*.brain.lenovo.com

- Beijing Lenovo Software co., Ltd. -

Issued by TrustAsia RSA OV TLS CA G3

About this certificate

This digital certificate with serial number 34:d6:26:16:1e:8c:99:38:7c:a6:a3:02:e7:cf:93:5e was issued on by TrustAsia Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Beijing Lenovo Software co., Ltd.

Organization: Beijing Lenovo Software co., Ltd.
State / Province: 北京市
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 34:d6:26:16:1e:8c:99:38:7c:a6:a3:02:e7:cf:93:5e
Serial Number (int): 70231779792581116054253023471913112414
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8e:03:bb:fe:51:e9:4c:0b:86:87:69:4f:eb:df:d5:ca:d4:e5:6c:bd
AuthorityKeyId: 40:30:22:8b:8d:2a:32:29:f8:10:21:0d:00:63:5e:45:d3:2c:e0:25

Fingerprint (sha1): c4:3a:85:08:c7:53:8a:3d:20:8f:29:5c:89:b3:0c:f8:fb:35:ce:a1
Fingerprint (sha256): 06:88:df:b4:ce:4b:2e:9f:b0:84:cd:14:10:00:dc:5d:ed:0e:5d:24:a8:68:e2:63:26:1d:c6:ba:eb:e2:a1:77

Issuing Certificate URL: http://crt.trust-provider.cn/TrustAsiaRSAOVTLSCAG3.crt

Revocation information

OCSP Server: http://ocsp.trust-provider.cn
CRL Distribution Point: http://crl.trust-provider.cn/TrustAsiaRSAOVTLSCAG3.crl

Check the revocation status for certificate *.brain.lenovo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.brain.lenovo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.brain.lenovo.com
brain.lenovo.com

Other certificates including the domain name lenovo.com

(limited to 100 certificates)
777bpce76.saagie.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com

