debitcard-api.bnymellon.com
- The Bank of New York Mellon -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:11:76:dc:7e:47:7c:5b:ae:11:20:a8:ef:9b:5d:0b was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Bank of New York Mellon
Organization:
The Bank of New York Mellon
Organization unit: MHH
Organization unit: MHH
State / Province:
Pennsylvania
Locality: Pittsburgh
Country: US
Locality: Pittsburgh
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:11:76:dc:7e:47:7c:5b:ae:11:20:a8:ef:9b:5d:0bSerial Number (int): 18699871781194430560925159858294709515
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 93:f8:bc:38:fa:1f:51:cf:26:3d:33:08:45:ac:74:c7:1e:78:cd:a0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 0c:ec:96:cf:f6:ac:f2:07:c0:5e:6b:ff:d9:aa:d9:74:20:7c:e1:b2
Fingerprint (sha256): 00:4d:39:0f:e5:d9:b1:bd:bf:33:ac:8a:50:24:e5:9c:11:9b:fa:12:12:9e:00:10:5a:84:a7:81:a0:70:83:88
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate debitcard-api.bnymellon.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for debitcard-api.bnymellon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
debitcard-api.bnymellon.com
Other certificates including the domain name bnymellon.com
(limited to 100 certificates)
demo-directbizmonitor.qa.bnymellon.com
billpayadvantage.bnymellon.com
csd.bnymellon.com
M-DCAT.BNYMELLON.COM
supplier.qa.bnymellon.com
xat-res-netx360.bnymellon.com
connectfiletransfer.bnymellon.com
brms.bnymellon.com
dev-marketprofiles.bnymellon.com
*.bnymellon.com
wm-proxyin-uat.qa.bnymellon.com
lionremote-bxp2.qa.bnymellon.com
ecommerce.bnymellon.com
xat-sagepointfinancial-netxinvestor.bnymellon.com
xat-jefferies-netxinvestor.bnymellon.com
BENPAY.DEMO.BNYMELLON.COM
xuat-syndicatedcapital-netxinvestor.bnymellon.com
xuat-harris-netxinvestor.bnymellon.com
debitcard-api.bnymellon.com
uat-connectaisapp.bnymellon.com
cumulus-migration-for-michelle-dmz1.qa.bnymellon.com
iaw.bnymellon.com
ecommerce-dev.bnymellon.com
xat-searleco-netxinvestor.bnymellon.com
ppc.bnymellon.com
authenticate.bnymellon.com
xuat-henley-netxinvestor.bnymellon.com
xuat-juliusbaer-netxinvestor.bnymellon.com
jpass10.bnymellon.com
ae-routing-demo.qa.bnymellon.com
dcat-ciservices.qa.bnymellon.com
remote2.bnymellon.com
awh-ds.bnymellon.com
StructuredCreditConnection.BNYMellon.com
rj101nsgw.bnymellon.com
netxservices.bnymellon.com
remote.bnymellon.com
xat-test-netxinvestor.bnymellon.com
vdsna.bnymellon.com
gm-fxanalytics.bnymellon.com
design.dev.bnymellon.com
xat-gmers2-static.bnymellon.com
odb.bnymellon.com
topsdcat.bnymellon.com
m-privatebanking.bnymellon.com
wbcrparam.bnymellon.com
shaffi-testing5.qa.bnymellon.com
xat-wbcrparam.bnymellon.com
xat-app-liquiditydirect.bnymellon.com
esfsf.qa.bnymellon.com
ccenter.pershing.com
xat-tic-netxinvestor.bnymellon.com
QSEPROD.bnymellon.com
appstudio-api-legacy.bnymellon.com
compliance.bnymellon.com
cctcfindm.mar2020.bnymellon.com
fxanalytics-demo.bnymellon.com
xat-nexen.bnymellon.com
ngej1cs.bnymellon.com
connectais.qa.bnymellon.com
surpasisvc.bnymellon.com
SecuritiesDirectPlus-UAT.bnymellon.com
wca.bnymellon.com
dgtools-mapping.bnymellon.com
bpmconnect.bnymellon.com
fcs-dashboard-1.qa.bnymellon.com
xat-connectfiletransfer.bnymellon.com
eanalytics-demo.qa.bnymellon.com
IFXCLIENT2.DEV.BNYMELLON.COM
shareowners.bnymellon.com
marketplace.bnymellon.com
im.bnymellon.com
design.bnymellon.com
xat-gmsgroup-netxinvestor.bnymellon.com
xuat-saturna-netxinvestor.bnymellon.com
treasuryedge.bnymellon.com
