www-origin.prod.eu.dynp.hsbc.com

- HSBC Holdings plc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:23:12:cc:95:cd:d7:6a:4f:eb:c7:be:25:8f:97:bf was issued on by DigiCert Inc.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Holdings plc

Organization: HSBC Holdings plc
Organization unit: HDS
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:23:12:cc:95:cd:d7:6a:4f:eb:c7:be:25:8f:97:bf
Serial Number (int): 9486707652823262243626736102725883839
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f7:eb:38:a7:62:23:bc:0f:af:fd:c1:9e:a2:99:9a:7c:f0:18:6e:9f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 77:62:41:8a:e5:f0:31:3c:73:15:c0:bf:0a:26:6a:46:99:bc:ba:cd
Fingerprint (sha256): 00:9b:87:26:b7:ff:3b:86:69:f5:25:57:0f:96:ae:db:da:c3:58:00:00:71:1b:78:2f:fb:84:b7:39:31:f8:f7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www-origin.prod.eu.dynp.hsbc.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-origin.prod.eu.dynp.hsbc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hbcn-origin.prod.eu.dynp.hsbc.com
hbeu-origin.prod.eu.dynp.hsbc.com
hsbc-origin.prod.eu.dynp.hsbc.com
hsbcis-origin.prod.eu.dynp.hsbc.com
uae-origin.prod.eu.dynp.hsbc.com
ciiom-origin.prod.eu.dynp.hsbc.com
hbusdirect-origin.prod.eu.dynp.hsbc.com
hbus-origin.prod.eu.dynp.hsbc.com
hbca-origin.prod.eu.dynp.hsbc.com
hbin-origin.prod.eu.dynp.hsbc.com
hbau-origin.prod.eu.dynp.hsbc.com
hbfr-origin.prod.eu.dynp.hsbc.com
hbmy-origin.prod.eu.dynp.hsbc.com
hbmx-origin.prod.eu.dynp.hsbc.com
hbph-origin.prod.eu.dynp.hsbc.com
hbtw-origin.prod.eu.dynp.hsbc.com
hblk-origin.prod.eu.dynp.hsbc.com
hbsg-origin.prod.eu.dynp.hsbc.com
hase-origin.prod.eu.dynp.hsbc.com
expat-origin.prod.eu.dynp.hsbc.com
fsdt-origin.prod.eu.dynp.hsbc.com
mdbk-origin.prod.eu.dynp.hsbc.com
hbmt-origin.prod.eu.dynp.hsbc.com
mabk-origin.prod.eu.dynp.hsbc.com
bh-bbme-origin.prod.eu.dynp.hsbc.com
qa-bbme-origin.prod.eu.dynp.hsbc.com
om-bbme-origin.prod.eu.dynp.hsbc.com
hbms-origin.prod.eu.dynp.hsbc.com
hbvn-origin.prod.eu.dynp.hsbc.com
hbbm-origin.prod.eu.dynp.hsbc.com
hbnz-origin.prod.eu.dynp.hsbc.com
hbmu-origin.prod.eu.dynp.hsbc.com
hbap-mo-origin.prod.eu.dynp.hsbc.com
hbeg-origin.prod.eu.dynp.hsbc.com
insh-origin.prod.eu.dynp.hsbc.com
insn-origin.prod.eu.dynp.hsbc.com
hsvm-origin.prod.eu.dynp.hsbc.com
offers-origin.prod.eu.dynp.hsbc.com
www-origin.prod.eu.dynp.hsbc.com

