*.statictest.cupdata.com
- China Unionpay Data Services Co., Ltd -
Issued by CFCA OV OCA
About this certificate
This digital certificate with serial number 20:15:01:d9:cf:a9:23:b5:ca:34:2d:3f:f2:66:fc:ef was issued on by China Financial Certification Authority.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
China Unionpay Data Services Co., Ltd
Organization:
China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
Organization unit: Innovation Business Dept.
State / Province:
Shanghai
Locality: Shanghai
Country: CN
Locality: Shanghai
Country: CN
China Financial Certification Authority
Organization:
China Financial Certification Authority
Country:
CN
This certificate has expire since
Certificate Details
Serial Number (hex): 20:15:01:d9:cf:a9:23:b5:ca:34:2d:3f:f2:66:fc:efSerial Number (int): 42644371638335282692943847880862924015
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: ff:77:4d:cc:11:6e:b5:39:d7:79:45:e9:57:8d:1d:0f:36:1b:97:e7
AuthorityKeyId: 66:b3:ef:fb:54:95:87:e9:ac:a5:96:56:ae:e6:7d:ed:3a:d0:43:d1
Fingerprint (sha1): fb:46:61:99:bf:e4:52:1d:6f:5e:7d:a4:0d:c0:a0:78:03:e3:ab:db
Fingerprint (sha256): 23:34:8a:65:29:4c:24:ff:b9:88:f8:f5:82:7e:b7:e6:1b:b5:7a:89:b4:8d:41:d9:a7:d1:b8:a6:77:13:cb:eb
Issuing Certificate URL: http://gtc.cfca.com.cn/ovoca/ovoca.cer
Revocation information
OCSP Server: http://ocsp.cfca.com.cn/ocspCRL Distribution Point: http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl
Check the revocation status for certificate *.statictest.cupdata.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.statictest.cupdata.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.statictest.cupdata.com
statictest.cupdata.com
statictest.cupdata.com
Other certificates including the domain name cupdata.com
(limited to 100 certificates)
web.cupdata.com
directbank.cupdata.com
wechat.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wlian.cupdata.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
trip.cupdata.com
web.cupdata.com
citiweb.cupdata.com
wechat.cupdapp.com
resource.leagcard.com
directbank.cupdata.com
passort.leagcard.com
directbank.cupdata.com
ncoas.cupdapp.com
*.cupdata.com
wlian.cupdata.com
web.cupdata.com
securityplus.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
directbank.cupdata.com
www.cupdata.com
*.cupdata.com
passort.leagcard.com
resource.leagcard.com
xdzlar.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
*.statictest.cupdata.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
3d.cupdata.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
trip.cupdata.com
ncoas.cupdapp.com
securityplus.cupdata.com
passort.leagcard.com
directbank.cupdata.com
passort.leagcard.com
www.cupdata.com
passort.leagcard.com
citiweb.cupdata.com
www.cupdata.com
directbank.cupdata.com
trip.cupdata.com
web.cupdata.com
www.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
www.cupdata.com
passort.leagcard.com
scbwxmnrecsign.cupdata.com
ncoas.cupdapp.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
directbank.cupdata.com
resource.leagcard.com
3d.cupdata.com
directbank.cupdata.com
intl.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
directbank.cupdata.com
onlineuat.cupdata.com
trip.cupdata.com
onlineuat.cupdata.com
www.cupdata.com
passort.leagcard.com
passort.leagcard.com
3d.cupdata.com
mbank6.cupdata.com
app.cupdapp.com
mbank6.cupdata.com
resource.leagcard.com
scbwxmnrecsign.test.cupdata.com
passort.leagcard.com
passort.leagcard.com
*.test.cupdata.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
directbank.cupdata.com
wechat.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wlian.cupdata.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
trip.cupdata.com
web.cupdata.com
citiweb.cupdata.com
wechat.cupdapp.com
resource.leagcard.com
directbank.cupdata.com
passort.leagcard.com
directbank.cupdata.com
ncoas.cupdapp.com
*.cupdata.com
wlian.cupdata.com
web.cupdata.com
securityplus.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
directbank.cupdata.com
www.cupdata.com
*.cupdata.com
passort.leagcard.com
resource.leagcard.com
xdzlar.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
*.statictest.cupdata.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
3d.cupdata.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
trip.cupdata.com
ncoas.cupdapp.com
securityplus.cupdata.com
passort.leagcard.com
directbank.cupdata.com
passort.leagcard.com
www.cupdata.com
passort.leagcard.com
citiweb.cupdata.com
www.cupdata.com
directbank.cupdata.com
trip.cupdata.com
web.cupdata.com
www.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
www.cupdata.com
passort.leagcard.com
scbwxmnrecsign.cupdata.com
ncoas.cupdapp.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
directbank.cupdata.com
resource.leagcard.com
