stmt.cupdapp.com
- China Unionpay Data Services Co., Ltd. -
Issued by TrustAsia OV TLS Pro CA G2
About this certificate
This digital certificate with serial number 06:62:de:31:33:0c:c1:f4:aa:ab:3b:ac:7b:f2:21:0a was issued on by TrustAsia Technologies, Inc..
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
China Unionpay Data Services Co., Ltd.
Organization:
China Unionpay Data Services Co., Ltd.
Organization unit: 创新产品事业部
Organization unit: 创新产品事业部
State / Province:
Shanghai
Country: CN
Country: CN
TrustAsia Technologies, Inc.
Organization:
TrustAsia Technologies, Inc.
Country:
CN
This certificate has expire since
Certificate Details
Serial Number (hex): 06:62:de:31:33:0c:c1:f4:aa:ab:3b:ac:7b:f2:21:0aSerial Number (int): 8488719659757040755564200076566995210
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a4:03:9c:9f:fa:48:03:0f:e3:bf:68:c6:1c:0b:9a:12:67:6a:fc:8e
AuthorityKeyId: 4f:85:fc:9b:59:d3:c6:53:97:8f:bc:1e:83:f3:1e:82:25:14:bc:79
Fingerprint (sha1): ba:43:e1:fc:ac:b8:90:9f:63:03:f1:4f:45:28:ae:00:49:ec:15:8e
Fingerprint (sha256): 05:8a:8e:ca:b7:1b:7d:3d:32:34:f8:66:17:06:fa:38:ff:26:7f:6e:5c:63:c9:94:35:bc:b1:ed:dc:92:38:f3
Issuing Certificate URL: http://crl.digicert-cn.com/TrustAsiaOVTLSProCAG2.crt
Revocation information
OCSP Server: http://ocsp.dcocsp.cnCRL Distribution Point: http://crl3.digicert.com/TrustAsiaOVTLSProCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/TrustAsiaOVTLSProCAG2.crl
Check the revocation status for certificate stmt.cupdapp.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stmt.cupdapp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stmt.cupdapp.com
xykbill.qrcb.com.cn
ebill.fubonchina.com
ebill.ydnsh.com
m.cardmail.psbc.com
ibill.qlbchina.com
bill.cc.hrbb.com.cn
zd.grcbank.com
xykbill.qrcb.com.cn
ebill.fubonchina.com
ebill.ydnsh.com
m.cardmail.psbc.com
ibill.qlbchina.com
bill.cc.hrbb.com.cn
zd.grcbank.com
Other certificates including the domain name cupdapp.com
(limited to 100 certificates)
wechat.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
api.ws.cupdapp.net
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
*.unicorn.cupdapp.com
ant.ccbillinst.cupdapp.com
ncoas.cupdapp.com
milkywaypage.cupdapp.com
xdzlar.cupdata.com
ncoas.cupdapp.com
ws.cupdapp.net
appsignsrc.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
*.static.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
app.cupdapp.com
ncoas.cupdapp.com
securityplus.cupdata.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
directbank.cupdata.com
ws.cupdapp.net
perbank.cupdapp.com
apptranssign.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
prepaidcard.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
api.ws.cupdapp.net
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
milkywaypage.cupdapp.com
crbep.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
stmt.cupdapp.com
app.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
perbank.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
stmt.cupdapp.com
app.cupdapp.com
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
api.ws.cupdapp.net
app.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
stmt.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
wx.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
api.ws.cupdapp.net
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
*.unicorn.cupdapp.com
ant.ccbillinst.cupdapp.com
ncoas.cupdapp.com
milkywaypage.cupdapp.com
xdzlar.cupdata.com
ncoas.cupdapp.com
ws.cupdapp.net
appsignsrc.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
*.static.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
app.cupdapp.com
ncoas.cupdapp.com
securityplus.cupdata.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
directbank.cupdata.com
ws.cupdapp.net
perbank.cupdapp.com
apptranssign.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
prepaidcard.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
api.ws.cupdapp.net
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
milkywaypage.cupdapp.com
crbep.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
stmt.cupdapp.com
app.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
perbank.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
stmt.cupdapp.com
app.cupdapp.com
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
api.ws.cupdapp.net
app.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
stmt.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
wx.cupdapp.com
