business.hsbc.com.hk

- HSBC Group Management Services Limited -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 0c:9f:ac:fa:a3:f5:ba:c4:fb:96:f1:5f:11:da:fc:52 was issued on by DigiCert Inc.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HSBC Group Management Services Limited

Company registration number: 09231974
Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:9f:ac:fa:a3:f5:ba:c4:fb:96:f1:5f:11:da:fc:52
Serial Number (int): 16779819582161610141720776244593359954
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:1f:24:cb:94:3a:1a:27:ec:f8:47:08:3a:8e:67:f7:ec:d6:9b:d5
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 6e:b1:b7:b7:9b:02:a8:64:1e:48:71:2e:c7:86:75:c5:9a:8d:f7:3c
Fingerprint (sha256): 32:36:f8:4b:da:0a:48:62:a3:0a:18:c4:11:99:a1:97:6a:e3:51:c0:8c:64:43:9c:24:1d:35:01:dd:33:8c:4e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate business.hsbc.com.hk

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for business.hsbc.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

business.hsbc.com.hk
business.hsbc.com.my
business.hsbc.ae
business.hsbc.com.vn
business.hsbc.com.sg
business.hsbc.com.qa
business.hsbc.co.om
business.hsbc.com.mo
business.hsbc.co.in
business.hsbc.com.cn
business.hsbc.com.bd
business.hsbc.am
business.hsbc.com.tr
business.hsbc.co.th
business.hsbc.com.tw
business.hsbc.lk
business.hsbc.com.ph
business.hsbc.com.ps
www.business.hsbc.com.ps
business.hsbc.co.nz
business.maldives.hsbc.com
business.hsbc.com.kw
business.hsbc.co.il
business.hsbc.com.bh
business.hsbc.co.id
business.hsbcamanah.com.my
gbm.hsbc.co.jp
gbm.hsbc.co.kr
hsbcqh.com.cn
hsbc.co.il
hsbc.co.jp
hsbc.co.kr
hsbc.co.th
www.hsbc.com.kw
hsbc.com.kw
hongkongbankfoundation.org.hk

