www.hsbc.com.tw

- HSBC Group Management Services Limited -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0c:3a:fa:91:47:7f:a1:73:9a:0e:89:c6:b7:72:b9:b4 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Group Management Services Limited

Company registration number: 09231974
Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:3a:fa:91:47:7f:a1:73:9a:0e:89:c6:b7:72:b9:b4
Serial Number (int): 16256971279826219673122221279367313844
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:ca:2b:66:81:6a:3e:7d:9c:fe:be:7b:44:ec:dd:a6:52:b1:9f:a3
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 10:17:96:13:20:20:7d:6e:fb:89:c7:60:f1:bd:92:9a:63:91:8f:4a
Fingerprint (sha256): 30:84:de:03:e0:1a:a7:83:7a:a2:6f:ed:95:79:09:39:22:a6:08:e9:59:36:11:c2:a7:89:05:5c:00:77:a1:d8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate www.hsbc.com.tw

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hsbc.com.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hsbc.com.tw
wpb.hsbc.com.tw
personal.hsbc.com.tw
www.ebanking.hsbc.com.tw
www.hsbcadvance.com.tw
www.hsbcpremier.com.tw
ebanking.hsbc.com.tw
hsbcadvance.com.tw
hsbcpremier.com.tw
hsbc.tw
www.hsbcdirect.com.tw
hsbcdirect.com.tw
www.hsbc.tw
hsbc.com.tw
cdn.hsbc.com.tw
static-origin.hsbc.com.tw
origin-www.hsbc.com.tw
forms.hsbc.com.tw

Other certificates including the domain name hsbc.com.tw

(limited to 100 certificates)
ecard-uat.hsbc.com.tw
qualityassurance.fxd.hsbc.com.tw
www.assetmanagement.hsbc.com
www.hsbc.com.tw
business.hsbc.com
www.pre-prod.assetmangement.hsbc.com.tw
uat-assetmanagement.hsbc.com.tw
b2bedge2.b2b-apac.hsbc.com
www.fxd.hsbc.com.tw
www.business.hsbc.fr
www.hsbc.com.tw
www.qualityassurance.fundexpress.hsbc.com.tw
www.about.hsbc.co.nz
business.hsbc.com
loan.apply.hsbc.com.tw
investments3.personal-banking.hsbc.com.sg
www.about.hsbc.co.nz
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
www.assetmanagement.hsbc.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
investments3.personal-banking.hsbc.com.sg
pilot.hsbc.com.tw
b2bedge1.b2b-apac.hsbc.com
www.business.hsbc.fr
loan.apply.hsbc.com.tw
www.hsbc.com.tw
events.data.hsbc.com
business.hsbc.com
www.business.hsbc.fr
investments3.personal-banking.hsbc.com.sg
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.assetmanagement.hsbc.com
www.qualityassurance.fundexpress.hsbc.com.tw
b2bedge2.b2b-apac.hsbc.com
ecard.hsbc.com.tw
www.hsbc.com.tw
www.about.hsbc.co.nz
www.hsbc.com.tw
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.fxd.hsbc.com.tw
www.hsbc.com.tw
uat-assetmanagement.hsbc.com.tw
www.assetmanagement.hsbc.com
qualityassurance.fxd.hsbc.com.tw
www.hsbc.com.tw
invest.assetmanagement.hsbc.com.tw
www.hsbc.com.tw
business.hsbc.com.hk
www.assetmanagement.hsbc.com.tw
www.hsbc.com.tw
ecard.hsbc.com.tw
www.business.hsbc.fr
www.about.hsbc.co.uk
www.hsbc.com.tw
business.hsbc.com.hk
www.assetmanagement.hsbc.com.tw
card.apply.hsbc.com.tw
business.hsbc.com.hk
www.fundexpress.hsbc.com.tw
www.fxd.hsbc.com.tw
qualityassurance.fxd.hsbc.com.tw
shop.hsbc.com.tw
ecard.hsbc.com.tw
www.assetmanagement.hsbc.com.tw
www.business.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
loan.apply.hsbc.com.tw
events.data.hsbc.com
www.business.hsbc.fr
investments.hsbc.com.tw
www.assetmanagement.hsbc.com
loan.apply.uat.hsbc.com.tw
cardsevent.hsbc.com.tw
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
uat-assetmanagement.hsbc.com.tw
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
www.business.hsbc.fr
www.hsbc.com.tw
www.tw-uat-gws.digitalPay.hsbc.com.tw
invest.assetmanagement.hsbc.com.tw
account.apply.hsbc.com.tw
ecard.hsbc.com.tw
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
investments3.personal-banking.hsbc.com.sg
www.fxd.hsbc.com.tw
www.qualityassurance.fundexpress.hsbc.com.tw
www.hsbc.com.tw
www.fxd.hsbc.com.tw
loan.apply.hsbc.com.tw
www.business.hsbc.com.hk
www.qualityassurance.fundexpress.hsbc.com.tw
cdn.hsbc.com.tw
www.assetmanagement.hsbc.com
www.business.hsbc.fr
www.assetmanagement.hsbc.com
www.about.hsbc.co.uk
www.fxd.hsbc.com.tw

Certificate

The complete raw certificate details for www.hsbc.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8IIh44Oi08/4RnRJV3V
GbwLYHBtw38wY0QLr6sZgRf7YMZgjRVEziBzEt3GpwsC31c7bqeAFucRg69QuwI3
Tp3EgRxnTKQUEKYGlqMJjxe9zWahWMVR94gE2bYzBdt/ntIlwgs1K89WfRfYq3nP
TqPQV07khVeqWnUEDQpsxUcmNIwkn9bjbsCewqmLbNfFTKHaPioAcUzQpoLWxz2W
3arkKgpdAwv0iCUkOr5aBTm0ac6pZm/spkCSt4sm2IXcrMAUeaDRn5rEgo0F07mf
ov0iKYPfnRxoDyMQSo916s8OVvKfS4Ca+HlKKFvPWheyV2m+c2dya0lRqSem/FpY
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16256971279826219673122221279367313844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '09231974'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hsbc.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23197291204188069231230064068435759113744321508801739197222137207339240348236646068631427792232636859621304286523165328480439087739664024686683529250118861609468386799009082200449490221261675105383526030093481535607533197949944767406909653941834689833513087047467416970140927652413341200111898441706135486427288132607546281120384640337042283933535910346496584413095398828034807734372032695448483473166758317312945219889858064262235933045962934206185679612727333833365988638255552889777815107989433912685196768342670589644419255553422677657195874703319684842671038417964689160607012573325338047181250055293610808203349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22ca2b66816a3e7d9cfebe7b44ecdda652b19fa3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpb.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebanking.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbcadvance.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbcpremier.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcadvance.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcpremier.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbcdirect.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcdirect.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-origin.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.hsbc.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000186789a90d30000040300473045022013a6fe7ab9b30dbae44a18bbcbea7c80b2364179e2167b21ea2b276a32c852e6022100a9b2847c1f9b1c6d5a649cdc282626f666d7ba6a5f386e1334e91b44a4ba90bc00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000186789a90f30000040300473045022100a7791550dc6458074bd2194e2167b9b04f3cfcf070b0504374bd39d51282dbc602205fc8d05386fa897376b70545a13c291080776b8580aaf809b7058de2f64701ff00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000186789a90b70000040300463044022021108e2edde81e92d17f1b301d331e6b2959aad931500befce6dee118f980a0f0220158a49ccaeead7ccb9ecf481ed4b6ad0a96eca9ec87e42fb7c1cdab3f2676aca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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