Certificate
The complete raw certificate details for stmt.cupdapp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIQBmLeMTMMwfSqqzuse/IhCjANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJDTjElMCMGA1UEChMcVHJ1c3RBc2lhIFRlY2hub2xvZ2llcywg SW5jLjEjMCEGA1UEAxMaVHJ1c3RBc2lhIE9WIFRMUyBQcm8gQ0EgRzIwHhcNMjAx MjE2MDAwMDAwWhcNMjExMjA4MjM1OTU5WjCBjDELMAkGA1UEBhMCQ04xETAPBgNV BAgTCFNoYW5naGFpMS8wLQYDVQQKEyZDaGluYSBVbmlvbnBheSBEYXRhIFNlcnZp Y2VzIENvLiwgTHRkLjEeMBwGA1UECwwV5Yib5paw5Lqn5ZOB5LqL5Lia6YOoMRkw FwYDVQQDExBzdG10LmN1cGRhcHAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAkbf6MOLH4pxudgjH9LZ5qR3IPjNI85rmw7K0swzx1atTtBmryyMv Bi79Q4duh4oWlCvgraNz5c9INgfd0uhivQFimKw6VRWb4eYAdNbfdqW1nsD7buIb bXiQnPKJLT5jQFIFbiqHwQDunUE7ivtj49rm5GX44TVyhBy55++Q6qTKaT9uqSF4 sstzIV02CWh2lL/yZnC/MvE8y0gJz21/fx3L415zO0D3RNp19bDwM2i+PU+asAuH hVkxG8bOh9plXGFHHr3eNgwJ2ZPMAhcNqCmV9cdOktCy+O3u9Y5+Sm1ognE94bCr xe8Bgbdj89ehna4ZiMsw8skLP/2rqr3KTwIDAQABo4ICgjCCAn4wHwYDVR0jBBgw FoAUT4X8m1nTxlOXj7weg/MegiUUvHkwHQYDVR0OBBYEFKQDnJ/6SAMP479oxhwL mhJnavyOMIGnBgNVHREEgZ8wgZyCEHN0bXQuY3VwZGFwcC5jb22CE3h5a2JpbGwu cXJjYi5jb20uY26CFGViaWxsLmZ1Ym9uY2hpbmEuY29tgg9lYmlsbC55ZG5zaC5j b22CE20uY2FyZG1haWwucHNiYy5jb22CEmliaWxsLnFsYmNoaW5hLmNvbYITYmls bC5jYy5ocmJiLmNvbS5jboIOemQuZ3JjYmFuay5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB9BgNVHR8EdjB0MDigNqA0 hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVHJ1c3RBc2lhT1ZUTFNQcm9DQUcy LmNybDA4oDagNIYyaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1RydXN0QXNpYU9W VExTUHJvQ0FHMi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwcwYI KwYBBQUHAQEEZzBlMCEGCCsGAQUFBzABhhVodHRwOi8vb2NzcC5kY29jc3AuY24w QAYIKwYBBQUHMAKGNGh0dHA6Ly9jcmwuZGlnaWNlcnQtY24uY29tL1RydXN0QXNp YU9WVExTUHJvQ0FHMi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1gn2g6avy2tVeXbRsmk6lcg+oB6Hisx9 iO6f8ftlgVoFir0SHkQQ66YEACn38hhXBQUF6G0GilZZneZ0RWtW0zXWzV3pTVNI LQkZMsESPYnXTMdRMRodGOrqfmBjMyedt7KuUb+A3J013vYgw4omfhXX5J4cVUHI igEy7QyHmyfzBeQQtAxZGiWRQSOS/tn+YSHdI0uU0X9Nvxe/BMBrQ9qa8r8lujM1 EonA88pP2VVtCD//hfTl7Kg2C0bMC1J8ZGVH2ulVsXdKU495uY4nj/LjQd+DxpIS qMggb2Rpu8qXzq1wVe1X21VDcdCU8Go6vGn0uI2Cc9Fj1T3Xr2RIxQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbf6MOLH4pxudgjH9LZ5 qR3IPjNI85rmw7K0swzx1atTtBmryyMvBi79Q4duh4oWlCvgraNz5c9INgfd0uhi vQFimKw6VRWb4eYAdNbfdqW1nsD7buIbbXiQnPKJLT5jQFIFbiqHwQDunUE7ivtj 49rm5GX44TVyhBy55++Q6qTKaT9uqSF4sstzIV02CWh2lL/yZnC/MvE8y0gJz21/ fx3L415zO0D3RNp19bDwM2i+PU+asAuHhVkxG8bOh9plXGFHHr3eNgwJ2ZPMAhcN qCmV9cdOktCy+O3u9Y5+Sm1ognE94bCrxe8Bgbdj89ehna4ZiMsw8skLP/2rqr3K TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8488719659757040755564200076566995210 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '创新产品事业部' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stmt.cupdapp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18395276812147114318117806221245734777583902114904988265714937306223110133370177421973080273124396671850957989260914587667439185726054435050091554077716237265665104132728107389163309072180445734615502740086948488141529977807810985338341677246665343335570337561316793167695986732213272652297791554043415093133639706563357495040491867719175662472450821954537026575062918824190089416183244433026068848555349954328787304813797720228190516806897752606156198902901693807729842697366257785117791637401502680405339375507617037032549695903495609448259686428867051554458889024041944218410342309300106427960128861368732977318479 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4f85fc9b59d3c653978fbc1e83f31e822514bc79 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4039c9ffa48030fe3bf68c61c0b9a12676afc8e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmt.cupdapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykbill.qrcb.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebill.fubonchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebill.ydnsh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cardmail.psbc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibill.qlbchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.cc.hrbb.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zd.grcbank.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TrustAsiaOVTLSProCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TrustAsiaOVTLSProCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/TrustAsiaOVTLSProCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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