sdg2.mastercard.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d3:a5:c6 was issued on by Entrust, Inc..

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

MasterCard International

Organization: MasterCard International
Organization unit: NS201 SPRD
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d3:a5:c6
Serial Number (int): 1356047814
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: f7:dc:e5:d0:ca:2a:81:86:0e:e7:f4:c6:cd:ed:9b:2e:f8:2f:55:e4
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 23:e6:31:3c:2e:09:cc:ee:1a:a8:66:0c:ae:f7:2d:37:fe:49:8b:06
Fingerprint (sha256): 2c:d0:21:77:72:65:b0:a1:3b:8a:af:f7:d7:cb:26:5f:36:a7:2b:fe:80:a1:54:65:44:73:c6:61:f2:c0:02:8f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sdg2.mastercard.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdg2.mastercard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdg2.mastercard.com
www.ingsmartdata.com
smartdata.mastercard.com
www.smartdata.mastercard.com
smartdatamanager.mastercard.com
sdg2.fnbalaska.com
www.bpiexpressdataonline.com
www.cbbusinesscard.co.uk
www.cem.danskebank.dk
www.cem.danskebank.se
www.cem.fokus.no
www.cem.nationalirishbank.ie
www.cem.northernbank.co.uk
www.cem.sampopankki.fi
www.commercialcardreports.com
www.eurocard-gdm.com
www.globalmanagement.citidirect.com
www.natwestbusinesscard.com
www.rbsbusinesscard.co.uk
www.ybbusinesscard.co.uk
www.sdg2.hsbc.ae
www.sdg2.hsbc.com.bh
www.sdg2.hsbc.com.eg
www.sdg2.hsbc.com.qa
www.sdg2.viseca.com
www.smartdata.rbsnb.com
www.sdol.ubonecard.com
www.smartdata.charterone.com
www.smartdata.citizensbank.com

Other certificates including the domain name mastercard.com

(limited to 100 certificates)
stage.mastercard.com
preview.mastercard.us
work.stage.api.gateway.mastercard.com
smartdatademo.mastercard.com
mtf.direct.services.mastercard.com
developer2.mastercard.com
stage.performancemarketing.mastercard.com
stage.sa.api.mi.mastercard.com
m1.doibc.mastercard.com
caas-EmcreditLimited-mtf.mastercard.com
STL3WEB-EXT.mastercard.com
mtf.tds.mdes.mastercard.com
dxb.edw.customer.mastercard.com
stage.sa.collect.mastercard.com
perf.pki.gateway.mastercard.com
services.mastercard.com
del.sa.cardholder.mastercard.com
tds.mdes.mastercard.com
dc2.regional.services.mastercard.com
lacinnovation.mastercard.com
*.perf.gateway.mastercard.com
stage2.api.mastercard.com
stage.ws.mastercard.com
*.in.gateway.mastercard.com
MCCDCDEL.mastercard.com
*.gateway.mastercard.com
caas-banco-santan-br-mtf.mastercard.com
give.mastercard.com
mtf.chase.iccp.mastercard.com
uat.cpf.mastercard.com
stl.stage.services.mastercard.com
test-fbn.gateway.mastercard.com
gmc.mastercard.com
m.mtf.sdg2.mastercard.com
sdg2demo.mastercard.com
m.smartdata.mastercard.com
dr.iodr.mastercard.com
mobilemail.mastercard.com
mtf.message.mdes.mastercard.com
watertown.qa.truaxis.mastercard.com
stl.mtf.tds.mdes.mastercard.com
perf.api.mastercard.com
ksc.test.direct.api.mastercard.com
me.mastercard.com
preview.artistaccelerator.mastercard.com
stage.dpt.mq.mastercard.com
dist.services.portal-cr.mastercard.com
stage.edw.mastercard.com
mea.gateway.mastercard.com
caas-giesdev-ob-rabobk-mtf.mastercard.com
stage.banamex.mts.mastercard.com
mtf.sa.eis.customer.mastercard.com
global.services.mastercard.com
www.checkout.mastercard.com
SGP3WEB-EXT.mastercard.com
mtf.mea.cardholder.mastercard.com
www.signup.mastercard.com
www.mastercard.com
chase.iccp.mastercard.com
stage2.altituderewards.com.au.mastercard.com
mcaid.mastercard.com
clientsdk.filex.stage.mastercard.com
raxstage.pathway.mastercard.com
checkout.mastercard.com
stage.api.mastercard.com
pnq.sa.agent.mastercard.com
stage2.cuarewards.com.au.mastercard.com
securemessage.mastercard.com
stl.mtf.message.mdes.mastercard.com
sdram.mastercard.com
stage.sdg2.mastercard.com
stagecorporateprepaid.mastercard.com
ceros1.map.fastly.net
caas-tim-ob-caixa-mtf.mastercard.com
hsbcmex.perf2.truaxis.mastercard.com
winningmoments.mastercard.com
laas.labs.mastercard.com
securityvalidation.pki.in.gateway.mastercard.com
perf.mcincontrol.mastercard.com
directexpress.mastercard.com
www.mastercard.com
*.qa08.gateway.mastercard.com
cardholder.mastercard.com
pinpoint-citrix.mastercard.com
stage.kmp.notify.mastercard.com
stage.api-travel-au.pinpoint.net.mastercard.com
stl.doibc.mastercard.com
mtf.bsi.mastercard.com
www.mastercard.com
www.mastercard.com
hsbchk.pclo.mastercard.com
www.mastercard.com
sdg2demo.mastercard.com
m.baml.sdg2demo.mastercard.com
validation.mastercard.com
sa.services.mastercard.com
mtf.mightyrewards.com.au.mastercard.com
ceros1.map.fastly.net
m.baml.sdg2demo.mastercard.com
migs-isf.mastercard.com

