9uLmNvbYIZc2lwZXh0
ZXJhbC5waG9lbml4LmNvbS5hcoIWc2lwZmVkLmJpb3Zlc3RhLmNvbS50coIbc2lw
ZXh0ZXJuYWwuYmlvdmVzdGEuY29tLnRyMB8GA1UdIwQYMBaAFB7xq4kG+EkPATN3
7hR67hl8kyhNMB0GA1UdDgQWBBQhhVMVFMbso6jZz/ln/oosIprlzDAJBgNVHRME
AjAAMA0GCSqGSIb3DQEBBQUAA4IBAQCKJYS4T9Kwq5kpdXkYczX4EEUvgya0cyua
u0nZaE5xAV/ZE6reHwss/ThceBWFBBAuK94jTZMnJZTjOsq0Ym5Tu/FFLKIW/A/Z
xruRTNNJqyB681OSFAd8f77y6ILmWqVtCPVED8t/tqtcHzMCKWei1DNSFgWSJVv5
sLWzmQ8eDZBd8opr/7UvE+NtB8Qoe409nLJT0JT+OSjnPi7MWEmEAUuSEVkmnOsj
9euqOV+88PUt7MUh/GvPQjwb4KZ/HpmkCvCHu8S2BMZQmt9oANEbBTdGZhba85OE
3KQ4t4SJx+oZGqyOcQJf/DSvI8RXPjSZLuXp+xODu2L9SToQqcgl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2pMTPSorbc8g3nDKM0L
PmajsMCyYw56KPkuApYx9s2yMAiMTGz6dSPXrboz24NHtOtu41vMU+AQSeaiAMbl
W0gFWGbW84en1ovKAcJOluWGQ1MU2e3BXE/9OkmAmn/FNu4a95Iz4BYdzhu0CYt/
bMZZHOzKRuHmCgIR9L+NbD7M/hFEV7NE2DKu+Muvm2gJ6DobdlB+fTpwGhrk5Z1W
gkUoYGVgkTmi7yUuWxDXrVuT+nrJSa8k6PmMchKDUFOKdwzjS4zinnPEGoM6aXaB
BzuJCsnVj8i5lXoZqt2Wiu8UiQCp82EBhsfuAYdTYWNu54ac0l1N4bqChwcaNswK
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277107791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-28 06:44:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-21 13:32:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Research Triangle Park,'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlaxoSmithKline Services Unlimited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sipfed.gsk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26183746649687480636011263680580443296349709537916495374519224944151782662745827107725107952876750274415839904988498436183872281612576188557364471527776076506359947245714798809123635363645447444079522491018280062294205930146812533351607174078817037676199441553173715919654640582852675967634174827039554773847914387265960819378799266680626396173335191452952225268739053149852789722033308178154748968831668576851171496992667172807290668109314526153848537900189905181081186014138885132068730366576702280203913659526375654135229849753689264146676280038806832792384163716456538421636651533900325659007006250823239185730163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.gsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb1.lync.gsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.srone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.gskbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.viivhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.stiefel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.phoenix.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.stiefel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.srone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.gsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.maxinutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.gskbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.viivhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.phoenix.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.maxinutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexteral.phoenix.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.biovesta.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.biovesta.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2185531514c6eca3a8d9cff967fe8a2c229ae5cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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