www.securepay.hsbc.com.vn

- The Hongkong and Shanghai Banking Corporation Limited -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 44:13:af:7b:5f:13:0c:44:48:fc:3f:a7:23:ae:4f:57 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

The Hongkong and Shanghai Banking Corporation Limited

Company registration number: 0263876
Organization: The Hongkong and Shanghai Banking Corporation Limited
Organization unit: GPEV spyvnm ev prod 2014
Address: 32/F HSBC Main Bldg 1 QUEEN'S Road Central District
Postal code: n/a
State / Province: HONG KONG
Locality: HONG KONG
Country: HK

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:13:af:7b:5f:13:0c:44:48:fc:3f:a7:23:ae:4f:57
Serial Number (int): 90489716549855172830874673687317860183
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 64:28:72:3c:10:18:98:40:7a:b3:09:23:e3:83:7d:f1:bd:09:df:2f
Fingerprint (sha256): 24:63:ed:5f:c7:ee:8a:5f:2c:1a:dc:4a:cb:0c:fa:d1:68:4e:c0:74:11:66:69:a1:1d:d3:5b:40:cd:17:28:3d

Issuing Certificate URL: http://sb.symcb.com/sb.crt

Revocation information

OCSP Server: http://sb.symcd.com
CRL Distribution Point: http://sb.symcb.com/sb.crl

Check the revocation status for certificate www.securepay.hsbc.com.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.securepay.hsbc.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.securepay.hsbc.com.vn

Other certificates including the domain name hsbc.com.vn

(limited to 100 certificates)
www.uat-securepay.hsbc.com.vn
pilot.hsbc.com.vn
gtff2.hsbc.com
www.hsbc.com.vn
business.hsbc.com
www.hsbc.com.vn
b2bedge2.b2b-apac.hsbc.com
www.evgr-securepay.hsbc.com.vn
www.hsbc.com.vn
www.business.hsbc.fr
www.about.hsbc.co.nz
business.hsbc.com
www.evgr-securepay.hsbc.com.vn
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
www.about.hsbc.com.hk
b2bedge1.b2b-apac.hsbc.com
www.business.hsbc.fr
prod.ap.dynp.cloud1.vv1865.com
events.data.hsbc.com
www.qualityassurance.securepay.hsbc.com.vn
business.hsbc.com
visawlt-cc-dev.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.business.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
pilot.hsbc.com.vn
b2bedge2.b2b-apac.hsbc.com
www.securepay.hsbc.com.vn
card.apply.hsbc.com.vn
blockchaintrade-sit.business.hsbc.co.kr
www.about.hsbc.co.nz
card.apply.hsbc.com.vn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.qualityassurance.securepay.hsbc.com.vn
www.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.securepay.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
www.evgr-securepay.hsbc.com.vn
www.securepay.hsbc.com.vn
business.hsbc.com.hk
www.qualityassurance.securepay.hsbc.com.vn
www.business.hsbc.fr
business.hsbc.com.hk
cdn.hsbc.com.vn
www.hsbc.com.vn
www.hsbc.com.vn
business.hsbc.com.hk
www.qualityassurance.securepay.hsbc.com.vn
www2.qualityassurance.ebanking.hsbc.com.vn
www.securepay.hsbc.com.vn
www.about.hsbc.com.hk
card.apply.hsbc.com.vn
www.about.hsbc.com.hk
blockchaintrade-sit.business.hsbc.co.kr
www.business.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
events.data.hsbc.com
www.business.hsbc.fr
card.apply.hsbc.com.vn
www.hsbc.com.vn
cdn.hsbc.com.vn
www.hsbc.com.vn
www.hsbc.com.vn
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
www.securepay.hsbc.com.vn
www.qualityassurance.securepay.hsbc.com.vn
prod.ap.dynp.cloud1.vv1865.com
prod.ap.dynp.cloud1.vv1865.com
www.hsbc.com.vn
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
gtff2-dev.hsbc.com
prod.ap.dynp.cloud1.vv1865.com
www.business.hsbc.com.hk
www.about.hsbc.com.hk
www.business.hsbc.fr
card.apply.hsbc.com.vn
blockchaintrade-sit.business.hsbc.co.kr
business.hsbc.com.hk
www.about.hsbc.com.hk
www.business.hsbc.fr
www.about.hsbc.co.nz
www.qualityassurance.securepay.hsbc.com.vn
pilot.hsbc.com.vn
business.hsbc.com.hk
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
visawlt-cc.hsbc.com.vn
www.hsbc.com.vn
www.business.hsbc.fr
www.hsbc.com.vn
www.business.hsbc.fr
www.business.hsbc.fr
gtff2-dev.hsbc.com

