www.assetmanagement.hsbc.co.uk

- HSBC Group Management Services Limited -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 06:74:09:db:94:82:44:6a:d0:db:9b:ba:be:1e:4a:fa was issued on by DigiCert Inc.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HSBC Group Management Services Limited

Company registration number: 09231974
Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:74:09:db:94:82:44:6a:d0:db:9b:ba:be:1e:4a:fa
Serial Number (int): 8577874348914823632690601166469221114
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 47:2e:e8:a6:6f:5c:e0:82:9e:3b:0b:d4:ae:38:ce:b8:33:9a:4e:bb
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): c0:6f:4c:f1:e0:2e:0f:c7:f1:9e:6a:b9:16:a1:ff:94:93:80:35:ae
Fingerprint (sha256): 43:b8:30:8d:fe:67:f6:2d:a5:09:79:11:80:92:5f:47:b1:fd:ac:f7:95:9c:0c:a9:a0:ff:2d:e7:a9:84:dc:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate www.assetmanagement.hsbc.co.uk

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.assetmanagement.hsbc.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.assetmanagement.hsbc.co.uk
je.assetmanagement.hsbc.com
www.je.assetmanagement.hsbc.com
no.assetmanagement.hsbc.com
fi.assetmanagement.hsbc.com
reim.hsbc.fr
epargne-salariale-retraite.hsbc.fr
assetmanagement.hsbc.se
assetmanagement.hsbc.pt
assetmanagement.hsbc.pl
assetmanagement.hsbc.nl
assetmanagement.hsbc.lu
assetmanagement.hsbc.it
assetmanagement.hsbc.ie
assetmanagement.hsbc.gr
assetmanagement.hsbc.fr
assetmanagement.hsbc.es
assetmanagement.hsbc.dk
assetmanagement.hsbc.de
assetmanagement.hsbc.cz
assetmanagement.hsbc.com.mt
assetmanagement.hsbc.co.uk
assetmanagement.hsbc.ch
assetmanagement.hsbc.be
assetmanagement.hsbc.at
www.reim.hsbc.fr
www.epargne-salariale-retraite.hsbc.fr
www.assetmanagement.hsbc.se
www.assetmanagement.hsbc.pt
www.assetmanagement.hsbc.pl
www.assetmanagement.hsbc.nl
www.assetmanagement.hsbc.lu
www.assetmanagement.hsbc.it
www.assetmanagement.hsbc.ie
www.assetmanagement.hsbc.gr
www.assetmanagement.hsbc.fr
www.assetmanagement.hsbc.es
www.assetmanagement.hsbc.dk
www.assetmanagement.hsbc.de
www.assetmanagement.hsbc.cz
www.assetmanagement.hsbc.com.mt
www.assetmanagement.hsbc.ch
www.assetmanagement.hsbc.be
www.assetmanagement.hsbc.at

