www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk

- The Hongkong and Shanghai Banking Corporation Limited -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0e:b2:af:fa:55:80:86:0d:8d:46:fd:49:29:11:c9:79 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hongkong and Shanghai Banking Corporation Limited

Company registration number: 00173611 - 000
Organization: The Hongkong and Shanghai Banking Corporation Limited
Organization unit: GPEV www hkg2vl0937-mx p2g netd2 hsbc com hk 2017
State / Province: Hong Kong
Locality: Central District
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b2:af:fa:55:80:86:0d:8d:46:fd:49:29:11:c9:79
Serial Number (int): 19536990036990890533761799710521280889
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:b8:3b:26:93:9c:9b:0f:64:cb:eb:31:2d:a8:c8:39:ce:81:7d:6a
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): fa:7e:db:4f:e8:99:65:bc:3f:39:dc:32:31:5b:08:50:ae:fa:1f:ad
Fingerprint (sha256): 00:39:91:6b:d5:ed:7f:cd:54:98:65:14:56:41:a6:b3:74:2c:f8:50:36:2d:06:25:b7:55:1b:64:21:2c:2a:02

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk

Other certificates including the domain name hsbc.com.hk

(limited to 100 certificates)
www.hkgv2ls0033-ph-pprod2-security.p2g.netd2.hsbc.com.hk
www2.prodlike-site2.security.p2g.netd2.hsbc.com.hk
www.hsbcinsurance.com.cn
www.hkg2vl1719-mx-security.p2g.netd2.hsbc.com.hk
cdn.perf.hsbc.com.hk
www.epspps.hsbc.com.hk
www.hkgv2ls0199.p2g.netd2.hsbc.com.hk
www.hkg2vl1779-gb-fg.p2g.netd2.hsbc.com.hk
www.hkl20045318.p2g.netd2.hsbc.com.hk
www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk
asp.fxresearch.investment.hsbc.com.hk
www.my-dev-gws.p2g.netd2.hsbc.com.hk
www.hkg2vl0653-au.p2g.netd2.hsbc.com.hk
tmd-dev.hsbc.com.hk
www.hkg2vl1849-cn-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0942-us.p2g.netd2.hsbc.com.hk
mkd.ebanking.hsbc.com.hk
impsuat.hsbc.com.hk
www.hkg1vl0199.p2g.netd2.hsbc.com.hk
www.env615.qualityassurance.ebanking.hsbc.com.hk
mkdlcs.qualityassurance.ebanking.hsbc.com.hk
www.qualityassurance.ebroking.hsbc.com.hk
www.hkg2vl1720-ca-security.p2g.netd2.hsbc.com.hk
dco-mx-offers-uat.hsbc.com.hk
www.hkg2vl1640.p2g.netd2.hsbc.com.hk
www.hk845.p2g.netd2.hsbc.com.hk
mi.qualityassurance.ris.hsbc.com.hk
www.inmjoeyuat.p2g.netd2.hsbc.com.hk
GBV00990.gsslp.hsbc.co.uk
www.hkgv2ls0312.p2g.netd2.hsbc.com.hk
www.hkl20090755-sa-security.p2g.netd2.hsbc.com.hk
www.hkg2vl1746-ca.p2g.netd2.hsbc.com.hk
om.hkl20045269.p2g.netd2.hsbc.com.hk
mfxweb-sit.hsbc.com.hk
www.hkgv2ls0165-ph.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0497-fr.p2g.netd2.hsbc.com.hk
dev.risk-profiling-questionnaire.hsbc.com.hk
www.wrs.hsbc.com.hk
www.hkg2vl1676-lk.p2g.netd2.hsbc.com.hk
dco-cc.hsbc.com.hk
devcluster.api.p2g.netd2.hsbc.com.hk
www.hkg2vl0829-eu.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0745-je.p2g.netd2.hsbc.com.hk
www.hkl20044714-lk-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0574-eu.p2g.netd2.hsbc.com.hk
gr-dit.hsbc.com.hk
hkskmgdcvi057.hsbc.com.hk
qualityassurance-amh-gbb-preprod2.p2g.netd2.hsbc.com.hk
www.cd600.p2g.netd2.hsbc.com.hk
www.ap554.p2g.netd2.hsbc.com.hk
www.env631.qualityassurance.ebanking.hsbc.com.hk
www.na318.p2g.netd2.hsbc.com.hk
fusion-lending-uat.hsbc.com.hk
mkdu-qualityassurance.ebanking.hsbc.com.hk
start4.hsbc.com.hk
www.assetmanagement.hsbc.com
www.ap556.p2g.netd2.hsbc.com.hk
cdn.hbbm-aem-tko-lp.hsbc.com.hk
smtp2-mx.hsbc.com.hk
payme-cms-secure.hsbc.com.hk
uat-investments3.personal-banking.hsbc.com.hk
if-api-corp-sit-ebtn.hsbc.com.hk
www.hkgv2ls0405-hk.p2g.netd2.hsbc.com.hk
www.env606.qualityassurance.ebanking.hsbc.com.hk
www.visatokenotp.qualityassurance.hsbc.com.hk
www.eu532.p2g.netd2.hsbc.com.hk
da-pbconnect-dev.privatebanking.hsbc.com.hk
www.hkg2vl0479-je.p2g.netd2.hsbc.com.hk
www.hkg2vl0913-au.p2g.netd2.hsbc.com.hk
www.gbbbanking.p2g.netd2.hsbc.com.hk
www.hkg2vl1660-ph.p2g.netd2.hsbc.com.hk
in-sit.hsbc.com.hk
www.ap530.p2g.netd2.hsbc.com.hk
www.security.online-banking.hsbc.com.hk
www.tradetracker.business.hsbc.com.hk
mkdlcu.qualityassurance.ebanking.hsbc.com.hk
www.hkl20044720-lk.p2g.netd2.hsbc.com.hk
www.hkl20043051.p2g.netd2.hsbc.com.hk
www.dco-loans-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20066668.p2g.netd2.hsbc.com.hk
www.ebroking.hsbc.com.hk
pilot.hsbc.com.vn
www.hsbc.com.sg
www.hkg2vl0541-ca.p2g.netd2.hsbc.com.hk
www.hkg2vl1382-eu.p2g.netd2.hsbc.com.hk
qualityassurance-amh-gbbsp-preprod.hsbc.com.hk
skm.services.online-banking.hsbc.com.hk
www.hkg2vl1741-us.p2g.netd2.hsbc.com.hk
www.hkl20044727-je.p2g.netd2.hsbc.com.hk
payme-cashout-secure.hsbc.com.hk
ibps.hsbc.com.hk
www.dco-ao-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20045172.p2g.netd2.hsbc.com.hk
dspuk-ci2-ext.hsbc.com.hk
ext-remoteaccess.hsbc.com.hk
pages.messaging.hsbc.com.hk
smtp1.hsbc.com.hk
mt-sit.hsbc.com.hk

