passort.leagcard.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 1d:77:22:e6:27:34:5c:fb:7f:27:f1:49:06:8a:73:3d was issued on by GeoTrust Inc..

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: IT
State / Province: shanghai
Locality: shanghai
Country: CN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:77:22:e6:27:34:5c:fb:7f:27:f1:49:06:8a:73:3d
Serial Number (int): 39166203040465325862261756701620990781
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): b6:98:d7:c8:ec:4e:a0:c5:bd:14:37:8f:83:99:0e:a3:7f:c3:b9:10
Fingerprint (sha256): 1c:22:cf:8f:81:a5:75:76:6c:52:d8:4d:4b:de:41:23:18:6b:03:dc:02:5d:63:37:22:e1:a8:ea:73:46:3c:77

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate passort.leagcard.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for passort.leagcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

malls.hsbank.com.cn
jfshop.jybank.com.cn
malls.whccb.com
mallsll.cdrcb.com
mallsl.bankgz.com
shop.fjnx.com.cn
mall.uccb.com.cn
bankofbeijing.leagcard.com
merch.cib.com.cn
creditcard.10106262.com
mall.gdnybank.com
mall.wrcb.com.cn
bjrcb.leagcard.com
ccclub.njcb.com.cn
mall.boimc.com.cn
shop.fudian-bank.com
emall.beeb.com.cn
ccreward.standardchartered.com.cn
mall.zj96596.com
club.jlbank.com.cn
creditcard.bankofchangsha.com
mall.trcbank.com.cn
malls.wzbank.cn
mallhome.bankqh.com
jfscssl.bankofbbg.com
shop.yqccb.com
passort.leagcard.com

Other certificates including the domain name leagcard.com

(limited to 100 certificates)
web.cupdata.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
web.cupdata.com
resource.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
app.cupdapp.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
*.leagcard.com
onlinepay.cupdata.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
app.cupdapp.com
mall.rong-data.com
mall.rong-data.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
prepaidcard.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
*.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
*.leagcard.com
resource.leagcard.com
mall.rong-data.com
mall.rong-data.com
web.cupdata.com

Certificate

The complete raw certificate details for passort.leagcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrOirmGCJXpBl5TxIDsk
bbTWdhwmGf+l9Xwb68mzGp6KUb7TwMGYQFDoEVP1O+G7UyOdOOqogOagH4kWyPGj
KYh5rkRLoBBqHunWJh7aSntK+6nWhPnecZWkY6xuo/yy8Pg/EndFJUAJkYDeXx6V
PexqAuBfKecteFogmsL8CUMDpmPwMWMsEr8ZgpR3d2kPUmt4W7lD+/Yl6+nR3i8P
HsLXzOpq/uFPBK8rZw+p/w/abICKrDJb28fAjnAly3wYAdGTiqJ7h/fc8yP5l8kz
8QxwbCkDoxI83/dASKIxqm/NGvHM4B37izLgFAk3bo5ldtAAsyhpZVosKqm5kUTQ
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39166203040465325862261756701620990781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'passort.leagcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22558999837342711898284730771604341572567008931768740536651669734558041820979174079156466463919624466801489538291414832289134462403189483961076939466896677526343852915161993512744005721370370398317713769193201269815943954124436907859230789153622597427059023510743685906727317013451833212936211109273386488633959975020038495006963585813239755487952593445731198790618026450460142604679814003273568193827846984683477669066066329688852825503082616582115413171200252912159768581231074753243330975749466164096886946288676406033340399634134636828892822041940128428116146402078071154702709934385891357456048922831252023988227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malls.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfshop.jybank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malls.whccb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallsll.cdrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallsl.bankgz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.uccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofbeijing.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch.cib.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.10106262.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.gdnybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.wrcb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjrcb.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccclub.njcb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.boimc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fudian-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emall.beeb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccreward.standardchartered.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.zj96596.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.jlbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.bankofchangsha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.trcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malls.wzbank.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallhome.bankqh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfscssl.bankofbbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.yqccb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passort.leagcard.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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