www.services.cn-banking.hsbc.com.cn

- The Hongkong and Shanghai Banking Corporation Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:09:af:15:a7:87:78:cd:c7:5e:d7:19:ff:7d:5c:5b was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hongkong and Shanghai Banking Corporation Limited

Organization: The Hongkong and Shanghai Banking Corporation Limited
Organization unit: HBCNIFC-2018
State / Province: Hong Kong
Locality: Central District
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:09:af:15:a7:87:78:cd:c7:5e:d7:19:ff:7d:5c:5b
Serial Number (int): 19988701745820375489828397856092675163
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fd:d3:6a:f2:71:d9:24:22:c7:4d:c2:11:58:20:8f:1f:23:e0:cb:71
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e2:cf:85:75:40:e5:76:e9:a8:bd:9d:32:3e:50:0f:e4:11:49:a3:6f
Fingerprint (sha256): 05:e3:90:89:52:a7:75:56:38:c0:d7:4a:8c:cd:4b:23:a7:b2:0a:4e:6a:c1:d9:37:8b:df:10:63:28:37:5a:35

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.services.cn-banking.hsbc.com.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.services.cn-banking.hsbc.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.services.cn-banking.hsbc.com.cn
www4.services.cn-banking.hsbc.com.cn
static.services.cn-banking.hsbc.com.cn
www.services.cn-banking.hsbc.com.cn

Other certificates including the domain name hsbc.com.cn

(limited to 100 certificates)
www.erf.hsbc.com.cn
www.hsbc.com.cn
static.tko.lp.services.online-banking.hsbc.com.cn
www.isstprod.hsbc.com.cn
www.security.online-banking.hsbc.com.cn
fusion-lending.hsbc.com.cn
www.erf.hsbc.com.cn
www.assetmanagement.hsbc.com
mbspd.hsbc.com.cn
cnmer---vi006.hsbc.com.cn
cnmer---vi005.hsbc.com.cn
www.hsbc.com.cn
staff-remoteaccess.hsbc.com.cn
www.insuranceinfo.hsbc.com.cn
business.hsbc.com
tko.lp.launch.online-banking.hsbc.com.cn
www.services.cn-banking.hsbc.com.cn
www.services.cn-banking.hsbc.com.cn
static.tko.lp.services.online-banking.hsbc.com.cn
cyber.hsbc.com.cn
business-uat.hsbc.com.my
tko.pilot.hsbc.com.cn
staff-remoteaccess.hsbc.com.cn
www.business.hsbc.fr
tko.lp.security.online-banking.hsbc.com.cn
www.ssp.security.online-banking.hsbc.com.cn
www.services.cn-banking.hsbc.com.cn
www.security.online-banking.hsbc.com.cn
www.online-banking.business.hsbc.com.hk
www.about.hsbc.co.nz
business.hsbc.com
staff-remoteaccess.hsbc.com.cn
www.insuranceinfo.hsbc.com.cn
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
tko.lp.launch.online-banking.hsbc.com.cn
www.hsbc.com.cn
corporate-api.hsbc.com.cn
CNNHC---VI007.hsbc.com.cn
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
www.assetmanagement.hsbc.com
static.services.online-banking.hsbc.com.cn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
digitalpreprod-cmb-ext-api.hsbc.com.cn
www.business.hsbc.fr
tko.lp.security.online-banking.hsbc.com.cn
business-uat.hsbc.com.my
securities-services.hsbc.com.cn
www.about.hsbc.com.hk
www.launch.online-banking.hsbc.com.cn
api.ifc.lp.security.cn-banking.hsbc.com.cn
securities-services.hsbc.com.cn
cnifc---vi001.hsbc.com.cn
gp.oat.app.hsbcfts.com.cn
www.business.hsbc.fr
cnifc---vi006.hsbc.com.cn
creditcards.hsbc.com.cn
cnmer---vi003.hsbc.com.cn
www.services.cn-banking.hsbc.com.cn
securities-services.hsbc.com.cn
tko.lp.security.online-banking.hsbc.com.cn
events.data.hsbc.com
www.ecds.hsbc.com.cn
business.hsbc.com
cnmer---vi003.hsbc.com.cn
www.launch.online-banking.hsbc.com.cn
static.tko.lp.services.online-banking.hsbc.com.cn
www.isstprod.hsbc.com.cn
www.ecds.hsbc.com.cn
www.fusion-loans-azn.hsbc.com.cn
www.uat2-insh-wechat-mgw.hsbclifeservices.com.cn
irtt-confirmation-uat.business.hsbc.com.cn
www.qualityassurance.ecds.hsbc.com.cn
wechat-mp-uat.services.hsbc.com.cn
corporate-api.hsbc.com.cn
www.business.hsbc.fr
www.hsbc.com.cn
www.hsbc.com.cn
cyber.hsbc.com.cn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
investments.personal-banking.hsbc.com.cn
CNNHC---VI005.hsbc.com.cn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.assetmanagement.hsbc.com
staff-remoteaccess.hsbc.com.cn
CNNHC---VI008.hsbc.com.cn
business-uat.hsbc.com.my
investments.personal-banking.hsbc.com.cn
tko.lp.launch.online-banking.hsbc.com.cn
staff-remoteaccess.hsbc.com.cn
cyber.hsbc.com.cn
www.ecds.hsbc.com.cn
cnnhc---vi004.hsbc.com.cn
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
investments.personal-banking.hsbc.com.cn
gp.uat.app.hsbcfts.com.cn
www.hsbc.com.cn
www.partnership.hsbc.com.cn
creditcards.hsbc.com.cn