Other certificates including the domain name hsbc.co.uk

(limited to 100 certificates)
servicing.hsbc.co.uk
sy-evrgrn-uae.lp.hsbc.co.uk
www.cmbinsightservice.business.hsbc.co.uk
wdc-evrgrn-uae.lp.hsbc.co.uk
creditcard-msb-devstubbed.hsbc.co.uk
www.security.hsbc.co.uk
www.hsbc.co.uk
www.sg-gws.hsbc.co.uk
wdc-dtest-ukpib.gsslp.hsbc.co.uk
view.mail01.hsbc.co.uk
futurefocus.staff.hsbc.co.uk
anycremoteaccess.hsbc.co.uk
www.business.hsbc.co.uk
wdc-dtest-ukpib.lp.hsbc.co.uk
dco-loans-uat.lp.hsbc.co.uk
sy-fdib.gsslp.hsbc.co.uk
wdc-evrgrn-ms.lp.hsbc.co.uk
saas.hsbc.co.uk
portal.intermediaries.hsbc.co.uk
GBV00990.gsslp.hsbc.co.uk
www.m.services.online-banking.hsbc.co.uk
online-banking.business.hsbc.co.uk
online.email.hsbc.co.uk
maint-wdc.servicing.hsbc.co.uk
oam.hsbc.co.uk
www.business.hsbc.co.uk
wdc-evrgrn-ukpib.lp.hsbc.co.uk
live.hsbc.co.uk
wdc-dtest-evrgrn-ms.lp.hsbc.co.uk
www.security.hsbc.co.uk
online-banking-test.business.hsbc.co.uk
sygdc.exconnect.hsbc.co.uk
api-sy.hsbc.co.uk
wdc-ukpib-gplfx.lp.hsbc.co.uk
sy-hssidi.lp.hsbc.co.uk
www.assetmanagement.hsbc.com
wdc-ukiif-filedownloadservice.gsslp.hsbc.co.uk
www.wdc.maint.appointmentbooking.hsbc.co.uk
sy-rbp2-ohd.gsslp.hsbc.co.uk
dtest-ukpib.lp.hsbc.co.uk
contactcentre.hsbc.co.uk
sylp.security.hsbc.co.uk
sygdc-hsbcadvance.gsslp.hsbc.co.uk
dco-loans-uat.lp.hsbc.co.uk
lp.online-banking.business.hsbc.co.uk
www.uk-gws.hsbc.co.uk
www.security.hsbc.co.uk
wdc-dtest-evrgrn-ukbib.lp.hsbc.co.uk
sy-prb.gsslp.hsbc.co.uk
creditindication.business.hsbc.co.uk
advancemembers.hsbc.co.uk
services-platform-b1-uat.business.hsbc.co.uk
pdfservice.hsbc.co.uk
www.hsbc.co.uk
sy.lp.appointmentbooking.online-banking.hsbc.co.uk
dco-ao-uat.lp.hsbc.co.uk
UK.Cheque.Client.Prod.2.IPSL.hsbc.co.uk
fatca-hk-link.hsbc.co.uk
www.services.online-banking.hsbc.co.uk
tx.fguk.hsbc.com
www.biciban.hsbc.co.uk
gbv00999.gsslp.hsbc.co.uk
link.hsbc.co.uk
nw-uaeao.gsslp.hsbc.co.uk
www.premier-golf-network.hsbc.co.uk
GBWDC300VG032.mra-emea-uat.hsbc.com
www.uniphitest.hsbc.co.uk
wdc.maint.pbgb.hsbc.co.uk
wdc-evrgrn-ms.lp.hsbc.co.uk
dip-cert.online-mortgages.hsbc.co.uk
wdclp.m.services.online-banking.hsbc.co.uk
globalinvestments.hsbc.co.uk
insurance-online-iipliveproving.hsbc.co.uk
wdc-pk.gsslp.hsbc.co.uk
hsss-lp.hsbc.co.uk
www2.trading.investdirect.hsbc.co.uk
api-sy.hsbc.co.uk
www.assetmanagement.hsbc.com
staffremoteaccess2.hsbc.co.uk
www.makeaclaim.hsbc.co.uk
www.maint-file-online-banking.hsbc.co.uk
ob-preprod.business.hsbc.co.uk
www.ukdabao-fileservice.hsbc.co.uk
san-12-s10.tlsprovisioning.exacttarget.com
nwndc-hsbcadvance.gsslp.hsbc.co.uk
wdc-pdf.gsslp.hsbc.co.uk
intermediaryupdate.hsbc.co.uk
sy-mortgageswitcher.lp.hsbc.co.uk
link.hsbc.co.uk
wdc-stp.gsslp.hsbc.co.uk
dsp.hsbc.co.uk
ukpib-fileservice.hsbc.co.uk
www.personalisedloanquote.hsbc.co.uk
ukpib-fileservice.hsbc.co.uk
fatca-palestine-link.hsbc.co.uk
sylp.m.services.online-banking.hsbc.co.uk
fatca-bangladesh-link.hsbc.co.uk
www.investments.hsbc.co.uk
uat.market.privatebanking.hsbc.co.uk
www.tmo.hsbc.co.uk

Certificate

The complete raw certificate details for www.assetmanagement.hsbc.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LGSh6o1R7KjK1C9WfKZ
yvRJ8tDAZHntwtQm82yfiHYv4fWpB28l6FGnaCyyY+NsMvXLYQ/TJUkMscDi04v5
t+jZaY7BigngJa5TbNe9tjICcnDCRy2M/PyTvcCUA7hJuRbOGiltYgnzdWrGGbU3
K6sUTGiYv9mg4aNhnK07pdikNRiErTtJu28GbXFXuBcZRMhU+c9FimqXQst2QkpH
R7y0A4fkyowALF0nsCsj2FryC5qGVFsUYQgnMAxls9zcoAr4KerhmfNC3INmKg8w
5zIMT6B8QmkZN76UwFuXDLn8SncMPnyGx7x/LvPCsZnHsfBEzUkYUxhaPbx1isWa
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8577874348914823632690601166469221114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '09231974'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.assetmanagement.hsbc.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27355038078082336584277813368065149749596577223769258778204106668180749669484260654784505561457453052799180711743107127106302397166627848503992630166075503956123055893568246041713806575893840885383508630562881061400715094441739943873257904084417330502488741201772863074216396263850472678024707115034481314302236807125729532593533253367057463420876993880615322255241342562679273843181770529125423813203466266359095463725001600944570046313206184792800295321807325550524707462679980457368355366140831565446203015175184506631880024420981890656299777198674364287358519856076780901427652946890646349862775791407672355822231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							472ee8a66f5ce0829e3b0bd4ae38ceb8339a4ebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'je.assetmanagement.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.je.assetmanagement.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no.assetmanagement.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.assetmanagement.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epargne-salariale-retraite.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.hsbc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epargne-salariale-retraite.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagement.hsbc.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d465af394000004030047304502203c60fcece9c4859492f941aecbfb54229b50036f3a1fb048c017f8feaacd3e32022100b1bdff4bc2685404a005e86a7ffe9ab78f7df5469c5eaa7620af23fc5048490b0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d465af36b0000040300483046022100971e02f1c4725e47a4c3bf0ae6c5b5b71afacc789f2a4b8407be38d2a11cda9e022100966d24c2e56756ce9ee95633859c68200da0e68bde07f84708741bfcb3a6a0d7007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d465af3940000040300473045022100c6efb94e780fa3b075769bcb0e1289c833cb812016d6e05f6f2927f629a28b9d022068568eff548ae53b28d4ca63bed73081985f41f756f36077f328b1558fe5392e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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