cdn.hbbm-aem-tko-lp.hsbc.com.hk

- HSBC Group Management Services Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:f9:0f:36:ca:1d:96:72:7c:24:ab:db:15:6f:81:ca was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Group Management Services Limited

Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:f9:0f:36:ca:1d:96:72:7c:24:ab:db:15:6f:81:ca
Serial Number (int): 9268558469501239161784771903254135242
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f0:14:fb:a2:11:26:42:01:56:c9:d0:4d:d2:22:a4:d4:13:b1:b9:08
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 05:9e:3f:76:24:ac:d3:2d:1d:bb:8a:05:b1:b3:c3:fd:7a:52:67:b9
Fingerprint (sha256): 01:ac:05:34:7c:6f:17:00:d7:df:ec:38:f7:00:6a:e9:b3:1e:21:4b:8e:36:8c:55:b6:e6:93:0f:d9:7d:9a:94

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate cdn.hbbm-aem-tko-lp.hsbc.com.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.hbbm-aem-tko-lp.hsbc.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.hbbm-aem-tko-lp.hsbc.com.hk

Other certificates including the domain name hsbc.com.hk

(limited to 100 certificates)
www.hkgv2ls0033-ph-pprod2-security.p2g.netd2.hsbc.com.hk
www2.prodlike-site2.security.p2g.netd2.hsbc.com.hk
www.hsbcinsurance.com.cn
www.hkg2vl1719-mx-security.p2g.netd2.hsbc.com.hk
cdn.perf.hsbc.com.hk
www.epspps.hsbc.com.hk
www.hkgv2ls0199.p2g.netd2.hsbc.com.hk
www.hkg2vl1779-gb-fg.p2g.netd2.hsbc.com.hk
www.hkl20045318.p2g.netd2.hsbc.com.hk
www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk
asp.fxresearch.investment.hsbc.com.hk
www.my-dev-gws.p2g.netd2.hsbc.com.hk
www.hkg2vl0653-au.p2g.netd2.hsbc.com.hk
tmd-dev.hsbc.com.hk
www.hkg2vl1849-cn-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0942-us.p2g.netd2.hsbc.com.hk
mkd.ebanking.hsbc.com.hk
impsuat.hsbc.com.hk
www.hkg1vl0199.p2g.netd2.hsbc.com.hk
www.env615.qualityassurance.ebanking.hsbc.com.hk
mkdlcs.qualityassurance.ebanking.hsbc.com.hk
www.qualityassurance.ebroking.hsbc.com.hk
www.hkg2vl1720-ca-security.p2g.netd2.hsbc.com.hk
dco-mx-offers-uat.hsbc.com.hk
www.hkg2vl1640.p2g.netd2.hsbc.com.hk
www.hk845.p2g.netd2.hsbc.com.hk
mi.qualityassurance.ris.hsbc.com.hk
www.inmjoeyuat.p2g.netd2.hsbc.com.hk
GBV00990.gsslp.hsbc.co.uk
www.hkgv2ls0312.p2g.netd2.hsbc.com.hk
www.hkl20090755-sa-security.p2g.netd2.hsbc.com.hk
www.hkg2vl1746-ca.p2g.netd2.hsbc.com.hk
om.hkl20045269.p2g.netd2.hsbc.com.hk
mfxweb-sit.hsbc.com.hk
www.hkgv2ls0165-ph.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0497-fr.p2g.netd2.hsbc.com.hk
dev.risk-profiling-questionnaire.hsbc.com.hk
www.wrs.hsbc.com.hk
www.hkg2vl1676-lk.p2g.netd2.hsbc.com.hk
dco-cc.hsbc.com.hk
devcluster.api.p2g.netd2.hsbc.com.hk
www.hkg2vl0829-eu.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0745-je.p2g.netd2.hsbc.com.hk
www.hkl20044714-lk-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0574-eu.p2g.netd2.hsbc.com.hk
gr-dit.hsbc.com.hk
hkskmgdcvi057.hsbc.com.hk
qualityassurance-amh-gbb-preprod2.p2g.netd2.hsbc.com.hk
www.cd600.p2g.netd2.hsbc.com.hk
www.ap554.p2g.netd2.hsbc.com.hk
www.env631.qualityassurance.ebanking.hsbc.com.hk
www.na318.p2g.netd2.hsbc.com.hk
fusion-lending-uat.hsbc.com.hk
mkdu-qualityassurance.ebanking.hsbc.com.hk
start4.hsbc.com.hk
www.assetmanagement.hsbc.com
www.ap556.p2g.netd2.hsbc.com.hk
cdn.hbbm-aem-tko-lp.hsbc.com.hk
smtp2-mx.hsbc.com.hk
payme-cms-secure.hsbc.com.hk
uat-investments3.personal-banking.hsbc.com.hk
if-api-corp-sit-ebtn.hsbc.com.hk
www.hkgv2ls0405-hk.p2g.netd2.hsbc.com.hk
www.env606.qualityassurance.ebanking.hsbc.com.hk
www.visatokenotp.qualityassurance.hsbc.com.hk
www.eu532.p2g.netd2.hsbc.com.hk
da-pbconnect-dev.privatebanking.hsbc.com.hk
www.hkg2vl0479-je.p2g.netd2.hsbc.com.hk
www.hkg2vl0913-au.p2g.netd2.hsbc.com.hk
www.gbbbanking.p2g.netd2.hsbc.com.hk
www.hkg2vl1660-ph.p2g.netd2.hsbc.com.hk
in-sit.hsbc.com.hk
www.ap530.p2g.netd2.hsbc.com.hk
www.security.online-banking.hsbc.com.hk
www.tradetracker.business.hsbc.com.hk
mkdlcu.qualityassurance.ebanking.hsbc.com.hk
www.hkl20044720-lk.p2g.netd2.hsbc.com.hk
www.hkl20043051.p2g.netd2.hsbc.com.hk
www.dco-loans-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20066668.p2g.netd2.hsbc.com.hk
www.ebroking.hsbc.com.hk
pilot.hsbc.com.vn
www.hsbc.com.sg
www.hkg2vl0541-ca.p2g.netd2.hsbc.com.hk
www.hkg2vl1382-eu.p2g.netd2.hsbc.com.hk
qualityassurance-amh-gbbsp-preprod.hsbc.com.hk
skm.services.online-banking.hsbc.com.hk
www.hkg2vl1741-us.p2g.netd2.hsbc.com.hk
www.hkl20044727-je.p2g.netd2.hsbc.com.hk
payme-cashout-secure.hsbc.com.hk
ibps.hsbc.com.hk
www.dco-ao-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20045172.p2g.netd2.hsbc.com.hk
dspuk-ci2-ext.hsbc.com.hk
ext-remoteaccess.hsbc.com.hk
pages.messaging.hsbc.com.hk
smtp1.hsbc.com.hk
mt-sit.hsbc.com.hk