my360-cata.qa.bnymellon.com
ddcship.bnymellon.com
im-user-service.bnymellon.com
xat-hewittfs-netxinvestor.bnymellon.com
firstcitizens-xat-netxinvestor.qa.bnymellon.com
ctdataservices.bnymellon.com
ers2-static.bnymellon.com
bnymdesktop.qa.bnymellon.com
fundadmin.bnymellon.com
structuredsolutions.bnymellon.com
ebi42.qa.bnymellon.com
wvr.bnymellon.com
lionremote-bxp.qa.bnymellon.com
filetransfer.qa.bnymellon.com
mobius.bnymellon.com
connectapp.bnymellon.com
xat-ssi-netxinvestor.bnymellon.com
fundpricing.qa.bnymellon.com
nexenapp.bnymellon.com
xuat-nmis-netxinvestor.bnymellon.com
bds-bdcdrin-xb.bnymellon.com
connectapp-dcat.bnymellon.com
ClientCentral.bnymellon.com
opd2.qa.bnymellon.com
billpayadvantage.bnymellon.com
csd.bnymellon.com
M-DCAT.BNYMELLON.COM
supplier.qa.bnymellon.com
xat-res-netx360.bnymellon.com
connectfiletransfer.bnymellon.com
brms.bnymellon.com
dev-marketprofiles.bnymellon.com
*.bnymellon.com
wm-proxyin-uat.qa.bnymellon.com
lionremote-bxp2.qa.bnymellon.com
ecommerce.bnymellon.com
xat-sagepointfinancial-netxinvestor.bnymellon.com
xat-jefferies-netxinvestor.bnymellon.com
BENPAY.DEMO.BNYMELLON.COM
xuat-syndicatedcapital-netxinvestor.bnymellon.com
xuat-harris-netxinvestor.bnymellon.com
debitcard-api.bnymellon.com
uat-connectaisapp.bnymellon.com
cumulus-migration-for-michelle-dmz1.qa.bnymellon.com
iaw.bnymellon.com
ecommerce-dev.bnymellon.com
xat-searleco-netxinvestor.bnymellon.com
ppc.bnymellon.com
authenticate.bnymellon.com
xuat-henley-netxinvestor.bnymellon.com
xuat-juliusbaer-netxinvestor.bnymellon.com
jpass10.bnymellon.com
ae-routing-demo.qa.bnymellon.com
dcat-ciservices.qa.bnymellon.com
remote2.bnymellon.com
awh-ds.bnymellon.com
StructuredCreditConnection.BNYMellon.com
rj101nsgw.bnymellon.com
netxservices.bnymellon.com
remote.bnymellon.com
xat-test-netxinvestor.bnymellon.com
vdsna.bnymellon.com
gm-fxanalytics.bnymellon.com
design.dev.bnymellon.com
xat-gmers2-static.bnymellon.com
odb.bnymellon.com
topsdcat.bnymellon.com
m-privatebanking.bnymellon.com
wbcrparam.bnymellon.com
shaffi-testing5.qa.bnymellon.com
xat-wbcrparam.bnymellon.com
xat-app-liquiditydirect.bnymellon.com
esfsf.qa.bnymellon.com
ccenter.pershing.com
xat-tic-netxinvestor.bnymellon.com
QSEPROD.bnymellon.com
appstudio-api-legacy.bnymellon.com
compliance.bnymellon.com
cctcfindm.mar2020.bnymellon.com
fxanalytics-demo.bnymellon.com
xat-nexen.bnymellon.com
ngej1cs.bnymellon.com
connectais.qa.bnymellon.com
surpasisvc.bnymellon.com
SecuritiesDirectPlus-UAT.bnymellon.com
wca.bnymellon.com
dgtools-mapping.bnymellon.com
bpmconnect.bnymellon.com
fcs-dashboard-1.qa.bnymellon.com
xat-connectfiletransfer.bnymellon.com
eanalytics-demo.qa.bnymellon.com
IFXCLIENT2.DEV.BNYMELLON.COM
shareowners.bnymellon.com
marketplace.bnymellon.com
im.bnymellon.com
design.bnymellon.com
xat-gmsgroup-netxinvestor.bnymellon.com
xuat-saturna-netxinvestor.bnymellon.com
treasuryedge.bnymellon.com
my360-cata.qa.bnymellon.com
ddcship.bnymellon.com
im-user-service.bnymellon.com
xat-hewittfs-netxinvestor.bnymellon.com
firstcitizens-xat-netxinvestor.qa.bnymellon.com
ctdataservices.bnymellon.com
ers2-static.bnymellon.com
bnymdesktop.qa.bnymellon.com
fundadmin.bnymellon.com
structuredsolutions.bnymellon.com
ebi42.qa.bnymellon.com
wvr.bnymellon.com
lionremote-bxp.qa.bnymellon.com
filetransfer.qa.bnymellon.com
mobius.bnymellon.com
connectapp.bnymellon.com
xat-ssi-netxinvestor.bnymellon.com
fundpricing.qa.bnymellon.com
nexenapp.bnymellon.com
xuat-nmis-netxinvestor.bnymellon.com
bds-bdcdrin-xb.bnymellon.com
