bastion.chinacloudapi.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 01:e9:4b:95:77:b3:55:e2:20:c8:ad:c1:3a:94:cd:37 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e9:4b:95:77:b3:55:e2:20:c8:ad:c1:3a:94:cd:37
Serial Number (int): 2540566186585538673948125615585807671
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 45:42:0a:4f:21:fd:d0:6d:7e:ad:13:d6:f2:99:b7:34:40:7e:e0:a8
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): a6:ba:cd:85:b6:58:27:ac:46:da:99:3b:1c:96:76:cb:38:d0:4e:83
Fingerprint (sha256): 00:3d:ec:d5:05:27:0d:a1:a2:7c:93:d2:d7:f1:47:0a:c8:72:a6:23:37:ad:56:e7:61:52:a2:46:2a:54:5d:81

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate bastion.chinacloudapi.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bastion.chinacloudapi.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bastion.chinacloudapi.cn
bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d.bastion.chinacloudapi.cn
bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d-0.bastion.chinacloudapi.cn
bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d-1.bastion.chinacloudapi.cn

Other certificates including the domain name chinacloudapi.cn

(limited to 100 certificates)
7172e270-f90c-4648-9208-32bbc2670127.vpn.chinacloudapi.cn
ee3321ad-e56d-41a7-a678-3e004a50e529.vpn.chinacloudapi.cn
b0471b81-9eee-49f9-b45b-47521ad9532b.vpn.chinacloudapi.cn
04a23cf8-2b2f-4083-96f5-0f206ade4b85.vpn.chinacloudapi.cn
a4f3bce8-db96-4c84-989e-7b1056647392.vpn.chinacloudapi.cn
be5f4ca3-f9ab-4020-863e-6dd34db02d5f.vpn.chinacloudapi.cn
8bec61ad-da37-4ff6-9ab4-9e7454fa3d7d.vpn.chinacloudapi.cn
bf23be41-a32f-4679-a1c1-21d0aaf41732.vpn.chinacloudapi.cn
*.account.core.chinacloudapi.cn
12ed4e5371fb.database.chinacloudapi.cn
e36db2eb-6731-4b72-a65b-89b773a7a136.vpn.chinacloudapi.cn
gwpdctosf-c2ecfb54b6b9.worker.database.chinacloudapi.cn
90e1e25e-103c-4431-8faa-3c7278aa20b8.vpn.chinacloudapi.cn
chinae3-dsms.dsms.core.chinacloudapi.cn
cn-p-sha20-abd1c5c1-api.p.chinacloudsites.chinacloudapi.cn
0ecdcbe6-28ef-497c-9048-738f50d2f5ff.vpn.chinacloudapi.cn
3cb9cc23-9ed5-4ab8-a884-26a526259a7a.vpn.chinacloudapi.cn
3e71df25-04b5-4d4c-a05f-2bc28e1592ef.vpn.chinacloudapi.cn
dscm.core.chinacloudapi.cn
maconfig.geneva.ests.chinacloudapi.cn
6d5bd3aa-935d-4952-8a3c-8a4c7daa4118.vpn.chinacloudapi.cn
cn-p-sha20-12feb018-api.p.chinacloudsites.chinacloudapi.cn
cc0f18c4-0de4-48fa-8c30-b93a860ab96d.vpn.chinacloudapi.cn
Tenant.geneva.keyvault.redis.cache.chinacloudapi.cn
364c8fcf-4f2f-4d86-8344-95e14555df5e.vpn.chinacloudapi.cn
metricsclient.geneva.core.chinacloudapi.cn
2c927f95-4290-49a0-9f02-217c993f9071.vpn.chinacloudapi.cn
cn-p-sha20-03346dbd.st.p.chinacloudsites.chinacloudapi.cn
da83c878-62bf-493e-b6c3-af3c0e7500e2.vpn.chinacloudapi.cn
secretencryption.msgraph.chinacloudapi.cn
*.blob.core.chinacloudapi.cn
2c46ebe5-0166-4344-8c07-cb6c4204b0bf.vpn.chinacloudapi.cn
dev-stey-lab.chinanorth2.cloudapp.chinacloudapi.cn
b3519172-09d5-4a02-841e-5af9a1eb457c.vpn.chinacloudapi.cn
tr68.chinanorth2-a.control.database.chinacloudapi.cn
8fc50e92-203e-4b99-bd25-20cdce17a452.vpn.chinacloudapi.cn
aad.graphwebhook.chinacloudapi.cn
cd8d0249-2af5-4daf-bbe0-a0baaf622dcd.vpn.chinacloudapi.cn