Other certificates including the domain name hsbc.com.hk

(limited to 100 certificates)
www.hkgv2ls0033-ph-pprod2-security.p2g.netd2.hsbc.com.hk
www2.prodlike-site2.security.p2g.netd2.hsbc.com.hk
www.hsbcinsurance.com.cn
www.hkg2vl1719-mx-security.p2g.netd2.hsbc.com.hk
cdn.perf.hsbc.com.hk
www.epspps.hsbc.com.hk
www.hkgv2ls0199.p2g.netd2.hsbc.com.hk
www.hkg2vl1779-gb-fg.p2g.netd2.hsbc.com.hk
www.hkl20045318.p2g.netd2.hsbc.com.hk
www.hkg2vl0937-mx.p2g.netd2.hsbc.com.hk
asp.fxresearch.investment.hsbc.com.hk
www.my-dev-gws.p2g.netd2.hsbc.com.hk
www.hkg2vl0653-au.p2g.netd2.hsbc.com.hk
tmd-dev.hsbc.com.hk
www.hkg2vl1849-cn-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0942-us.p2g.netd2.hsbc.com.hk
mkd.ebanking.hsbc.com.hk
impsuat.hsbc.com.hk
www.hkg1vl0199.p2g.netd2.hsbc.com.hk
www.env615.qualityassurance.ebanking.hsbc.com.hk
mkdlcs.qualityassurance.ebanking.hsbc.com.hk
www.qualityassurance.ebroking.hsbc.com.hk
www.hkg2vl1720-ca-security.p2g.netd2.hsbc.com.hk
dco-mx-offers-uat.hsbc.com.hk
www.hkg2vl1640.p2g.netd2.hsbc.com.hk
www.hk845.p2g.netd2.hsbc.com.hk
mi.qualityassurance.ris.hsbc.com.hk
www.inmjoeyuat.p2g.netd2.hsbc.com.hk
GBV00990.gsslp.hsbc.co.uk
www.hkgv2ls0312.p2g.netd2.hsbc.com.hk
www.hkl20090755-sa-security.p2g.netd2.hsbc.com.hk
www.hkg2vl1746-ca.p2g.netd2.hsbc.com.hk
om.hkl20045269.p2g.netd2.hsbc.com.hk
mfxweb-sit.hsbc.com.hk
www.hkgv2ls0165-ph.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0497-fr.p2g.netd2.hsbc.com.hk
dev.risk-profiling-questionnaire.hsbc.com.hk
www.wrs.hsbc.com.hk
www.hkg2vl1676-lk.p2g.netd2.hsbc.com.hk
dco-cc.hsbc.com.hk
devcluster.api.p2g.netd2.hsbc.com.hk
www.hkg2vl0829-eu.p2g.netd2.hsbc.com.hk
aspwdv2.mkd.hsbc.com.hk
www.hkg2vl0745-je.p2g.netd2.hsbc.com.hk
www.hkl20044714-lk-security.p2g.netd2.hsbc.com.hk
www.hkg2vl0574-eu.p2g.netd2.hsbc.com.hk
gr-dit.hsbc.com.hk
hkskmgdcvi057.hsbc.com.hk
qualityassurance-amh-gbb-preprod2.p2g.netd2.hsbc.com.hk
www.cd600.p2g.netd2.hsbc.com.hk
www.ap554.p2g.netd2.hsbc.com.hk
www.env631.qualityassurance.ebanking.hsbc.com.hk
www.na318.p2g.netd2.hsbc.com.hk
fusion-lending-uat.hsbc.com.hk
mkdu-qualityassurance.ebanking.hsbc.com.hk
start4.hsbc.com.hk
www.assetmanagement.hsbc.com
www.ap556.p2g.netd2.hsbc.com.hk
cdn.hbbm-aem-tko-lp.hsbc.com.hk
smtp2-mx.hsbc.com.hk
payme-cms-secure.hsbc.com.hk
uat-investments3.personal-banking.hsbc.com.hk
if-api-corp-sit-ebtn.hsbc.com.hk
www.hkgv2ls0405-hk.p2g.netd2.hsbc.com.hk
www.env606.qualityassurance.ebanking.hsbc.com.hk
www.visatokenotp.qualityassurance.hsbc.com.hk
www.eu532.p2g.netd2.hsbc.com.hk
da-pbconnect-dev.privatebanking.hsbc.com.hk
www.hkg2vl0479-je.p2g.netd2.hsbc.com.hk
www.hkg2vl0913-au.p2g.netd2.hsbc.com.hk
www.gbbbanking.p2g.netd2.hsbc.com.hk
www.hkg2vl1660-ph.p2g.netd2.hsbc.com.hk
in-sit.hsbc.com.hk
www.ap530.p2g.netd2.hsbc.com.hk
www.security.online-banking.hsbc.com.hk
www.tradetracker.business.hsbc.com.hk
mkdlcu.qualityassurance.ebanking.hsbc.com.hk
www.hkl20044720-lk.p2g.netd2.hsbc.com.hk
www.hkl20043051.p2g.netd2.hsbc.com.hk
www.dco-loans-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20066668.p2g.netd2.hsbc.com.hk
www.ebroking.hsbc.com.hk
pilot.hsbc.com.vn
www.hsbc.com.sg
www.hkg2vl0541-ca.p2g.netd2.hsbc.com.hk
www.hkg2vl1382-eu.p2g.netd2.hsbc.com.hk
qualityassurance-amh-gbbsp-preprod.hsbc.com.hk
skm.services.online-banking.hsbc.com.hk
www.hkg2vl1741-us.p2g.netd2.hsbc.com.hk
www.hkl20044727-je.p2g.netd2.hsbc.com.hk
payme-cashout-secure.hsbc.com.hk
ibps.hsbc.com.hk
www.dco-ao-uat-ca.p2g.netd2.hsbc.com.hk
www.hkl20045172.p2g.netd2.hsbc.com.hk
dspuk-ci2-ext.hsbc.com.hk
ext-remoteaccess.hsbc.com.hk
pages.messaging.hsbc.com.hk
smtp1.hsbc.com.hk
mt-sit.hsbc.com.hk

Certificate

The complete raw certificate details for business.hsbc.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMYnpX8nLXHQF3v1OEOF
0xWYC8tk5lGJ6HPJ0Kh4N07eoPS0pV1A5t3q3+aJnKTmQkytiSS48CPDQ3R+iCeo
9YZLcnIfgz2udRP62eNLEfIxGAkbxaC9iCAQbRmBcz0r/x8feHdTWyz8uewgbpIG
p/nyRzattC/400SVKpmtBzlncaT+3nsc+IbClT6w2gyu6QZJknpuan5u62Epnp77
2iqbb1UnuIAFAsYR6Zg/bQMqMOOdj7ASvE047wSst2fTrn3T0ekLk6GKVVwC1XKb
xZ9mPCP6UfFoSsb6YM53Kzdl0nSRSuS/1/LWK5knp7jI5OfyMOqjvRTJTj2bf4tA
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16779819582161610141720776244593359954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '09231974'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'business.hsbc.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21810702261923824454788657510107052804966462647570794280313121924680150114559925909874776687215850703660925069454536399704110712962444582934985930815999543542843231416321500563263463428248131672922213002046105305694376411049320224362577756381415627186530011163101605937316753480415227670466230918283073224939473392298570929493899621134824611584981214753483958412739285548476624913202406349115294989281481829589195965297146617467076078157644113058652404979924784256176725549149266671352810134423690079429995239506828609019560690198627179882372906292447492064422458520749318950856333098037915839795091611492608042025057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591f24cb943a1a27ecf847083a8e67f7ecd69bd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.hsbc.com.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.maldives.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbc.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.hsbcamanah.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbm.hsbc.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbm.hsbc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcqh.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkongbankfoundation.org.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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