Certificate

The complete raw certificate details for www.securepay.hsbc.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIQRBOve18TDERI/D+nI65PVzANBgkqhkiG9w0BAQUFADCB
vjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE4MDYGA1UEAxMv
VmVyaVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBTR0MgQ0Ew
HhcNMTQwNDIzMDAwMDAwWhcNMTYwNDIzMjM1OTU5WjCCAU4xEzARBgsrBgEEAYI3
PAIBAxMCSEsxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYDVQQF
EwcwMjYzODc2MQswCQYDVQQGEwJISzEMMAoGA1UEERQDbi9hMRIwEAYDVQQIEwlI
T05HIEtPTkcxEjAQBgNVBAcUCUhPTkcgS09ORzE8MDoGA1UECRQzMzIvRiBIU0JD
IE1haW4gQmxkZyAxIFFVRUVOJ1MgUm9hZCBDZW50cmFsIERpc3RyaWN0MT4wPAYD
VQQKFDVUaGUgSG9uZ2tvbmcgYW5kIFNoYW5naGFpIEJhbmtpbmcgQ29ycG9yYXRp
b24gTGltaXRlZDEhMB8GA1UECxQYR1BFViBzcHl2bm0gZXYgcHJvZCAyMDE0MSIw
IAYDVQQDFBl3d3cuc2VjdXJlcGF5LmhzYmMuY29tLnZuMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEArziHD2RSTBrYQ6hCp4Ohr9RTKLoLPIUqfttgDOqk
MZekRd/jwpXFJrYpLsT0XS5Zko3HaZIpdDhOIgFtHMeUrEs2e3RLkpWVPAasScHZ
oE8r2Y1YZNkK2otHb8E+EhBtlocKUUC8xxOmMIeqeusAN3RtQ0CmZarUMBKxYj2G
BixfUK1OMSyj+Al02dufPHsHmCj9vex1istuMTus662XqmWdwMFkh5xc3wA9mphx
s4QXjzx4gk38KUWLDl4JqLi+TCRqfbGkcVokNRhrlZOALUlIMsU/bdtpn6Dr6K28
f/pUROrEZQKfsEklBHUftYBgdg/Fs+Ee2NeFC0F9MAxpwQIDAQABo4IBfjCCAXow
JAYDVR0RBB0wG4IZd3d3LnNlY3VyZXBheS5oc2JjLmNvbS52bjAJBgNVHRMEAjAA
MA4GA1UdDwEB/wQEAwIFoDAoBgNVHSUEITAfBggrBgEFBQcDAQYIKwYBBQUHAwIG
CWCGSAGG+EIEATBmBgNVHSAEXzBdMFsGC2CGSAGG+EUBBxcGMEwwIwYIKwYBBQUH
AgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkaF2h0dHBz
Oi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFE5DyB127zdTek/yWG+U8zji
1b3fMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zYi5zeW1jYi5jb20vc2IuY3Js
MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NiLnN5bWNkLmNv
bTAmBggrBgEFBQcwAoYaaHR0cDovL3NiLnN5bWNiLmNvbS9zYi5jcnQwDQYJKoZI
hvcNAQEFBQADggEBAHOiqTzGMtiC1f66QtnuUWZxxqfO+tduheyR28jwYKQHK+2Y
nQX++28eRaXCrl2MSTJeZiggkILCNU5JjKGTZBii5gtdF/Wqtmim2nnmZpUHf1Yw
Fj3HkNX+iGN9ZOvyAE/Evv544p26z/E5iVqkf6Os9xmu6ujtgbvhuOUahvQ049Bw
dgINCxS/exMbpq92nRRMRXOHHHQgPS89HynQIkz4fXx95Vbkhda45g+Dd2VoHxlr
3K3JOUuyI3pQQjSih09NSU7c6WpptE7Mx8Scr5KOcAqCotskKMUT21S2GJXwoo0l
jPsAxfO2WazzCNopVCZc9DETdvkX3EgnrVrLXvE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArziHD2RSTBrYQ6hCp4Oh
r9RTKLoLPIUqfttgDOqkMZekRd/jwpXFJrYpLsT0XS5Zko3HaZIpdDhOIgFtHMeU
rEs2e3RLkpWVPAasScHZoE8r2Y1YZNkK2otHb8E+EhBtlocKUUC8xxOmMIeqeusA
N3RtQ0CmZarUMBKxYj2GBixfUK1OMSyj+Al02dufPHsHmCj9vex1istuMTus662X
qmWdwMFkh5xc3wA9mphxs4QXjzx4gk38KUWLDl4JqLi+TCRqfbGkcVokNRhrlZOA
LUlIMsU/bdtpn6Dr6K28f/pUROrEZQKfsEklBHUftYBgdg/Fs+Ee2NeFC0F9MAxp
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90489716549855172830874673687317860183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0263876'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'n/a'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HONG KONG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'HONG KONG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '32/F HSBC Main Bldg 1 QUEEN'S Road Central District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Hongkong and Shanghai Banking Corporation Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'GPEV spyvnm ev prod 2014'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.securepay.hsbc.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22119578156981143898287342143014562260787806866183061276336701283442687597230448841048231692641642597460285928055859324611589398160520507729301848913390868189395180857672888102255117578714359797844129308732573464071697655768214100294322053275459019010895741651217491534204763924455849076271796149313925834743388198349161078881765650029303385715007740186576388176050518613975073741018774754905405610628925879852375491749563888888706558116553704751576385497316913951915899068123637569112221790284124423111817422607578872456808189844924855107147926738867918002001978281312056521279568231178680592074719588445998732306881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securepay.hsbc.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcb.com/sb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcb.com/sb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073a2a93cc632d882d5feba42d9ee516671c6a7cefad76e85ec91dbc8f060a4072bed989d05fefb6f1e45a5c2ae5d8c49325e6628209082c2354e498ca1936418a2e60b5d17f5aab668a6da79e66695077f5630163dc790d5fe88637d64ebf2004fc4befe78e29dbacff139895aa47fa3acf719aeeae8ed81bbe1b8e51a86f434e3d07076020d0b14bf7b131ba6af769d144c4573871c74203d2f3d1f29d0224cf87d7c7de556e485d6b8e60f837765681f196bdcadc9394bb2237a504234a2874f4d494edce96a69b44eccc7c49caf928e700a82a2db2428c513db54b61895f0a28d258cfb00c5f3b659acf308da2954265cf4311376f917dc4827ad5acb5ef1