m1.ckh.com.hk
Issued by Trusted Secure Certificate Authority DV
About this certificate
This digital certificate with serial number c7:3c:b2:83:17:b9:62:f4:73:cf:56:38:95:f7:ce:24 was issued on by Corporation Service Company.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=m1.ckh.com.hk,OU=Domain Control Validated+OU=COMODO SSL
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): c7:3c:b2:83:17:b9:62:f4:73:cf:56:38:95:f7:ce:24Serial Number (int): 264831529627851361535318623764455345700
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d1:25:a8:4e:03:b1:f0:92:cc:f1:03:6b:07:7b:6e:0e:2c:67:b1:99
AuthorityKeyId: 04:59:49:2a:41:5b:9e:0b:23:3a:ee:e7:76:72:59:ac:3c:4c:5a:33
Fingerprint (sha1): 1a:1a:cf:2b:e2:15:37:06:8c:3b:0d:ed:0c:9d:5f:a9:76:04:e1:be
Fingerprint (sha256): 51:57:ea:0a:37:cd:b9:8e:8c:d1:6e:b9:33:d1:c7:e0:1a:84:4f:d6:92:eb:10:e2:5f:8a:0f:d2:a6:07:43:e4
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl
Check the revocation status for certificate m1.ckh.com.hk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m1.ckh.com.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m1.ckh.com.hk
www.m1.ckh.com.hk
www.m1.ckh.com.hk
Other certificates including the domain name ckh.com.hk
(limited to 100 certificates)
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
Certificate
The complete raw certificate details for m1.ckh.com.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIRAMc8soMXuWL0c89WOJX3ziQwDQYJKoZIhvcNAQELBQAw gYcxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv bjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MTAwLgYDVQQD EydUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgRFYwHhcNMTkw MTE4MDAwMDAwWhcNMjEwMTE3MjM1OTU5WjBQMSEwHwYDVQQLExhEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQxEzARBgNVBAsTCkNPTU9ETyBTU0wxFjAUBgNVBAMTDW0x LmNraC5jb20uaGswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo95Y5 cWcqzaHAfcvo0pfDelx2R/QkT1zR6jZlRyiyDKo4HkS7vzixfph8daWYdlIP399f mksUq7bbbs2GbW925e7lLg+2CuvBPgsDASSoGeTtTmnz6JegBbFGIFWeEAbbQWJL +mxZJs3y46Zntmzhmk5mjjJcu5JCCWm8J1RPTm0dqHpGpWo2XxCGsBTi9xtJkHPt /UPfMtBhV03tdFUrYo+wY8PVG3vlvTFdok/XM5x7t4Fs2FkSAt+OQBdBeIDqvWFb GFHFyNr2G9re/B5f8uVPuAmt65xVAFjIbeiDB7hJYvBAPWnOS8eFUyN6FPIDTGNH ce97uCgfMLBGb8JXAgMBAAGjggNXMIIDUzAfBgNVHSMEGDAWgBQEWUkqQVueCyM6 7ud2clmsPExaMzAdBgNVHQ4EFgQU0SWoTgOx8JLM8QNrB3tuDixnsZkwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZ aHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEwUQYDVR0fBEowSDBG oESgQoZAaHR0cDovL2NybC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0 aWZpY2F0ZUF1dGhvcml0eURWLmNybDCBgwYIKwYBBQUHAQEEdzB1MEwGCCsGAQUF BzAChkBodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRp ZmljYXRlQXV0aG9yaXR5RFYuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51 c2VydHJ1c3QuY29tMCsGA1UdEQQkMCKCDW0xLmNraC5jb20uaGuCEXd3dy5tMS5j a2guY29tLmhrMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgC72d+8H4pxtZOU I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWhfK92ZAAAEAwBHMEUCIQC9qeLMnpFM fbdR/VCv5AEwoOXpQRWmx7dYBJjpb9xTngIgZDNxQ3ZZGfAaRQYO8nh57mxNP57q dciAJcnXi1V64XQAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAA AWhfK93lAAAEAwBHMEUCIQDpWmgdt1xbqghxmKjmyUeAvfjEyjnWIoq0rMTC6EHf vwIgPEs9tgeNzmPYnTYYmQ7PISUFphbCxo5/eGzFULomvF0AdwBc3EOS/uarRUSx XprUVuYQN/vV+kfcoXOUsl7m9scOygAAAWhfK93fAAAEAwBIMEYCIQDialOBhWmh eKJzfrRPr3CV1AxH6RQEyspVho74byE4wQIhALJf0Q8z+OV7CTdm//cMoiO/f+ZH 8oEWfxjl0LCpZ+X7MA0GCSqGSIb3DQEBCwUAA4IBAQBzkJBlGw7JlPxfCG11+tko 3DUs7eoN5OHjQpreD78SABsPpHyPVYtYb+7VKBaO8lkgwc0SwdynTPa2M3tnZaso qdMgNouhcUDY8fQ57uQBMN/FXA11Dobg382/ajxJXE16SI96sJndoY4m69x9xXYf sp6bVT00Kwgrpsjp4hzQxXT75qLvfmu3okPfs0uzO0dF+k7pCM+F81vy4m3NRBMN +oWfRhOfLN3Md6nEDSAk94a8CQlpV6GB8pE1VblyFArUxbGKnwFP2WYVrItDYSzU OcB/9lZ8pS/Iv9xtlYuYWPG25XgQ9Nh+vS/sXdbvom//fB3uSrnM+9BTe+iPhsp5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPeWOXFnKs2hwH3L6NKX w3pcdkf0JE9c0eo2ZUcosgyqOB5Eu784sX6YfHWlmHZSD9/fX5pLFKu2227Nhm1v duXu5S4PtgrrwT4LAwEkqBnk7U5p8+iXoAWxRiBVnhAG20FiS/psWSbN8uOmZ7Zs 4ZpOZo4yXLuSQglpvCdUT05tHah6RqVqNl8QhrAU4vcbSZBz7f1D3zLQYVdN7XRV K2KPsGPD1Rt75b0xXaJP1zOce7eBbNhZEgLfjkAXQXiA6r1hWxhRxcja9hva3vwe X/LlT7gJreucVQBYyG3ogwe4SWLwQD1pzkvHhVMjehTyA0xjR3Hve7goHzCwRm/C VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264831529627851361535318623764455345700 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority DV' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm1.ckh.com.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21330124842628355777665578820493292126035307437782260362335400839496289825370995957050124850830097668110672650267458777287761778593686098910684794069394587042225521071523052266168181659324999913588883049381847141651518542577977833963080204184200541060152570560927791417066025440078239193505184872330231876228277267149229784787184460480557861713357202701118881839242850924655896954545399341074910824052208905233347377828132975611065792644202016859470547212972217194197806340487572327661827702924348964834174661003346544728526532344100077760850126117644952932253470347832756589472253723088611728615439281737273980207703 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0459492a415b9e0b233aeee7767259ac3c4c5a33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d125a84e03b1f092ccf1036b077b6e0e2c67b199 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.ckh.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.ckh.com.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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