3d.cupdata.com
directbank.cupdata.com
intl.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
directbank.cupdata.com
onlineuat.cupdata.com
trip.cupdata.com
onlineuat.cupdata.com
www.cupdata.com
passort.leagcard.com
passort.leagcard.com
3d.cupdata.com
mbank6.cupdata.com
app.cupdapp.com
mbank6.cupdata.com
resource.leagcard.com
scbwxmnrecsign.test.cupdata.com
passort.leagcard.com
passort.leagcard.com
*.test.cupdata.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
Certificate
The complete raw certificate details for *.statictest.cupdata.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIQIBUB2c+pI7XKNC0/8mb87zANBgkqhkiG9w0BAQsFADBV MQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MRQwEgYDVQQDDAtDRkNBIE9WIE9DQTAeFw0xOTExMTUw ODQxMzRaFw0yMTExMTUwODQxMzRaMIGqMQswCQYDVQQGEwJDTjERMA8GA1UECAwI U2hhbmdoYWkxETAPBgNVBAcMCFNoYW5naGFpMS4wLAYDVQQKDCVDaGluYSBVbmlv bnBheSBEYXRhIFNlcnZpY2VzIENvLiwgTHRkMSIwIAYDVQQLDBlJbm5vdmF0aW9u IEJ1c2luZXNzIERlcHQuMSEwHwYDVQQDDBgqLnN0YXRpY3Rlc3QuY3VwZGF0YS5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PlYb8zwj9j/kNV9a 63qlb1p41jras9EALgDqFpm6/26s8txb8XVgym5kc1MvncJ9Wu+488kHa5JEByyD PzM7klELCLGEe7Z4Bn+uFR0viuzHF7zEmIYfo3zIBxXaTg5hjGsgpY2puKS4HgQk 0pSa6Kbc0QysgYt4BbkDyhpB6HN0S6+tYc0Lc3FP5xxgaVeb7P2djh5pqSi3ruuq nGTn74sT6MsWZ0SZrMgS4dnybOle/46jNjO6oWRuTluOFezlfmacc62NUWgQlX8H cbMNu47vEeT6a7khmo90mCVxgHBjGl4kekWpS2vQbHYaEaujw+VW11Mo3zglTeU+ RllhAgMBAAGjggHAMIIBvDAJBgNVHRMEAjAAMGwGCCsGAQUFBwEBBGAwXjAoBggr BgEFBQcwAYYcaHR0cDovL29jc3AuY2ZjYS5jb20uY24vb2NzcDAyBggrBgEFBQcw AoYmaHR0cDovL2d0Yy5jZmNhLmNvbS5jbi9vdm9jYS9vdm9jYS5jZXIwOwYDVR0R BDQwMoIYKi5zdGF0aWN0ZXN0LmN1cGRhdGEuY29tghZzdGF0aWN0ZXN0LmN1cGRh dGEuY29tMAsGA1UdDwQEAwIFoDAdBgNVHQ4EFgQU/3dNzBFutTnXeUXpV40dDzYb l+cwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBMGCisGAQQB1nkCBAMB Af8EAgUAMB8GA1UdIwQYMBaAFGaz7/tUlYfprKWWVq7mfe060EPRMEYGA1UdIAQ/ MD0wOwYGZ4EMAQICMDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuY2ZjYS5jb20u Y24vdXMvdXMtMTIuaHRtMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuY2Zj YS5jb20uY24vT1ZPQ0EvUlNBL2NybDI1LmNybDANBgkqhkiG9w0BAQsFAAOCAQEA 1vA0Cns+lL72BA63qGYkreec6woxjxM8Z2p9wQX7swubE9GDQ/VpexTXzuOHLuMO coXSWROti1oWN1/IIOChyQuNJE5CviWE8A+2TIRDdXlLBLbHh6ysSQNDAOsvv1F3 CQOKrEbyk55GkK2hHYEbrOtGZkCt1TKrKDWJnCfcKApQ09X7cjdZv2XZBihv54Ji Vrcr0c5vbWQuOzBDEV0/tZwb46Fn/H2P20hDwVLvYCTQVBEgnOTk3NuKx18Q33bg MrB5HLn5pNnSn5GQH1y/Kf2WMPhVzRe0F5BkMmyFB2MKgqxIsLyIIilZhhqKyqvB Ysl2NF8kZbr9nwWmA99Ipg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz5WG/M8I/Y/5DVfWut6 pW9aeNY62rPRAC4A6haZuv9urPLcW/F1YMpuZHNTL53CfVrvuPPJB2uSRAcsgz8z O5JRCwixhHu2eAZ/rhUdL4rsxxe8xJiGH6N8yAcV2k4OYYxrIKWNqbikuB4EJNKU muim3NEMrIGLeAW5A8oaQehzdEuvrWHNC3NxT+ccYGlXm+z9nY4eaakot67rqpxk 5++LE+jLFmdEmazIEuHZ8mzpXv+OozYzuqFkbk5bjhXs5X5mnHOtjVFoEJV/B3Gz DbuO7xHk+mu5IZqPdJglcYBwYxpeJHpFqUtr0Gx2GhGro8PlVtdTKN84JU3lPkZZ YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 42644371638335282692943847880862924015 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Financial Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CFCA OV OCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 08:41:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-15 08:41:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Unionpay Data Services Co., Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Innovation Business Dept.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.statictest.cupdata.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23637302235400007070034624512299223188739207214146338572328151004404014628922033845169791121483626466482719584465124548053554523347810007277162551569914614020303851556352425275276190132633517094946079703568468060638098865062762856973369105777606228439143288579991441593401690164829105669808562293335345212069811452077831425164737151789762607435811152551161914744554680034207823998161697476731229600906268422238359858294443361020777245080262495155280698270170100326007155064866236472540562802537744484099616353763161853293748788265059131483670215651589535429924755357568433909208997312938275814456921377869478215702881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cfca.com.cn/ocsp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtc.cfca.com.cn/ovoca/ovoca.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statictest.cupdata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statictest.cupdata.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff774dcc116eb539d77945e9578d1d0f361b97e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3effb549587e9aca59656aee67ded3ad043d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.cfca.com.cn/us/us-12.htm' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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