resource.leagcard.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 0d:e0:9e:73:6d:54:00:e1:ab:59:25:23:69:ed:7d:52 was issued on by DigiCert Inc.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
State / Province: Shanghai
Locality: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e0:9e:73:6d:54:00:e1:ab:59:25:23:69:ed:7d:52
Serial Number (int): 18446252207307193843104728498417007954
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:9c:4e:47:a7:c3:6e:9b:c7:d5:7d:1e:52:9b:b9:7d:0d:94:4f:a4
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): cc:ec:78:f3:a5:c1:d3:48:60:c1:70:fc:f3:85:54:b6:5a:51:ea:44
Fingerprint (sha256): 0e:86:d2:0f:c7:db:20:9e:3b:45:eb:c2:d3:20:63:29:ec:c1:e0:ee:c9:c2:96:dd:a4:db:34:c3:94:25:fc:c4

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate resource.leagcard.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resource.leagcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resource.leagcard.com
mall.jinzhoubank.com
shop.jshbank.com
right.bankofrizhao.com.cn
right.mintaibank.com
rightretail.hsbank.com.cn
creditcardapply.jx-bank.com
www.gtldsc.com
swoop-nwd.rong-data.com
rightretail.hebbank.com
hsbankretail.leagcard.com
creditcardapply1.shengjingbank.com.cn
mall.xacbank.com
rightretail.jsbchina.cn
movie.haimocultural.com
importcardapply.hsbank.com.cn
mall.sdebank.com
jfmall.ynrcc.com
czbank.cupdata.com
mall.gsrcu.com
card.bankoffs.com.cn
creditcard.klb.cn
mall.bankgz.com
right.cqrcb.com
rightretail.jinzhoubank.com
right.wdnsbank.com
jsbdirect.leagcard.com
*.leagcard.com
creditcardapply.hsbank.com.cn
shop.fjnx.com.cn
www.huajifen.com
right.cbhb.com.cn
mall.jlnls.com
cardmall.grcbank.com
mall.bankoftianjin.com
creditcardrights.hnnx.com
smssp.cupdata.com
mall.hnnxs.com
rightcredit.jsbchina.cn
jf.qinnongbank.com
hbbretail.leagcard.com
mall.scrcu.com
creditcardapply2.shengjingbank.com.cn
creditcardapply.hrbb.com.cn
jsbretail.leagcard.com

Other certificates including the domain name leagcard.com

(limited to 100 certificates)
web.cupdata.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
web.cupdata.com
resource.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
app.cupdapp.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
*.leagcard.com
onlinepay.cupdata.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
app.cupdapp.com
mall.rong-data.com
mall.rong-data.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
prepaidcard.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
*.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
*.leagcard.com
resource.leagcard.com
mall.rong-data.com
mall.rong-data.com
web.cupdata.com

Certificate

The complete raw certificate details for resource.leagcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWKducH7lewKo2w+ShY1
hpWOKtobKU2fluFr9aJMKrHGrYFcTfdYqjpDwbJa4EmqJTk+KNbBATmkheAlAeF2
yqPqOWauHObe+ZouSr2EVg5pgcKyVP/3Wq8lKj+KYp8o9MT+fYpbnLZ8dia9w5fG
SS/XZG91vHVvZC1yzGBddadjzycahwCk9oa7C15/b+xgqu0BlqrmpZIdZ9eaPzTz
YaU5nEUXnH2/UNeAzT2Knj8XuWa+drj0ZKW51yvDuEJwB+Hy5lE2pT3ctGbFMNVb
x61Fg0h0pNAxws/WnIwZ1IIswBh/vLJTOEHYyGNv6Ix/JwRVhX7x0XQcB0RXlf1V
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18446252207307193843104728498417007954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resource.leagcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20877949738488818777890623199831040918801663024139325562155398783473878048656190442273943375820933841743871740178242801082161763533655882686111088045231798039544261866646984363229320305332335807390443115696510298782216348957907406063487583136221230738521299132949871296403135265744146047428598924303751895633698561503076567682398527766775110318639355368482611986149302220692757976755204263477483991418020126758380183238097408263818307453139574584853950846167634603583032060496432066240590355085543325356004184256118646017378627181524917065136878412797586557258462965410399873891610581503051023064332249069969920054691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							489c4e47a7c36e9bc7d57d1e529bb97d0d944fa4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1026 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.jx-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtldsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swoop-nwd.rong-data.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.hebbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbankretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply1.shengjingbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.xacbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.jsbchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie.haimocultural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importcardapply.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.sdebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfmall.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czbank.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.bankoffs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.klb.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.bankgz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.cqrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.wdnsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsbdirect.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huajifen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.cbhb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.jlnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardmall.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.bankoftianjin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardrights.hnnx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smssp.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.hnnxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightcredit.jsbchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jf.qinnongbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.scrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply2.shengjingbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.hrbb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsbretail.leagcard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016bc0d95ae70000040300483046022100c4c70e2e4b3f5021f4801d7fd4fbb18e96d0765a56d08a75f6fea5d1bcce47be022100ccffc9c4fd22ba04b613718bcde1c1afae9408d52c28678493dcc394b94877540076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bc0d95b2800000403004730450220204998cdffd578c5a25a6da883d80205fad39792847b249edbd4da3c24d83021022100b2a3ede560859971608fd927e8c2f31721af1ecaae25e8700429d094c6f282d00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016bc0d95a2f0000040300483046022100fd855ed3e9485dc6d5ffe6c6faa04d68c344ba1d41e48bf98b7dec09ed6971df022100970097923d6a809e7b1347ca0b186e9b17e408b78b377067b0197d0fcdacbefa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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