Certificate

The complete raw certificate details for www.services.cn-banking.hsbc.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVDpDf0v5HMMhEkW2Qtg
83BJgVsJB73bVUH+odp/e+rCBACBuJ4IDTyFmrzSDk0g17yxlpFpFNmrLzSQe3cN
35z1MkIjzB4HBhUPY/iNPpLDSRYjY7QOKoTdTPNlE1xisBc1Zd8686JXmNaps3F9
OdQMJkAdpv7cnviTLeGDfIOnzthGty/oQtRso6nLvSCWuqzASSX9gHPRg0glX6/A
pctwCYBwRp/I0BfPBQBFkDe0IrfUSnda/QC4HF9mYMicT5TkUIjUCnZy6OCCcky+
TPO8Dfxr0zNq5dxUhI3cGs5uK6v8R2BEJlA4r2xfNlfR2UAvv+d0cnerL2rFqGIP
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19988701745820375489828397856092675163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hongkong and Shanghai Banking Corporation Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HBCNIFC-2018'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.services.cn-banking.hsbc.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17839499390549362556706840946269599437932601848951134703375229575744890236672596791626223526716401933875118374283609150653031922456035974360850528446642919652447873616945179437082241814875563089292296905913598107565880298412505360813864671304671046584399807134250393807280176535025006355933609518889899571338170713563389995147085546955405898241546491246985226162815474028325771690060547391676190794138797979162897812649806092629240325316309445376639010736527353111935478442646400636303744366667685304362354362496916277974183795922195338925736741403117195163355717156540088326251740689006944182752409408688273630564133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdd36af271d92422c74dc21158208f1f23e0cb71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.services.cn-banking.hsbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.services.cn-banking.hsbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.services.cn-banking.hsbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.services.cn-banking.hsbc.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165ccc3804c00000403004730450220490c6c40ca31f729e6466451e9acd7c74ce6b6835184226ad86fa620bf2737d20221008513e1f83b815aa61e5197c485350feef79c0ce93f89c9ee66a564cc19eb4db00077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165ccc3813b0000040300483046022100956436c5c9a904979f1a198f2e8e4752b3df4a1045a836bc94171c88084768ec022100d905b703f76ced623a8e67d7d447a7b78cfda7667de5143fe097e53315803c63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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