Certificate

The complete raw certificate details for cdn.hbbm-aem-tko-lp.hsbc.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BOGV1PRdix7eDyc2O/q
eNOnq37o3gN148BH8wcPkv+uQCNJFFU3Da4ZNsUzmD7wa/1dFIvxFnK3UgEr8ODn
/zgoRpzGMGGdwxrah2vP0PltEBDsDbeLqwOSFRKXCGLA9CEHWYzJbQe7nWmC/DDa
ePeJbVIHes10fKpMwFQ8QPF5t0HT0AiWj574fwve5daslXYO66yaxPEn/pkTR1dR
schAa6RrfzL/TgJRcaoiXdR2JR8nO3K5w/kqbfDv58uHWVcZC9/NMukPxSA5+d5F
oqsfxSCP/tYDbXMRXn+Mtd95JnWsDsYgd0Hqu99B7ju5rQUjDXJJvTHGpacfY943
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9268558469501239161784771903254135242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.hbbm-aem-tko-lp.hsbc.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26772148675737985193553006404023456687175306488506435422889454479282766249371163704929484507052473702836194825412926707080032815021776193108319920182223635603885541769298358177684762588975857313029201531571286590150215769973084458604237162011096653135180636984466018779856338539313792241924739601434122189161387313116365599044072794152258315778967147096327988980085078529123533852428944771567113221396503939345838317194875874495882655327339428909124085931970370890435870949340850949871211212945890186280538690957168161355012515177246775515337074400597292213430327143927932552294284577730514279992084309050612439201741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f014fba21126420156c9d04dd222a4d413b1b908
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hbbm-aem-tko-lp.hsbc.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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