ems.kiaintra.com

- Hyundai Motor Company -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 2e:31:c7:b8:0e:bb:6a:ee:71:fd:92:4a:e2:88:6c:84 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hyundai Motor Company

Organization: Hyundai Motor Company
Organization unit: HMG Business Team
Organization unit: Hosted by Korea Information Certificate Authority, Inc.
Organization unit: InstantSSL
Address: 231, Yangjae-dong
Postal code: 137130
State / Province: Seoul
Locality: Seocho-gu
Country: KR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:31:c7:b8:0e:bb:6a:ee:71:fd:92:4a:e2:88:6c:84
Serial Number (int): 61402961134226730249578524296922819716
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 14:8e:f7:11:aa:4b:a0:82:da:70:00:95:da:76:d0:b4:f3:11:03:cd
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 50:0f:a9:1a:4d:0d:fc:d8:34:f6:f2:bf:39:b8:4f:f0:d9:d3:52:0d
Fingerprint (sha256): 30:84:b9:f5:c3:fb:55:ed:f1:77:f1:a4:d8:12:c7:63:08:59:2e:bc:54:38:6c:70:e1:e0:95:4a:0d:37:66:21

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ems.kiaintra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ems.kiaintra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ems.kiaintra.com
www.ems.kiaintra.com

Other certificates including the domain name kiaintra.com

(limited to 100 certificates)
msos.kia.com
stg-web.icps.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
kpi.kiaintra.com
www.hyundai.com
ktong-gw.kiaintra.com
h1asmt.kiaintra.com
tstmgsw.kiaintra.com
khcbopq.kiaintra.com
ems.kiaintra.com
dmis.kiaintra.com
ems.kiaintra.com
stg-web.icps.kiaintra.com
k-cube.kiaintra.com
kmmmes.kiaintra.com
k-cubedev.kiaintra.com
vocas.kiaintra.com
ems.kiaintra.com
msos.kia.com
ems.kiaintra.com
otms.kiaintra.com
otms.kiaintra.com
kas.kiaintra.com
ksw.kia.co.kr
k-cubespdev.kiaintra.com
ktong-mm.kiaintra.com
dmobileautoq.kiaintra.com
kmmmes.kiaintra.com
dmis.kiaintra.com
h1asmt.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
ksw.kia.co.kr
www.hyundai.com
otms.kiaintra.com
ktong-push.kiaintra.com
dmis.kiaintra.com
hknpms.hmc.co.kr
ktong-wm.kiaintra.com
ksw.kia.co.kr
dmis.kiaintra.com
msos.kia.com
ktong-gw.kiaintra.com
ems.kiaintra.com
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ems.kiaintra.com
dmobileautoq.kiaintra.com
vocas.kiaintra.com
ktong-push.kiaintra.com
k-cubeoodev.kiaintra.com
dmis.kiaintra.com
khcbopq.kiaintra.com
k-cubesp.kiaintra.com
k-cubeoo.kiaintra.com
em.hmc.co.kr
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ktong-gw.kiaintra.com
otms.kiaintra.com
k-cubeoo.kiaintra.com
k-cubeoodev.kiaintra.com
k-cube.kiaintra.com
pis.hmc.co.kr
gpms-dev.kiaintra.com
gpms-dev.kiaintra.com
tstmgswmob.kiaintra.com
msos.kia.com
ksw.kia.co.kr
ksw.kia.co.kr
www.hyundai.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
k-cubespdev.kiaintra.com
khcbopq.kiaintra.com
tstmgswmob.kiaintra.com
ems.kiaintra.com
pis.hmc.co.kr
ksw.kia.co.kr
ktong-gw.kiaintra.com
pas.kia.com
devktong-gw.kiaintra.com
k-cubedev.kiaintra.com
ems.kiaintra.com
devktong-gw.kiaintra.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
sohamesweb.kiaintra.com
ktong-mm.kiaintra.com
tstmgsw.kiaintra.com
gpms-dev.kiaintra.com
khcbopq.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ksw.kia.co.kr
k-cubesp.kiaintra.com

Certificate

The complete raw certificate details for ems.kiaintra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZ8qBWliYPsS5+UiQw8
95u0pUp1QgwoIk4SLqz1cIzjyrwZKn8Ajsyuji8TCw+HyoOhuFIxOsadmrLWSj2r
VsFs+lP6KzmFR693rqsbnPJG0FfGrU6dQziJTULPyXXsz36LXV+IbrGlFtixMfMF
bGw3O8l40dxEU633N0jhe8EP+6rOPv/7SA/CzbVTHul85CGDdFT2meE827sac4j5
KWP9McyVlQ4I3jBtYPtdHBT1O1Ho8n3Z5ohjmkgao946hsByeJ5DwdNf4vtVWz0e
nmgWMHT3fFqY/aYHhuT/O7r17zeK6RW6VXYqzHg4BbCxsOJGLJkiXTH+wNcwGknA
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61402961134226730249578524296922819716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '137130'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seocho-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '231, Yangjae-dong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyundai Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HMG Business Team'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Korea Information Certificate Authority, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ems.kiaintra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19885731861375240917534646536281089933049112435129831925940911881553197657183540286156416697896600557681687393280865320384651986718288925724615036361088003691537662817391983020748893061481225938907477270476102336476247192366797232964774614371842170280804226706596370270227939087938089373136754207098332591863569977371428332506649244895702691275145843145967745925315432455991457353319573371908106872008338241221568517215964042276152043207099685204827783747117375775842990653934787822218679953409309830312176214926964085464495366657265803085338663441853873390004152827763262562530110362080247990760401280559536738517091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							148ef711aa4ba082da700095da76d0b4f31103cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.kiaintra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ems.kiaintra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c1dc968c50000040300483046022100d0aacd1a1debc24b648149639ae5b16b65e237b1ce4c83fe3ab39cea79d43302022100ddcec1702ea865869a1e957115783465fad648f298013971da8e8c01a641d04a0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016c1dc968e20000040300473045022100ff07b62ccdbbaa0e098a2188b1a7e745913a921f84daeab7a2499f4a4d60e20a022078710e5720463848e2b3a7972636d3c28f1151132dafbd8b42f8d03e691e8c54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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