c954356f-8608-42d7-9d9d-e54ece7843c8.vpn.chinacloudapi.cn
*.redis.cache.chinacloudapi.cn
9cd03cc8-fd18-446d-bba8-5cc5aae562e7.vpn.chinacloudapi.cn
mdm-out.groupsrp.chinacloudapi.cn
ae8d018af238.database.chinacloudapi.cn
825ef15f-6154-4ef6-b4dc-e06b77c6d17b.vpn.chinacloudapi.cn
f4be3ca0-3aaa-42e0-9dac-98c3e97ec141.vpn.chinacloudapi.cn
tr13.chinaeast2-a.worker.database.chinacloudapi.cn
37925468-7faf-4ad9-b335-3964f91d3234.vpn.chinacloudapi.cn
c8482cba-81c2-4592-a4b5-a2f786eaf5b7.vpn.chinacloudapi.cn
bastion.chinacloudapi.cn
aadprovisioning.chinacloudapi.cn
2ff5f6ec-65af-4f23-9b7a-a8d59675eeb6.vpn.chinacloudapi.cn
022e77b9-4c4b-43cd-9050-60ccbac15185.vpn.chinacloudapi.cn
shaprdstr01.fc.core.chinacloudapi.cn
adnsarmfe.chinacloudapi.cn
66e2ff8e-63a7-4709-82c3-6628c11ab2f1.vpn.chinacloudapi.cn
db41a7fc-c6cd-41d4-a6ae-b5a7c233d1bb.vpn.chinacloudapi.cn
mlcssltesty6lfxo.chinaeast2.cloudapp.chinacloudapi.cn
4b39d25d-e6f9-4f82-8cdf-28fb905e90ad.vpn.chinacloudapi.cn
aa860c94-0f58-44cd-8cf4-2901fecd7826.vpn.chinacloudapi.cn
de7b7cdf-da21-4781-8ca2-56abede46ca0.vpn.chinacloudapi.cn
chinaeast2-a.control.database.chinacloudapi.cn
202c7b5f-c22e-4e7e-929b-cf0d9aa57cb1.vpn.chinacloudapi.cn
69f2edca-d121-4c95-9c47-57d9aced9858.vpn.chinacloudapi.cn
8c0aade9-66f4-434d-8e22-fec0c56398ec.vpn.chinacloudapi.cn
48925e61-e062-4a2a-a3dc-0a7d285e1716.vpn.chinacloudapi.cn
26266649-b413-4036-aaec-a79e83cd70e2.vpn.chinacloudapi.cn
c1d98dae-0103-48b7-81ba-120b31a52d20.vpn.chinacloudapi.cn
799dacb5-20a2-440b-8865-1d43e8f416e0.vpn.chinacloudapi.cn
ee1ee6a8-4059-4b08-bc88-e7e7b666b250.vpn.chinacloudapi.cn
0649c7ea-7247-47af-8399-e13f221528d0.vpn.chinacloudapi.cn
12b91b57-3161-4faf-a010-8d866aed39a1.vpn.chinacloudapi.cn
bjs20prdapp02.fc.core.chinacloudapi.cn
85ee9954-6005-4cdf-ba7c-dec15eaeee8a.vpn.chinacloudapi.cn
*.redis.cache.chinacloudapi.cn
f7e25ae2-1ddb-421c-aa41-c7acedcf480b.vpn.chinacloudapi.cn
cn-p-bjs20-5a6eda17-api.p.chinacloudsites.chinacloudapi.cn
a43572a5-2498-4b9d-9f26-5d71eb303bdd.vpn.chinacloudapi.cn
96d9e135-1cfe-4de1-b042-4aa7c98b960e.vpn.chinacloudapi.cn
ab6d3d0f-c57e-437e-b7d6-0d1fdf6eba10.vpn.chinacloudapi.cn
32e261fb-c18d-4031-acc3-daf3aeee7235.vpn.chinacloudapi.cn
618b848b-605c-44bb-9206-092c1426f4ec.vpn.chinacloudapi.cn
ed925c2dd1d3.database.chinacloudapi.cn
mlcssltesthe641b.chinaeast2.cloudapp.chinacloudapi.cn
enc.p.chinacloudsites.chinacloudapi.cn
35dbfc24-b763-4ea7-a010-ebfa61130049.vpn.chinacloudapi.cn
9e5ab0af-18be-404f-9abd-d2bfd4ed5380.vpn.chinacloudapi.cn
02cffaa0-1402-4a74-9043-e190adef1bc0.vpn.chinacloudapi.cn
aadmgmt.chinacloudapi.cn
1769c4f0-d6d9-42d5-ae91-3d85dcbd9026.vpn.chinacloudapi.cn
*.analysis.chinacloudapi.cn
1eeeb5e0-8986-4de9-b776-5ce35d694983.vpn.chinacloudapi.cn
4a4218c4-e35d-4965-a5d6-e8e1bca6e0aa.vpn.chinacloudapi.cn
sh3uufc.fc.core.chinacloudapi.cn
49098955-8d1d-4e6e-9cd9-0cef8691aafd.vpn.chinacloudapi.cn
secretstoremanagementcert.prod.wadi.chinacloudapi.cn
tr189.chinaeast2-a.worker.database.chinacloudapi.cn
54c79a08-76a3-4b72-ae36-9549727bedde.vpn.chinacloudapi.cn
df5b96d9-0c82-431e-9eec-72c93c393a0a.vpn.chinacloudapi.cn
tr32.chinaeast2-a.worker.database.chinacloudapi.cn
d87ff4bd-033c-453b-a759-566486d4a27c.vpn.chinacloudapi.cn

