apply-bank.hangseng.com

- HANG SENG BANK LTD -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 08:85:53:36:b6:12:26:68:09:b2:30:45:e7:e7:48:83 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HANG SENG BANK LTD

Company registration number: 0003653
Organization: HANG SENG BANK LTD
Organization unit: GPEV bank hangseng com 2018 ad
Locality: Central
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:85:53:36:b6:12:26:68:09:b2:30:45:e7:e7:48:83
Serial Number (int): 11326087223130551738068702681622857859
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:53:1b:62:f8:83:57:06:31:aa:19:d6:fa:3d:13:0a:0c:27:c9:f9
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): ef:58:d4:44:34:a2:d8:fa:9f:e8:fc:fb:00:99:fb:f8:ab:7c:46:39
Fingerprint (sha256): 0d:82:f3:ce:91:b8:20:19:e9:49:a9:c8:3a:41:51:19:38:e0:16:f4:99:ce:98:ae:ae:ea:0c:b6:82:b5:a1:cc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate apply-bank.hangseng.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apply-bank.hangseng.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply-bank.hangseng.com

Other certificates including the domain name hangseng.com

(limited to 100 certificates)
www.hangseng.com
qualityassurance-ebusiness-mobile.hangseng.com
hasecuppostlsskm.hangseng.com
uat-api.ob.hangseng.com
e-banking.hangseng.com
qualityassurance-cmb-api-uat.hangseng.com
ebusiness.hangseng.com
skm-e-banking.hangseng.com
quote3.hangseng.com
sat-quote.hangseng.com
preprod.iads.sandbox.ob.hangseng.com
origin-am6-gbbsp.hangseng.com
developer.hangseng.com
www.cardsmsservice.qualityassurance.hangseng.com
bank.hangseng.com
www.ipoonline.hangseng.com
uat.haseafepos.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
www.cardsmsservice.hangseng.com
www.prd-ins-wis.hangseng.com
e-banking.hangseng.com
e-banking.hangseng.com
www.ipoonline.hangseng.com
sslcertificate2.queue-it.net
qualityassurance-hase-dbbsp-mauth-uat.hangseng.com
www.hangseng.com
devatmpcup.hangseng.com
cloud.cmb.hangseng.com
b2bedge2.b2b-apac.hsbc.com
quote3.hangseng.com
sandbox.ob.business.hangseng.com
preprod.directory.sandbox.ob.hangseng.com
uat-api.hangseng.com
sslcertificate2.queue-it.net
pilot-e-banking.hangseng.com
chatbot.hangseng.com
develop.hangseng.com
uat-developer.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
www.hangseng.com
www.hangseng.com
qualityassurance-hase-gbbsp-uat.p2g.netd2.hangseng.com
coordinator.fl-dev.business.hangseng.com
www.hangseng.com
www.ipoonline.hangseng.com
www.hsi.com.hk
chatbot-uat.hangseng.com
click.cmb.hangseng.com
uat-api.ob.hangseng.com
e-banking.uat.hangseng.com
www.ipoonline.hsbc.com.hk
pages.messaging.hangseng.com
business.virtualassistant.hangseng.com
e-banking1.hangseng.com
qualityassurance-bank.hangseng.com
sslcertificate2.queue-it.net
digitalreceivablesfinance.business.hangseng.com
apply-bank.hangseng.com
appointment-uat.hangseng.com
uat-cms.hangseng.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
am6-gbbsp.hangseng.com
preprod.iads.sandbox.ob.business.hangseng.com
www.ipoonline.hangseng.com
qualityassurance-ebusiness-mobile6.hangseng.com
e-banking2.hangseng.com
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
qualityassurance-ebusiness-mobile5.hangseng.com
qualityassurance-ebusiness-mobile3.hangseng.com
uat-eba.hangseng.com
dco-ao-tko.hangseng.com
cloud.messaging.hangseng.com
e-banking.hangseng.com
www.enacservicehk.qualityassurance.hangseng.com
www.ipoonline.hangseng.com
dsp.hangseng.com
www.visatokenotp.hangseng.com
inv.hangseng.com
www.qualityassurance.ipoonline.hangseng.com
e-banking.hangseng.com
ob.hangseng.com
uat.securepay.hangseng.com
apply-ebusiness.hangseng.com
sslcertificate2.queue-it.net
uat-eba.hangseng.com
chatbot-uat.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
tx.fghk-dev3.hangseng.com
e-banking.hangseng.com
b2bedge1.b2b-apac.hsbc.com
sslcertificate2.queue-it.net
gbbsp.hangseng.com
sslcertificate2.queue-it.net
e-banking1.hangseng.com
sslcertificate2.queue-it.net
tx.fghk.hangseng.com
e-banking2.hangseng.com
devmcup.hangseng.com
e-banking.uat.hangseng.com

Certificate

The complete raw certificate details for apply-bank.hangseng.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cu5lqoJ078/mfYyB6cR
QosLapl0AZNrMzMiXTLsq/lBiofi+XO5AiwXzm/R0lLUL+OGx8FDTowhbnIS/cpt
go30QxHVGHiezvUnbv7LNI93xobi6QnJjTGCtSi9MWYCvkBLoR7GlwFSSb8P/m+H
au66yHSNu/LMcnQ9tFwyUeMbHYCJsCipo2inqDg5DFzx08DY7bxJEEK7atL3S/Iz
ZdOmfZ8xCcU4N8PKOdsPtxsRpHTzu8MFGYmAkNhbkE5BR/RIjVQFa9obzJJRRCs5
RExNIbFtU5JlX70RAKtOP8RS5vbRNd9eWSEYnBq1TO9OORBkTmIx3J7Zws63Oq9/
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11326087223130551738068702681622857859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0003653'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HANG SENG BANK LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GPEV bank hangseng com 2018 ad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apply-bank.hangseng.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27289035451690532478610953252318268494738672768570445743181479893572762038103724032887539328902240598015599948086547717177908230097373295178858087523592728216502230137221727748157063486599555167447120833853010057227935644188736122147099990026965747601691240384263181670227383153990198959754978107623258910793164146642824663178098799928127587977243529905969361015909272185897628629994798665357270739330785897871669953458722339530610527515566253060750550026711878726986293831612897265777990897719980261297361697864269607626348999619109203829897422605235997236470296819951464506845078712280473851298424779038038709731107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59531b62f883570631aa19d6fa3d130a0c27c9f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply-bank.hangseng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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