Other certificates including the domain name hsbc.com

(limited to 100 certificates)
www2.prodlike-site2.security.p2g.netd2.hsbc.com.hk
www.us.hsbc.com
tx.fguk-dev.hsbc.com
ist.hsbcusa.netd.us.hsbc.com
demolp.hsbc.com
www.fxclientui2.gfx.gbm.hsbc.com
rdcweb.us.hsbc.com
www.hsbc.co.uk
HSBC.COM
www.security.online-banking.ciiom.hsbc.com
www.fundsinfo.hsbc.com.sg
mortgageapply-uat.us.hsbc.com
www.qatar.hsbc.com
www.business.hsbc.co.uk
DEV-EXT-mqipt1-usl00001177.mq.hsbc.com
www-origin.prod.eu.dynp.hsbc.com
www2.plte.file.online-banking.uk.hsbc.com
hsbc.com
demolp.hsbc.com
qa.hsbcnetna.netd.us.hsbc.com
www.connectionshub-staging.business.hsbc.com
www.hsbc.com.kw
bahrainservice.hsbc.com
payments.jo.personal-banking.hsbc.com
investments.ae.personal-banking.hsbc.com
PROD-EXT-MQIPT05-gbl12676.mq.hsbc.com
investments3.sg.personal-banking.hsbc.com
lp-gsde.plte.services.online-banking.uk.hsbc.com
investments.hk.personal-banking.hsbc.com
gtff.hsbc.com
www.pib.pa.hsbc.com
priipskids.gbm.hsbc.com
uaemail.hsbc.com
www.business.hsbc.co.uk
admin.apply.us.hsbc.com
HSBC.COM
confidentialreport-icm.hsbc.com
PROD_EXT_MQIPT01_HKP1Vl0340.mq.hsbc.com
customerservice.expat.hsbc.com
pelp.hsbc.com
www.assetmanagement.hsbc.com
ist.hsbcmortgageservices.netd.us.hsbc.com
payments.lb.personal-banking.hsbc.com
www.hsbc.com.lb
mraedge1.mra-emea.hsbc.com
ssl1.remote.us.hsbc.com
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
www.us.hsbc.com
apply-dev.personal.hsbc.com
DFRLO2PCL.mq.hsbc.com
incidentboard.asiapacific.hsbc.com
www.apps.asiapacific.hsbc.com
cards.uk.personal-banking.hsbc.com
www.fundsinfo.hsbc.com.sg
skm.m.security.online-banking.expat.hsbc.com
preprod.connectedmoney.api.hsbc.com
www.hsbc.com.eg
ca-aem-vh-lp.us.hsbc.com
www.banking.us.hsbc.com
www.hsbc.co.om
www.file.online-banking.ciiom.hsbc.com
apply-test.personal.hsbc.com
static.lp.services.online-banking.us.hsbc.com
www.fileupload.asiapacific.hsbc.com
us-aem-vh-lp.us.hsbc.com
gtff2.hsbc.com
usl00000677.us.hsbc.com
wdc.lp.m.ciiom.hsbc.com
payments.gr.personal-banking.hsbc.com
tradetracker.business.hsbc.com
www.tech.hsbc
aoins.us.hsbc.com
uatlp.hsbc.com
www.content.online-banking.ciiom.hsbc.com
ecom-as2encsign.fguk-dev.hsbc.com
qa1.hfc.netd.us.hsbc.com
upivodaprod.hsbc.com
www.crs.hsbc.com
PLFISHK02.mq.hsbc.com
ist.hsbcnet.netd.us.hsbc.com
www.expat.hsbc.com
cards.ciiom.personal-banking.hsbc.com
FXTRADING.US.HSBC.COM
www.hsbc.com.ph
tx.fguk.hsbc.com
www.security.online-banking.hsbc.com.mx
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
HBUSPROD.MAINFRAME.HSBC.COM
investments.sg.personal-banking.hsbc.com
pfo.us.hsbc.com
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
ciiom.hsbc.com
www.ist5.usbib.netd.hsbc.com
www.dddc.us.hsbc.com
www.ukgib-its.hsbc.com
investments.ae.personal-banking.hsbc.com
www.search.hsbc.com
EntrustAPI.hsbc.com
www.security.online-banking.us.hsbc.com
www.m.services.online-banking.ciiom.hsbc.com

Certificate

The complete raw certificate details for www-origin.prod.eu.dynp.hsbc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7pJmBUrNE2/N0NVoZf7
TUQU5E+5K+jfuK7iJxd6E+KGhEo5HKlw/+3pdRXuxKf18vVvFcwLWCpmKLKI7HRV
hdOsbvlkjxkV43/IDXt2o+hCgSTm35YCyKZl0FZJ66jNiTQSo0ZPB0j4AU0JEBj6
9jLVBWP/CMMxgoKTnY2lPPgch4gY35GyuT63v/YuW8ViE+OcKG5GV1zZFa6BvOHe
ibrqizAmjSlYn0Fr4zfMJLuSyL2oc1Bb0iyXER/T2w5X7Rf1/+Waz9p4zlcdxGO1
Na/cEfksit+yXwH8vWtbHQetJf6KXiJlgkeKQYsWJwOx1XtERsmDcZRC2FwMM/TS
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9486707652823262243626736102725883839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Holdings plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HDS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20668705488036527388711164729217153396104835763077232867379467662370886348074645422712733376666677733695116913342870742384868586402132922431069731251019566854958856358758549094330797078537132432078276026803634813439529608830446922815091186150569691112394819659055051606958690780343495686892614221273989932511479178517098087351742106716869420928125796647130239431820984677146290810611071055130547508921062391151255427434797094471272109023756796684503894261456600406794060548927290236219797148559474713886262096232872817796928654711081705319958615407047889139906136334686011670878465587823628993929940822363350873985747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7eb38a76223bc0faffdc19ea2999a7cf0186e9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcn-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbeu-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcis-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uae-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciiom-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbusdirect-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbus-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbca-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbin-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbau-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbfr-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmy-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmx-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbph-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbtw-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hblk-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsg-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hase-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expat-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsdt-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdbk-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmt-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mabk-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bh-bbme-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-bbme-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om-bbme-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbms-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbvn-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbm-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnz-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmu-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbap-mo-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbeg-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insh-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insn-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsvm-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin.prod.eu.dynp.hsbc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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