Certificate

The complete raw certificate details for sdg2.mastercard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7uqtYnnA5mLWM4ymTue
/VXJLJIJS7lQQn+tYMrQLuRzeFnzLGNvUgUDry6SjXVTiLSU08yTT+PxVNzz+goF
48NHMhziYV+Jf4P6cWUwzhuRf3FAyJe2lt0tcWbZnQ66W3EiktfnduTh2frVFBa1
FdnA2Fd8nrTs/UZoQvc65+vteRaq5gPZFxEqEoynIkUMJCzOCMTA1U7c9LFD8g9Z
4lyqOHrQBi0vkoCJAWyp4D8106V0OGXwOWsLG6zokPkspJywDWR2a0f1VQYHXNXO
0G1HbE68zNtxIcdgK+xTsbwNPPXymb4SLlO7HaJfbxIDqj+21zZlSQw6OzuvHXGB
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356047814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-24 14:07:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-24 22:11:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NS201 SPRD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sdg2.mastercard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24204058212738992026829644500486347129315238904281881195219139368997999814478329741408299824600100988459281517360662906402912179534178049998962681120312647295076543594763241268287581766710118261435937895335710489051342901805738886897316312511509995856605296153198386493097251613982324583213744872368484856198075634700277046197428538128187429060886940605995737758811278079496155130761075069387134679624649045614304989051396101041672043486082852120423510206246181446293962099550621162539401155094510771169927760761119876267280362845007342253520490209116580449048771719845530733771758169749558624732946958260893452960177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdg2.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingsmartdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdata.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdatamanager.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdg2.fnbalaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpiexpressdataonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbbusinesscard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.danskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.danskebank.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.fokus.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.nationalirishbank.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.northernbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cem.sampopankki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialcardreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurocard-gdm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalmanagement.citidirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natwestbusinesscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbsbusinesscard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ybbusinesscard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdg2.hsbc.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdg2.hsbc.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdg2.hsbc.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdg2.hsbc.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdg2.viseca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.rbsnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdol.ubonecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.charterone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.citizensbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7dce5d0ca2a81860ee7f4c6cded9b2ef82f55e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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