Certificate

The complete raw certificate details for www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BRHH0TWzMFAY2eFs4pA
TUcAubMHYRiqudjtnXmJwsEDfgFod//sQKwZmdemkU1m5U/5N1Oivef/blmkZVlw
gEf6jy3OthUnGJCa9hXoAEY5pcvnU619J+VYKIJQYYqRfAA5HSP4EahUccabMkzy
xSogpuzFvK3HJfSCEqmWuqMWiGsFcy7f9KajQpNBsLNKLyXA9F/itCF+pVrKohZK
rk1Q6hNlH2hI50mAOphj/UgR9RytLaARYPrX1OFI9yPuu2wZVcuTORftGfAT0mey
ql0MLyQ5IWTLo46F+SRTEx/+EbBrdOyKpBDJowHFlJh+AlbRHDHO0A0HNQBjB8zs
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19536990036990890533761799710521280889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00173611 - 000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hongkong and Shanghai Banking Corporation Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GPEV www hkg2vl0937-mx p2g netd2 hsbc com hk 2017'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28287379678552364529522737003518446068735935729305267299844629336429628126524514786158988068505450395599192898757933331407452559077701987926782699220819018466740561768975938671878760691824393982791261264044354195461365358958449577031975359793753554866413588426009678461945544546592128239832798317029976853924007352038102106088093524242981265793365055184048141531286202178169754330886182895334404143867104697357772381781841553161346024690249137991619666546461841814161420200555598507513108571425556702297096440883881330287429233743352052775452725487801023431869949819561181605196351820907891715589355222461352147479791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81b83b26939c9b0f64cbeb312da8c839ce817d6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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