Certificate

The complete raw certificate details for *.brain.lenovo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFjCCBX6gAwIBAgIQNNYmFh6MmTh8pqMC58+TXjANBgkqhkiG9w0BAQwFADBZ
MQswCQYDVQQGEwJDTjElMCMGA1UEChMcVHJ1c3RBc2lhIFRlY2hub2xvZ2llcywg
SW5jLjEjMCEGA1UEAxMaVHJ1c3RBc2lhIFJTQSBPViBUTFMgQ0EgRzMwHhcNMjMx
MTAxMDAwMDAwWhcNMjQxMTI5MjM1OTU5WjBqMQswCQYDVQQGEwJDTjESMBAGA1UE
CAwJ5YyX5Lqs5biCMSowKAYDVQQKEyFCZWlqaW5nIExlbm92byBTb2Z0d2FyZSBj
by4sIEx0ZC4xGzAZBgNVBAMMEiouYnJhaW4ubGVub3ZvLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMrB9KR30zsL3kUcg9HFLIYvArlDVufyZFwj
slV+ummrAxUiwC9PriHS8mgmxh2Xd38IDLgNG+tyqed+LJ98X74IefiUXDd6jk6V
k6HbA1SmCgXmc6rNjjaHTtfSYGhduU/IxiHuiVQQfYv6PVPmYvqKKJ1QM6qp6VPu
Js7YG7RlhPxET9TiJZYxyQ6Y33odVxYnjv89aQJA+mZKjVjkeh8z012gW5w/jdOz
2ejtqcSBm6qvSrxXn7hHf2BBOYwmyMSrOfrweLHtmlF6Ve4o7VRyU3ZiTxnT24ah
EoYBQyepPf3c/tXP/WurKQ/Drb721QUejBBNjR2WWsF+To2iVj8CAwEAAaOCA0cw
ggNDMB8GA1UdIwQYMBaAFEAwIouNKjIp+BAhDQBjXkXTLOAlMB0GA1UdDgQWBBSO
A7v+UelMC4aHaU/r39XK1OVsvTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr
BgEEAbIxAQICMTAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ
UzAIBgZngQwBAgIwRwYDVR0fBEAwPjA8oDqgOIY2aHR0cDovL2NybC50cnVzdC1w
cm92aWRlci5jbi9UcnVzdEFzaWFSU0FPVlRMU0NBRzMuY3JsMH0GCCsGAQUFBwEB
BHEwbzBCBggrBgEFBQcwAoY2aHR0cDovL2NydC50cnVzdC1wcm92aWRlci5jbi9U
cnVzdEFzaWFSU0FPVlRMU0NBRzMuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vb2Nz
cC50cnVzdC1wcm92aWRlci5jbjAvBgNVHREEKDAmghIqLmJyYWluLmxlbm92by5j
b22CEGJyYWluLmxlbm92by5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi4jbT8wAAAQDAEcw
RQIgY4xYUADK2JUUKpSKlC7zWbP6oeMW/dvvgbaP6kWt7uICIQDzrEM39/YAXjmz
CGjawyvGU6u5peP6CyV5gVqeTaFIlAB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSF
NL2kPTBI1/urAAABi4jbUCEAAAQDAEgwRgIhAM8gmBZzK1F55KBrqLCv+ZdlvO05
FKWUaOwBRQwVb9CbAiEAtnlS4ZOqZ8NFJghaCU78vnNgEn2aW34YkqYxKCRN7HQA
dQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuI20/7AAAEAwBG
MEQCIDAWGrKs560BTznTnRpvv06Nr7UQfiIDmvYY/Pt6fz9KAiBKzFNeFgs0v2i+
sMOzpx7txAxG1cSEDX1/WR9SWSOkojANBgkqhkiG9w0BAQwFAAOCAYEAU6buQYIJ
ETTawhs5AV0fc2yIwhvZ9SX2U496bspigCRe1A+/pOeZZc/UJ1eYzqbNKzD3SGd4
CRIptApVhf5wx3ZxmalFLjnc1LENjxmBDc0CkrTEd1K6YpFYOF0YuKtsx9CLhfhj
9RqKTmfA4SFFDd4D2YULSMPD9nazQIDYObUiGvZjYV9JIs7Cz1Z2Za+wnaqW976z
XumMKrC4tQ95ide1twfKFNoW5lJR2PBPBPhAWZH1VumjE3dhCkD8XOc+zV98l4Ky
whtvSxfvxNgkdBaZVQGdndGURd+GkhjwpJ/77bOgTwU+wjUXKmSrcG84dHZNJm8M
NhbwrcipO9db4K+wEpDAvzuh9B4rSVl4XlLFzOzbPBhkyYADTeoS/h/UMPpxldA9
YVe7tWnT1AZdkqgy/LvYYWoK/kR/Jgo6UN3+3zIgF3SMDWKXPyEUxtlBv+WZafc7
a3hlalTNmMTg+/jWEJCxXaqDJt2QSVr+UiircKa8kuCBG2b1NBP0ryxT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysH0pHfTOwveRRyD0cUs
hi8CuUNW5/JkXCOyVX66aasDFSLAL0+uIdLyaCbGHZd3fwgMuA0b63Kp534sn3xf
vgh5+JRcN3qOTpWTodsDVKYKBeZzqs2ONodO19JgaF25T8jGIe6JVBB9i/o9U+Zi
+ooonVAzqqnpU+4mztgbtGWE/ERP1OIlljHJDpjfeh1XFieO/z1pAkD6ZkqNWOR6
HzPTXaBbnD+N07PZ6O2pxIGbqq9KvFefuEd/YEE5jCbIxKs5+vB4se2aUXpV7ijt
VHJTdmJPGdPbhqEShgFDJ6k9/dz+1c/9a6spD8OtvvbVBR6MEE2NHZZawX5OjaJW
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70231779792581116054253023471913112414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia RSA OV TLS CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing Lenovo Software co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brain.lenovo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25595780691223694597755843344679294934578264797268011307951601721663241585462849656250437635129928202677471984029691820699247904774778774293586223593124299372030890373894575171316682824867184090968124217850218208008690070652853497247727318732765266737090334326597902415096756814670700788290899443808961815014226712843982265906445812779759112972572358774113505133575035229503673606744513065026271029388146763677117255684771824188142495682204372167793104487891078490243820090683442130328311140202734402085932224466199137070683637672442390783533220359219810080925853006872771274677310632908860046007996658768220969391679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4030228b8d2a3229f810210d00635e45d32ce025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e03bbfe51e94c0b8687694febdfd5cad4e56cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.49
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trust-provider.cn/TrustAsiaRSAOVTLSCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.trust-provider.cn/TrustAsiaRSAOVTLSCAG3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust-provider.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brain.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brain.lenovo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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