staff.api.fet.kbc-group.com
- KBC Group NV -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:d9:02:27:c8:9d:11:f9:e3:af:57:99:c8:12:dd:c5 was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KBC Group NV
Organization:
KBC Group NV
State / Province:
Brussels
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:d9:02:27:c8:9d:11:f9:e3:af:57:99:c8:12:dd:c5Serial Number (int): 15748280088740565764807431357805551045
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 91:22:8b:88:dc:e2:74:15:01:51:a5:d8:98:3e:32:0e:b7:29:49:05
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): c9:c0:8e:cd:d2:30:1d:5b:94:31:c2:de:0a:0e:dd:a2:33:cc:d4:f0
Fingerprint (sha256): 01:57:3c:3a:8a:be:7b:a2:8d:4d:c9:fa:97:4d:0d:69:4f:5a:44:dc:b3:79:16:70:30:73:c8:b7:45:bc:6b:d7
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate staff.api.fet.kbc-group.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staff.api.fet.kbc-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staffapi.fet.kbc-group.com
wys.api.fet.kbc-group.com
staff.api.fet.kbc-group.com
pearl.staffsocket.fet.kbc-group.com
ays.staffsocket.fet.kbc-group.com
wys.api.fet.kbc-group.com
staff.api.fet.kbc-group.com
pearl.staffsocket.fet.kbc-group.com
ays.staffsocket.fet.kbc-group.com
Other certificates including the domain name kbc-group.com
(limited to 100 certificates)
mftdashboard.acc.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
Certificate
The complete raw certificate details for staff.api.fet.kbc-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIQC9kCJ8idEfnjr1eZyBLdxTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzE0MDAwMDAwWhcN MjIwMzIzMTIwMDAwWjBwMQswCQYDVQQGEwJCRTERMA8GA1UECBMIQnJ1c3NlbHMx ETAPBgNVBAcTCEJydXNzZWxzMRUwEwYDVQQKEwxLQkMgR3JvdXAgTlYxJDAiBgNV BAMTG3N0YWZmLmFwaS5mZXQua2JjLWdyb3VwLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKtO7rXRt3r7zUReC1sTHE2vMFxr5oWX/s9oEfUY6RmI I4pbOxJe2dMs3wUvHjtx5jpCBvVr5Vi2KiwiY3bTfLco88pSNQ4jND73c3+nYXA9 4dYarb8OUwV4IejdnkGK84KckUbEAgGIXEdzVTuUarOg8zIQ9hPCtaGCke2ruwfl FfsgGpiR9lZvvlhG6FN1L77lvR+mlIoF13X9BZ6Ji7FTwAhFAKiMnP3xf51BcKo2 0X2DxR1qpI41vVjJuOPMh2ptLe4mX32pWgZ6ppDP/YvYZY8JHSSLjfYaQpzLvDmL yQpGf8nfotEFZy6uEv9/E3/6MZXkl8CduPYm6Xl2Kp8CAwEAAaOCAnkwggJ1MB8G A1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSRIouI3OJ0 FQFRpdiYPjIOtylJBTCBpwYDVR0RBIGfMIGcghpzdGFmZmFwaS5mZXQua2JjLWdy b3VwLmNvbYIZd3lzLmFwaS5mZXQua2JjLWdyb3VwLmNvbYIbc3RhZmYuYXBpLmZl dC5rYmMtZ3JvdXAuY29tgiNwZWFybC5zdGFmZnNvY2tldC5mZXQua2JjLWdyb3Vw LmNvbYIhYXlzLnN0YWZmc29ja2V0LmZldC5rYmMtZ3JvdXAuY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQw YjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5j cmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYu Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAw bjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUF BzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2Vj dXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAKVLoQkL/bCFZbYvaTOT8jz8VWHdkD+L7f+4 YsILepkh/9SjMmiKT208iXulFbcg/78K90mMjZiQYpNBhGh81VPms2+dgyAHDozJ 2vcq4g+1/aWjbNy0gBjoQGeAOdyhMFqorD5WcrQ3pTiV9GOHFgb6Hb74HdH9fwV1 X+a5RMg/ohqB40zoOTV6RlBopM0qR2gh4uV2ro+AoxD9YI3t+5+wpa34Fd/MKeGP +9fmuAMWh1/EsM6DSmO/n7m6ojkkfIVOM1GcEodWKDc917hezkYCXWU7/18TfW7K wP60IFKZjZG98x3nBXLVrwXLiZ6Tzj+8qJTKjHYIp1fn+sthfgE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq07utdG3evvNRF4LWxMc Ta8wXGvmhZf+z2gR9RjpGYgjils7El7Z0yzfBS8eO3HmOkIG9WvlWLYqLCJjdtN8 tyjzylI1DiM0Pvdzf6dhcD3h1hqtvw5TBXgh6N2eQYrzgpyRRsQCAYhcR3NVO5Rq s6DzMhD2E8K1oYKR7au7B+UV+yAamJH2Vm++WEboU3UvvuW9H6aUigXXdf0FnomL sVPACEUAqIyc/fF/nUFwqjbRfYPFHWqkjjW9WMm448yHam0t7iZffalaBnqmkM/9 i9hljwkdJIuN9hpCnMu8OYvJCkZ/yd+i0QVnLq4S/38Tf/oxleSXwJ249ibpeXYq nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15748280088740565764807431357805551045 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staff.api.fet.kbc-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21625673196811628701328955266785007370453601886945744874835828814778341827582095106432095913980365147917899107337729987468063858460127301333077640212908757782965455707472429358005696176709387214524538166162479433269632483075170735190262670275616406258247857458667664408879803215665912828472067787554167227460474516251286990870204970965872327985857403607912371263443431223367919677072335903018552127871370387523516477318683219091035682457991925687842101292348788576464751479544330399354624757109293774978668865059944731052446381953947603989384873022643795637383695656099550002305124134915899558252134350942681035057823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91228b88dce274150151a5d8983e320eb7294905 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffapi.fet.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wys.api.fet.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.api.fet.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearl.staffsocket.fet.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ays.staffsocket.fet.kbc-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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