Certificate

The complete raw certificate details for bastion.chinacloudapi.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9iCGjH+xrMkpWYf12lB
SkRHnJ+bfK4BdycotRFDcI7sZV0AqF0mo7uT5+FSaRqSqUnmXs1Vo35pWlUBn19t
y9qsYqTmM1loc4bNLF4Pg5hI6rB/VEsQjbuxsRN8c1IyCYFAzHxHeeYswayfMcnn
D/u0yKwpo1da9rmNh6tR+fjs1/oeZpzz/Pz4+qoQs+N+WT2wrOD+B3QHTj6T+ZR7
VhXh1VyHhVQEUigkZuM9b3Q62/qjihgdOu1DZEoONLhhjwvPBeJxR49bEtJPW0kO
mta94snTq/wqYUujbiUsouqnLk1Awhh+zb3L8IGXJQuUYU5SrYP2uOG6FSO3CqvO
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2540566186585538673948125615585807671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bastion.chinacloudapi.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21693514327791446589625522082004458882188421589483446955543687020545062374559778213543906174547819858942149023982442934167784001356377171929274248053984900779645008940234609240354291429253556607875001346229725365062595144813592184654466266142366461263787186371066437373562741638575306074232726494141003971520594441878215637478689558674842288357278046630327536205963015470979956836637875491066280959891605391598558923925821564475762536793198162514662593946338070423227001868571537025716815674712655876372704944462807749946025136513523848040072730628133715780398549026652654540254685944014833673006119294220714585607853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45420a4f21fdd06d7ead13d6f299b734407ee0a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bastion.chinacloudapi.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d.bastion.chinacloudapi.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d-0.bastion.chinacloudapi.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bst-9a75415f-5a6f-4e11-a659-cbbcb883e96d-1.bastion.chinacloudapi.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0072dce0ab85a9c8c92de1aa0fd6ef1b8f6ebc57b4959d046c3950d1e315f7019d8b797d3d936bc3e6270526dede8b01fd4734dc6c3622abd7b6622ef282f87c4e198cb3ec931cffbc5af89236c7aebe70352c43e8f8c1747e6ccb3e6d77eafd11d77bbaef782ecb4d6f9ed5960a859ac87b620baa3eb50aba9375affb403e32282477c0f1eed3f80925d731301a793a07f83138c5f97ffd9815a7c5fa3510fd316a6effed4375b3b95518e5e652f8e0e140d05b1d14d677b8794111d2b280bf517792cca1cbd4ed0280875b8ef6f95b2defd2a09af7c0009bdb124fc7b9666629ee4bfa8d4aec00d4b7a8ddaaabbfbf490f655c2d19aee905f9bdfa44a43adaff