www.hsbc.com.vn

- The Hongkong and Shanghai Banking Corporation Limited -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0b:55:95:05:5e:6a:ad:f5:5a:30:6a:dc:ab:56:a9:c5 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hongkong and Shanghai Banking Corporation Limited

Company registration number: 0263876
Organization: The Hongkong and Shanghai Banking Corporation Limited
Organization unit: GPEV ebank vn 2018
Locality: Central
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:55:95:05:5e:6a:ad:f5:5a:30:6a:dc:ab:56:a9:c5
Serial Number (int): 15065875691001850176020059377634814405
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:53:ff:6d:73:53:df:25:1a:ec:87:0d:43:3d:13:b9:5f:7d:9a:21
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 4e:3d:c5:87:07:fa:bd:1f:46:f3:38:3a:5b:e0:ac:db:54:3e:4f:19
Fingerprint (sha256): 04:83:5f:ff:22:cf:8a:48:42:1a:dc:01:08:67:11:73:0a:74:60:f5:2f:5b:41:a1:e6:72:35:c4:4d:9a:da:11

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.hsbc.com.vn

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hsbc.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hsbc.com.vn
hsbc.com.vn
www.hsbcpremier.com.vn
hsbcpremier.com.vn
www.vn.hsbc.com
vn.hsbc.com.vn
www.vn.hsbc.com.vn
personal.hsbc.com.vn
pilot.hsbc.com.vn
cdn.hsbc.com.vn
static-origin.hsbc.com.vn
vn.hsbc.com

Other certificates including the domain name hsbc.com.vn

(limited to 100 certificates)
www.uat-securepay.hsbc.com.vn
pilot.hsbc.com.vn
gtff2.hsbc.com
www.hsbc.com.vn
business.hsbc.com
www.hsbc.com.vn
b2bedge2.b2b-apac.hsbc.com
www.evgr-securepay.hsbc.com.vn
www.hsbc.com.vn
www.business.hsbc.fr
www.about.hsbc.co.nz
business.hsbc.com
www.evgr-securepay.hsbc.com.vn
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
www.about.hsbc.com.hk
b2bedge1.b2b-apac.hsbc.com
www.business.hsbc.fr
prod.ap.dynp.cloud1.vv1865.com
events.data.hsbc.com
www.qualityassurance.securepay.hsbc.com.vn
business.hsbc.com
visawlt-cc-dev.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.business.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
pilot.hsbc.com.vn
b2bedge2.b2b-apac.hsbc.com
www.securepay.hsbc.com.vn
card.apply.hsbc.com.vn
blockchaintrade-sit.business.hsbc.co.kr
www.about.hsbc.co.nz
card.apply.hsbc.com.vn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.qualityassurance.securepay.hsbc.com.vn
www.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.securepay.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.evgr-securepay.hsbc.com.vn
www.securepay.hsbc.com.vn
business.hsbc.com.hk
www.qualityassurance.securepay.hsbc.com.vn
www.business.hsbc.fr
business.hsbc.com.hk
cdn.hsbc.com.vn
www.hsbc.com.vn
www.hsbc.com.vn
business.hsbc.com.hk
www.qualityassurance.securepay.hsbc.com.vn
www2.qualityassurance.ebanking.hsbc.com.vn
www.securepay.hsbc.com.vn
www.about.hsbc.com.hk
card.apply.hsbc.com.vn
www.about.hsbc.com.hk
blockchaintrade-sit.business.hsbc.co.kr
www.business.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
events.data.hsbc.com
www.business.hsbc.fr
card.apply.hsbc.com.vn
www.hsbc.com.vn
cdn.hsbc.com.vn
www.hsbc.com.vn
www.hsbc.com.vn
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
www.securepay.hsbc.com.vn
www.qualityassurance.securepay.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
prod.ap.dynp.cloud1.vv1865.com
www.hsbc.com.vn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
gtff2-dev.hsbc.com
prod.ap.dynp.cloud1.vv1865.com
www.business.hsbc.com.hk
www.about.hsbc.com.hk
www.business.hsbc.fr
card.apply.hsbc.com.vn
blockchaintrade-sit.business.hsbc.co.kr
business.hsbc.com.hk
www.about.hsbc.com.hk
www.business.hsbc.fr
www.about.hsbc.co.nz
www.qualityassurance.securepay.hsbc.com.vn
pilot.hsbc.com.vn
business.hsbc.com.hk
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
visawlt-cc.hsbc.com.vn
www.hsbc.com.vn
www.business.hsbc.fr
www.hsbc.com.vn
www.business.hsbc.fr
www.business.hsbc.fr
gtff2-dev.hsbc.com

Certificate

The complete raw certificate details for www.hsbc.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqy/C1F/iaw6kF4xYYxo
xfEhdA0JaSZuluzVq+djWmJ+74unKU4KBOm1LJkI9ZU7kAhaTOkctF0367cdCIjJ
DrOVZS2uuitSokpdrkGzSgU1XNagDwsVEM1PjJwH9Ips4SL+vqiASKRTGWToKiIA
z6E2Akwrhk3Q/yuwn2aiPL40b+S9lHvK2Bplb9BRzZCtFb6xy3JwCsRru0B15hIP
U5kEx0ey3PelN2gvaGbHOSYi8nqsP2FBu+hqjKxoIgThKkOYBiLamTz6uR03B1LJ
XB3XKlF/D5Hz0OtF+n+O5jsiEGiRuG17SH3bPTbRlVOVwgRrauDO7UMPv1bej0W2
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15065875691001850176020059377634814405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0263876'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hongkong and Shanghai Banking Corporation Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GPEV ebank vn 2018'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hsbc.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26090275181861249373620121019412215034579179860766688580918261681934574206820822163689191239784966348967765332999116638163988996678501708958475592861882377221075839037006869559896539137392687696158159392637049440457330406048525459509431812614817989841812737699486183147991957454877224166926049976593343393413227593518193713965908606713554696290332244026055800523752933863900379806686218734171266720139902216302584260922535634493077425436139749780784454878615283249372016394538071372234473133606916042888714517128784845247889661348558805670521064751695810514192592612239185100751846284054084895006164133537339085796913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d53ff6d7353df251aec870d433d13b95f7d9a21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbcpremier.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcpremier.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vn.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vn.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vn.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-origin.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vn.hsbc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e1320cf470000040300473045022100a71e6af80ce18b589165addbd719b76dd4dcd6cd1e2ca4f9a4f9720237cc0b51022052a46c9d0ff158d5163b8641004d003d7e8b5c710d18e928372be731bee9370b0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016e1320cfd0000004030047304502201108f7a65f18c7edcd3b3ac423d1b854747235f305075b5a5295619335f9b276022100fe475b2d602c1c5374be071fa912c3b23761c35ad9a5d74153f7988fa14cf8e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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