connectapp-dcat.bnymellon.com
ClientCentral.bnymellon.com
opd2.qa.bnymellon.com
Certificate
The complete raw certificate details for debitcard-api.bnymellon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIQDhF23H5HfFuuESCo75tdCzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMTE3MDAwMDAwWhcN MTkwMTE4MTIwMDAwWjCBkzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBlbm5zeWx2 YW5pYTETMBEGA1UEBxMKUGl0dHNidXJnaDEkMCIGA1UEChMbVGhlIEJhbmsgb2Yg TmV3IFlvcmsgTWVsbG9uMQwwCgYDVQQLEwNNSEgxJDAiBgNVBAMTG2RlYml0Y2Fy ZC1hcGkuYm55bWVsbG9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4QY5m9oIfPUPhP8BaJOkAKLCC0K+aOyhmJr/81NMToEKhDzEXjniaAm6XN gRpxDawsuYE+y0/vfOOoUd5ayHrPY4tiN7+BmtVEBHYAn0B3Wme3C8cqUuraP1MJ zKlkcqIgj4c6jhCbVnoBB+RdiBBt6aCwbddADgKRF8dgptB+yw/m8dUva2+4Zbpb AU/dlFoiFg/3deSYzEa4l2L+fGz9wWe3KNvQT0Q7fXo8vJ1xJ0jfnG4RQKuApdFY NGW/n3693g3dlk8jwNPxNDTiX8FNzkqa1acqDGHok6a2dNXsizqzH/8QGoH8Vbb6 LTI3VPh32c3TudhaiMbv4QZwOrsCAwEAAaOCAfQwggHwMB8GA1UdIwQYMBaAFA+A YRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBST+Lw4+h9RzyY9MwhFrHTHHnjN oDAmBgNVHREEHzAdghtkZWJpdGNhcmQtYXBpLmJueW1lbGxvbi5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8E ZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2 LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n Ni5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEE cDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYB BQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJT ZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAPiB8YIF2gj7cHXbRwQo2Mu6Qco2Dt2vS/jt5 xcLMPHy88GATuLh8U23ViYHQLw804KHIPRZaAHKMvX4U5/lZqR0DRe5vOCEOErUP Wc6ED+7yDbxAPUNmVj9Q77y5FglO337UXMQJLavoTbIWZtZPETiN6DnbtwUyDGMW 2dURevRPQRCmybw2ptR1Yrip+QiVEmo/mFVvcDjj1i3U61GCZno3P3Y8I0YBJ+kC WSbiseO/0NRNv2oF7mBUGJWfjuxYR0kSseMdaJWbw6SQSSp4yCCQKGdo2sRnb31n usBq5t4dWbUjNooA6AGAqjoSVtm72EPKZEXttAZgGwi0zhvzig== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhBjmb2gh89Q+E/wFok6 QAosILQr5o7KGYmv/zU0xOgQqEPMReOeJoCbpc2BGnENrCy5gT7LT+9846hR3lrI es9ji2I3v4Ga1UQEdgCfQHdaZ7cLxypS6to/UwnMqWRyoiCPhzqOEJtWegEH5F2I EG3poLBt10AOApEXx2Cm0H7LD+bx1S9rb7hlulsBT92UWiIWD/d15JjMRriXYv58 bP3BZ7co29BPRDt9ejy8nXEnSN+cbhFAq4Cl0Vg0Zb+ffr3eDd2WTyPA0/E0NOJf wU3OSprVpyoMYeiTprZ01eyLOrMf/xAagfxVtvotMjdU+HfZzdO52FqIxu/hBnA6 uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18699871781194430560925159858294709515 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Bank of New York Mellon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MHH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debitcard-api.bnymellon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23993359692539671486074635400162346634865336273034658713864778908240222321064340738869212587701659979348405414874957171922451100348390014230100644772919919318846075775589023289078078103787365374421808592512903468416234903996473458368057403577522233121989201401208247207145894809240567298466358882838737432331440170530730018451540558508202195807971678819575998126389612040241562147280278673942315255382503340155130461934005110454386613711081177664855040892582801449786871390096607512564216656334470936528985285907242388225067299736278346365720430631811549922953527965383389409061686222193785369300691978400579128933051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93f8bc38fa1f51cf263d330845ac74c71e78cda0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debitcard-api.bnymellon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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